a9/0x260 [ 2578.850995] ? __ia32_sys_read+0xb0/0xb0 [ 2578.851851] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2578.852959] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2578.854042] do_syscall_64+0x33/0x40 [ 2578.854825] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2578.855908] RIP: 0033:0x7f50b03cfb19 [ 2578.856691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2578.860588] RSP: 002b:00007f50ad945188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2578.862193] RAX: ffffffffffffffda RBX: 00007f50b04e2f60 RCX: 00007f50b03cfb19 [ 2578.863681] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2578.865181] RBP: 00007f50ad9451d0 R08: 0000000000000000 R09: 0000000000000000 [ 2578.866693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2578.868188] R13: 00007ffc84a4d5bf R14: 00007f50ad945300 R15: 0000000000022000 [ 2578.869739] CPU: 0 PID: 12680 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2578.871258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2578.873025] Call Trace: [ 2578.873587] dump_stack+0x107/0x167 [ 2578.874354] should_fail.cold+0x5/0xa [ 2578.875158] ? create_object.isra.0+0x3a/0xa20 [ 2578.876119] should_failslab+0x5/0x20 [ 2578.876934] kmem_cache_alloc+0x5b/0x310 [ 2578.877793] ? mark_held_locks+0x9e/0xe0 [ 2578.878656] create_object.isra.0+0x3a/0xa20 [ 2578.879580] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2578.880660] kmem_cache_alloc_bulk+0x168/0x320 [ 2578.881643] io_submit_sqes+0x6fe6/0x8610 [ 2578.882552] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2578.883606] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2578.884627] ? find_held_lock+0x2c/0x110 [ 2578.885496] ? io_submit_sqes+0x8610/0x8610 [ 2578.886418] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2578.887441] ? wait_for_completion_io+0x270/0x270 [ 2578.888462] ? rcu_read_lock_any_held+0x75/0xa0 [ 2578.889452] ? vfs_write+0x354/0xb10 [ 2578.890236] ? fput_many+0x2f/0x1a0 [ 2578.891010] ? ksys_write+0x1a9/0x260 [ 2578.891820] ? __ia32_sys_read+0xb0/0xb0 [ 2578.892682] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2578.893802] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2578.894894] do_syscall_64+0x33/0x40 [ 2578.895683] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2578.896784] RIP: 0033:0x7f989282fb19 [ 2578.897579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2578.901484] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2578.903098] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2578.904607] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2578.906116] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2578.907636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2578.909151] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 05:58:37 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="91e53982000000002e2f66696c653000"]) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0xbe0}, 0xe) accept(0xffffffffffffffff, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x3f, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8902, 0x0) ioctl$SG_IO(r1, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDGETLED(0xffffffffffffffff, 0x4b44, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg1\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x20008111}, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) 05:58:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x0) 05:58:38 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 05:58:38 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3600000000000000, 0x0, 0x0) 05:58:38 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) syz_io_uring_setup(0x404c, &(0x7f0000000280)={0x0, 0x9b21, 0x4, 0x2, 0x29e}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001500), &(0x7f0000001480)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000014c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000001440)={&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/189, 0xbd}], 0x1, &(0x7f0000000440)=""/4096, 0x1000}, 0x0, 0x40012020, 0x1, {0x3, r4}}, 0xffff) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:38 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x2]}, 0x8, 0x80000) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, r1, 0x0) r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) syz_io_uring_setup(0x404c, &(0x7f0000000280)={0x0, 0x9b21, 0x8, 0x2, 0x1d9, 0x0, r3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r4 = syz_io_uring_setup(0x13b7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x83}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x6, 0x1, 0x1, 0x0, 0x2, 0x0, {0x1, r8}}, 0x9) r9 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fallocate(r9, 0x0, 0x20, 0x2) 05:58:38 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat(r3, &(0x7f0000000240)='./file0/file0\x00', 0x488800, 0x26) dup3(0xffffffffffffffff, r5, 0x80000) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2579.379218] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2593.298274] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. 05:58:52 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a00, 0x0, 0x0, 0x0) 05:58:52 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2400) 05:58:52 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) 05:58:52 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="98000000200039040000e5ffffff0000020000000dc0c23671f1a964651e4d52c3dc9432e6af000060c901a7ea83dce8f6a9c36adbbf7c23348ed75a7bf5116e03f38056144e579e46004fbfb9ae99572129d57aa41a4c792b56978ebd2e72f57cbc4145d7bcd879afed4e97abd691d56cf2d815f272170c00110000000000000000655e381211079b3ec2ac35557eb5758500bb3e3c2686d40f485f757e7bd51e163e9c2394010400000000000034b64631cba457c59e6d0eae9098c89e3c7aa8b1cbc03bd674263161cff69945516614595dfad881c353d7fb9bbdc2fb19f3306b4f29f5ac8dddb92ee4fe33f6e190dffd186aa055b9a9547a834f1d619073f3ccf4b3acda5d78a8cff254a2de72f20938d689ca4044fab0a3ee36278183e00f05d56ee58c70cc78f1fe11e55c898d61e09dd9ec4b060000000000000006ffd93de78dd56ff6fabb99fb6b42eb449d317ff0f62c982878d984496c08a7a672102affbb245b18bb39d4a7b9a75298857b75fa243b23c8464e59eb7fd89947c9213bca5dc0b85ccc521acda794895462c77f5ff370f89a2e870f5d485e58951dd7d1e27236dc52ce2c5ad9c73e0a61401a4a516c41604d7981f0c5d28db9d69e06008070a1c8a29ab4b046f86a311abc00000000000000000000000021d58c77edb293cc9578f585bdd701f9ee210643275542afa54cb35bead6ff06f9faacfe22aecf3a338b66d6b6d7493b8154647492b7504ee04560f3f09be3740b31fc8e83b0d8d71b009490cc8c05463d87a3dc636dd21e096d9d81c6d82e6476e7d92eac37b40eabf6c87bcf97f4e81c20d6cbc305948014b499ce164cd61e37a219f9e9d6192534a1e19508041dee4e6388531d075a48f73d985675042259c55328516aa0d7714a86cb02c54b353075a75bd6c97f07e67799bb3c4acdf717de323a07b094965969ea17dedd4e913cc697ce6454df791c397f653bc1d2408fe440061011d098bba54b0d10a129c468dc1c556c655499d5a8d997d7ba122c42209860f8dd4e3f2993f60563fbb3017e102c0ba23b7a165e666393c89f528000e9545d150b98be854f41773afda6d73adb0f00d1a977cbdb5c3cb7e00897420f0df622573b78bd6c04d38822dc8a2c0a34984c28fe9b13010e182ad700007186202d8177d60129be4d487ab48759eabcb23ff4fc949ab9a8cd38da8a61f19264c8e4b5d1e970833d90243c59873a636ae730fe076d26b11dbacae6340a3731f28b20802320f7f5fa8b4696496e3d89fd661085f68671c475801067ae476518ba8dfb5debfa903eb43dae9027a7571bd8a58d580a9723db2ab6edc9fab4aa32c0ee4cbe4080be95e2e99e51e55498be5ea9c924197dee6cc452600c28762923ff892f3586a81d750001000000000000c934f87c74eca1a932444e5206eab80110b646a3e84f2388b199177a4f70d347dd3b6605d625730d85afddcafafa34e9312f292572370efca259c7908142d49ced93f4ee0e48b0eb91a9e6cad13754a0c2cce7a393b79abb5930819ce674714589527cfef57c05454585069913cb794ea187e9920caf5fbe9d729792395e8afa225e2625ba1b6cf6b0b98e2b35356136ac21a47823b5a68d3a2f2a1d20d5e111bd8b470e41fe0312"], 0x98}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$addseals(r0, 0x409, 0x8) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000240)) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r1, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x0) 05:58:52 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) 05:58:52 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c00000000000000, 0x0, 0x0) 05:58:52 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000002c0)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug={'debug', 0x3d, 0x924}}, {@nodevmap}, {@noextend}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@afid={'afid', 0x3d, 0x345}}]}}) [ 2593.347277] FAULT_INJECTION: forcing a failure. [ 2593.347277] name failslab, interval 1, probability 0, space 0, times 0 [ 2593.350002] CPU: 0 PID: 12740 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2593.351465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2593.353219] Call Trace: [ 2593.353780] dump_stack+0x107/0x167 [ 2593.354549] should_fail.cold+0x5/0xa [ 2593.355302] FAULT_INJECTION: forcing a failure. [ 2593.355302] name failslab, interval 1, probability 0, space 0, times 0 [ 2593.355365] ? create_object.isra.0+0x3a/0xa20 [ 2593.358686] should_failslab+0x5/0x20 [ 2593.359489] kmem_cache_alloc+0x5b/0x310 [ 2593.360348] ? mark_held_locks+0x9e/0xe0 [ 2593.361224] create_object.isra.0+0x3a/0xa20 [ 2593.362145] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2593.363209] kmem_cache_alloc_bulk+0x168/0x320 [ 2593.364176] io_submit_sqes+0x6fe6/0x8610 [ 2593.365077] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2593.366125] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2593.367141] ? find_held_lock+0x2c/0x110 [ 2593.367997] ? io_submit_sqes+0x8610/0x8610 [ 2593.368917] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2593.369930] ? wait_for_completion_io+0x270/0x270 [ 2593.370946] ? rcu_read_lock_any_held+0x75/0xa0 [ 2593.371925] ? vfs_write+0x354/0xb10 [ 2593.372704] ? fput_many+0x2f/0x1a0 [ 2593.373516] ? ksys_write+0x1a9/0x260 [ 2593.374314] ? __ia32_sys_read+0xb0/0xb0 [ 2593.375176] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2593.376275] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2593.377367] do_syscall_64+0x33/0x40 [ 2593.378145] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2593.379215] RIP: 0033:0x7f989282fb19 [ 2593.379999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2593.383868] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2593.385471] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2593.386973] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2593.388475] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2593.389972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2593.391472] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 [ 2593.393014] CPU: 1 PID: 12739 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2593.394506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2593.396256] Call Trace: [ 2593.396825] dump_stack+0x107/0x167 [ 2593.397610] should_fail.cold+0x5/0xa [ 2593.398425] ? __iomap_dio_rw+0x1ee/0x1110 [ 2593.399320] should_failslab+0x5/0x20 [ 2593.400129] kmem_cache_alloc_trace+0x55/0x320 [ 2593.401120] __iomap_dio_rw+0x1ee/0x1110 [ 2593.401996] ? lock_release+0x680/0x680 [ 2593.402845] ? fsnotify+0x1570/0x1570 [ 2593.403655] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2593.404637] ? down_read_trylock+0x193/0x350 [ 2593.405570] ? ext4_file_read_iter+0x356/0x4c0 [ 2593.406541] ? rwsem_can_spin_on_owner+0x250/0x250 [ 2593.407584] iomap_dio_rw+0x31/0x90 [ 2593.408364] ext4_file_read_iter+0x2c7/0x4c0 [ 2593.409299] ? ext4_release_file+0x380/0x380 [ 2593.410235] io_read+0x2dc/0x11e0 [ 2593.410972] ? lock_chain_count+0x20/0x20 [ 2593.411857] ? kiocb_done+0xc90/0xc90 [ 2593.412664] ? mark_lock+0xf5/0x2df0 [ 2593.413471] ? lock_chain_count+0x20/0x20 [ 2593.414362] ? mark_held_locks+0x9e/0xe0 [ 2593.415230] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2593.416372] ? trace_hardirqs_on+0x5b/0x180 [ 2593.417307] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2593.418465] ? __lock_acquire+0xbb1/0x5b00 [ 2593.419365] io_issue_sqe+0x2e8a/0x77b0 [ 2593.420218] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2593.421333] ? lock_chain_count+0x20/0x20 [ 2593.422213] ? __is_insn_slot_addr+0x14c/0x290 [ 2593.423202] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2593.424316] ? io_connect+0x610/0x610 [ 2593.425138] ? lock_acquire+0x197/0x470 [ 2593.425980] ? find_held_lock+0x2c/0x110 [ 2593.426866] ? __fget_files+0x2cf/0x520 [ 2593.427708] ? lock_downgrade+0x6d0/0x6d0 [ 2593.428592] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2593.429750] __io_queue_sqe+0x90/0x9d0 [ 2593.430581] ? io_issue_sqe+0x77b0/0x77b0 [ 2593.431452] ? __fget_files+0x2f8/0x520 [ 2593.432291] ? io_prep_rw+0x7f5/0x1050 [ 2593.433129] io_submit_sqes+0x44aa/0x8610 [ 2593.434036] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2593.435094] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2593.436117] ? find_held_lock+0x2c/0x110 [ 2593.436991] ? io_submit_sqes+0x8610/0x8610 [ 2593.437907] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2593.438928] ? wait_for_completion_io+0x270/0x270 [ 2593.439951] ? rcu_read_lock_any_held+0x75/0xa0 [ 2593.440944] ? vfs_write+0x354/0xb10 [ 2593.441733] ? fput_many+0x2f/0x1a0 [ 2593.442503] ? ksys_write+0x1a9/0x260 [ 2593.443312] ? __ia32_sys_read+0xb0/0xb0 [ 2593.444171] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2593.445288] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2593.446381] do_syscall_64+0x33/0x40 [ 2593.447169] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2593.448254] RIP: 0033:0x7f50b03cfb19 [ 2593.449053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2593.452957] RSP: 002b:00007f50ad945188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2593.454568] RAX: ffffffffffffffda RBX: 00007f50b04e2f60 RCX: 00007f50b03cfb19 [ 2593.456086] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2593.457608] RBP: 00007f50ad9451d0 R08: 0000000000000000 R09: 0000000000000000 [ 2593.459124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2593.460644] R13: 00007ffc84a4d5bf R14: 00007f50ad945300 R15: 0000000000022000 05:58:52 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:52 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a00) 05:58:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x0) 05:58:52 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xa0000, 0x0) openat(r5, &(0x7f0000000280)='./file0\x00', 0x28000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:52 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) 05:58:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x2, 0x0) 05:58:52 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x7f51010000000000, 0x0, 0x0) 05:58:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x0) [ 2593.979860] FAULT_INJECTION: forcing a failure. [ 2593.979860] name failslab, interval 1, probability 0, space 0, times 0 [ 2593.982926] CPU: 0 PID: 12768 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2593.984522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2593.986435] Call Trace: [ 2593.987056] dump_stack+0x107/0x167 [ 2593.987896] should_fail.cold+0x5/0xa [ 2593.988770] ? create_object.isra.0+0x3a/0xa20 [ 2593.989831] should_failslab+0x5/0x20 [ 2593.990710] kmem_cache_alloc+0x5b/0x310 [ 2593.991650] create_object.isra.0+0x3a/0xa20 [ 2593.992653] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2593.993834] kmem_cache_alloc_bulk+0x168/0x320 [ 2593.994926] io_submit_sqes+0x6fe6/0x8610 [ 2593.995948] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2593.997143] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2593.998307] ? find_held_lock+0x2c/0x110 [ 2593.999289] ? io_submit_sqes+0x8610/0x8610 [ 2594.000325] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2594.001482] ? wait_for_completion_io+0x270/0x270 [ 2594.002643] ? rcu_read_lock_any_held+0x75/0xa0 [ 2594.003755] ? vfs_write+0x354/0xb10 [ 2594.004641] ? fput_many+0x2f/0x1a0 [ 2594.005528] ? ksys_write+0x1a9/0x260 [ 2594.006431] ? __ia32_sys_read+0xb0/0xb0 [ 2594.007540] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2594.008848] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2594.010096] do_syscall_64+0x33/0x40 [ 2594.010975] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2594.012192] RIP: 0033:0x7f989282fb19 [ 2594.013092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2594.017462] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2594.019250] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2594.020927] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2594.022593] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2594.024261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2594.025945] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 05:59:05 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a68, 0x0, 0x0, 0x0) 05:59:05 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) 05:59:05 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x2361, &(0x7f00000002c0)={0x0, 0xc129, 0x8, 0x20000, 0x800276}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000240), 0xa7ff, 0x50080) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000340)={{0x3b, @remote, 0x4e24, 0x1, 'dh\x00', 0x24, 0xffff, 0xe}, {@multicast2, 0x4e24, 0x2000, 0x7, 0x8, 0x8}}, 0x44) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x488c2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x6, 0x1, 0x1, 0x0, 0x2, 0x0, {0x1, r6}}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x2, &(0x7f0000000480), 0x1, 0x0, 0x1, {0x0, r6}}, 0x8) 05:59:05 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3000) 05:59:05 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x4, 0x3, &(0x7f0000000300)=[{0x0, 0x0, 0x7fff}, {&(0x7f00000000c0)="c38cf7bc4643814e0c3c102f3b75e3c485e1953666867ff0b760954b5332fb483e5202228f1d3639fb7e217fc1641ed544264d6d64acb87d45fd283a67394a4e2e2701aa50bb03876578363361aeef9122b3f11fc180a7a88078783617379e9d50a70aaa5a7cb9416764cc79f78aaa19e3233560c4a9b6170a115d98d65791cb814e7913658915c75934144bdfad8f323895925d58061f0cfee517911f", 0x9d, 0xf4b2}, {&(0x7f0000000180)="5bffa097ec44ff12ea1e69793d84533c7cb8a98876a1d69640b9350e43bd6dbde6d292e3ec889a2f997ed8ca47e1ce40613b86425c9456f874799fb3e850dbcfeb73af445005e7561b8047b6d9437d7a6c73b62e7124fb2699949fe472ecbf145e1c365cd2287639641d1a0c04144114d1bc776d64b3bf20c3e73b4249f23d53201bfb8491e7b24e3c110cf6fa7d1d67d5ee06beeb1646190fdbb6bc2b1b44a917d0612a21f3a5a8a4911756e842a9b14ac53892cdeca6ea25b9228b5bc75aed64cee705e38f18640770a2a4d5d901853a031c6cc4cddff8c22897481b3c52649adbfe44f9e62e445b1bbfc9af83", 0xee, 0x7}]) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000280)) readv(r0, &(0x7f0000002500)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x2) r2 = timerfd_create(0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000002540)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x58000, 0x0) pwrite64(r2, &(0x7f0000000440)="7e676390a4d55b895b3e1b71a88e7a672d9790c58ac8e398f71d0fd999559fb9394036e6a16d46842f2ca8a8a6f80d063b1e57356bf8043c6f9d54c2d7ed0761fc2866501c15bea613abfc2787260d0deb91919d3077fbe4b0dad4d0b60b30a0f6726273344b36107cfb2dc58c", 0x6d, 0x7) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5f, 0x6428, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x5, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffdff, r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r4, 0x4b36, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000002c0)=0x1f, 0x8) ioctl$TCSBRK(r4, 0x5409, 0x400) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) signalfd4(r5, &(0x7f0000000400)={[0xe9]}, 0x8, 0x800) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0, 0x8c) 05:59:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x0) 05:59:05 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) 05:59:05 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xde00000000000000, 0x0, 0x0) [ 2606.708944] FAULT_INJECTION: forcing a failure. [ 2606.708944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2606.710472] CPU: 1 PID: 12796 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2606.711329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2606.712338] Call Trace: [ 2606.712672] dump_stack+0x107/0x167 [ 2606.713125] should_fail.cold+0x5/0xa [ 2606.713597] copy_page_to_iter+0x41e/0xf80 [ 2606.714127] generic_file_buffered_read+0xab2/0x2920 [ 2606.714766] ? pagecache_get_page+0xc80/0xc80 [ 2606.715325] generic_file_read_iter+0x33f/0x490 [ 2606.715909] ext4_file_read_iter+0x184/0x4c0 [ 2606.716453] ? ext4_release_file+0x380/0x380 [ 2606.716994] io_read+0x2dc/0x11e0 [ 2606.717441] ? kiocb_done+0xc90/0xc90 [ 2606.717915] ? mark_lock+0xf5/0x2df0 [ 2606.718372] ? lock_chain_count+0x20/0x20 [ 2606.718899] ? stack_trace_consume_entry+0x160/0x160 [ 2606.719521] ? lock_acquire+0x197/0x470 [ 2606.720015] ? __lock_acquire+0xbb1/0x5b00 [ 2606.720528] io_issue_sqe+0x2e8a/0x77b0 [ 2606.721013] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2606.721655] ? lock_chain_count+0x20/0x20 [ 2606.722179] ? __is_insn_slot_addr+0x14c/0x290 [ 2606.722740] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2606.723380] ? io_connect+0x610/0x610 [ 2606.723856] ? lock_acquire+0x197/0x470 [ 2606.724355] ? find_held_lock+0x2c/0x110 [ 2606.724857] ? __fget_files+0x2cf/0x520 [ 2606.725365] ? lock_downgrade+0x6d0/0x6d0 [ 2606.725874] __io_queue_sqe+0x90/0x9d0 [ 2606.726352] ? io_issue_sqe+0x77b0/0x77b0 [ 2606.726858] ? __fget_files+0x2f8/0x520 [ 2606.727339] ? io_prep_rw+0x7f5/0x1050 [ 2606.727815] io_submit_sqes+0x44aa/0x8610 [ 2606.728335] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2606.728939] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2606.729542] ? find_held_lock+0x2c/0x110 [ 2606.730032] ? io_submit_sqes+0x8610/0x8610 [ 2606.730560] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2606.731155] ? wait_for_completion_io+0x270/0x270 [ 2606.731752] ? rcu_read_lock_any_held+0x75/0xa0 [ 2606.732329] ? vfs_write+0x354/0xb10 [ 2606.732781] ? fput_many+0x2f/0x1a0 [ 2606.733235] ? ksys_write+0x1a9/0x260 [ 2606.733695] ? __ia32_sys_read+0xb0/0xb0 [ 2606.734191] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2606.734822] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2606.735446] do_syscall_64+0x33/0x40 [ 2606.735902] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2606.736520] RIP: 0033:0x7f989282fb19 [ 2606.736966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2606.739184] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2606.740096] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2606.740951] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2606.741826] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2606.742687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2606.743543] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 [ 2606.777096] FAULT_INJECTION: forcing a failure. [ 2606.777096] name failslab, interval 1, probability 0, space 0, times 0 [ 2606.779954] CPU: 0 PID: 12806 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2606.781844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2606.783736] Call Trace: [ 2606.784309] dump_stack+0x107/0x167 [ 2606.785119] should_fail.cold+0x5/0xa [ 2606.786054] ? create_object.isra.0+0x3a/0xa20 [ 2606.787304] should_failslab+0x5/0x20 [ 2606.788184] kmem_cache_alloc+0x5b/0x310 [ 2606.789121] create_object.isra.0+0x3a/0xa20 [ 2606.790089] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2606.791273] kmem_cache_alloc_trace+0x151/0x320 [ 2606.792283] __iomap_dio_rw+0x1ee/0x1110 [ 2606.793162] ? lock_release+0x680/0x680 [ 2606.794010] ? fsnotify+0x1570/0x1570 [ 2606.794816] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2606.795796] ? down_read_trylock+0x193/0x350 [ 2606.796724] ? ext4_file_read_iter+0x356/0x4c0 [ 2606.797702] ? rwsem_can_spin_on_owner+0x250/0x250 [ 2606.798748] iomap_dio_rw+0x31/0x90 [ 2606.799529] ext4_file_read_iter+0x2c7/0x4c0 [ 2606.800460] ? ext4_release_file+0x380/0x380 [ 2606.801395] io_read+0x2dc/0x11e0 [ 2606.802143] ? kiocb_done+0xc90/0xc90 [ 2606.802945] ? mark_lock+0xf5/0x2df0 [ 2606.803742] ? lock_chain_count+0x20/0x20 [ 2606.804630] ? stack_trace_consume_entry+0x160/0x160 [ 2606.805722] ? lock_acquire+0x197/0x470 [ 2606.806574] ? __lock_acquire+0xbb1/0x5b00 [ 2606.807473] io_issue_sqe+0x2e8a/0x77b0 [ 2606.808326] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2606.809440] ? lock_chain_count+0x20/0x20 [ 2606.810314] ? __is_insn_slot_addr+0x14c/0x290 [ 2606.811282] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2606.812383] ? io_connect+0x610/0x610 [ 2606.813204] ? lock_acquire+0x197/0x470 [ 2606.814045] ? find_held_lock+0x2c/0x110 [ 2606.814911] ? __fget_files+0x2cf/0x520 [ 2606.815752] ? lock_downgrade+0x6d0/0x6d0 [ 2606.816636] __io_queue_sqe+0x90/0x9d0 [ 2606.817481] ? io_issue_sqe+0x77b0/0x77b0 [ 2606.818354] ? __fget_files+0x2f8/0x520 [ 2606.819195] ? io_prep_rw+0x7f5/0x1050 [ 2606.820047] io_submit_sqes+0x44aa/0x8610 [ 2606.820964] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2606.822032] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2606.823055] ? find_held_lock+0x2c/0x110 [ 2606.823928] ? io_submit_sqes+0x8610/0x8610 [ 2606.824847] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2606.825881] ? wait_for_completion_io+0x270/0x270 [ 2606.826904] ? rcu_read_lock_any_held+0x75/0xa0 [ 2606.827889] ? vfs_write+0x354/0xb10 [ 2606.828674] ? fput_many+0x2f/0x1a0 [ 2606.829456] ? ksys_write+0x1a9/0x260 [ 2606.830261] ? __ia32_sys_read+0xb0/0xb0 [ 2606.831128] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2606.832240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2606.833337] do_syscall_64+0x33/0x40 [ 2606.834130] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2606.835214] RIP: 0033:0x7f50b03cfb19 [ 2606.836000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2606.839900] RSP: 002b:00007f50ad945188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2606.841516] RAX: ffffffffffffffda RBX: 00007f50b04e2f60 RCX: 00007f50b03cfb19 [ 2606.843021] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2606.844523] RBP: 00007f50ad9451d0 R08: 0000000000000000 R09: 0000000000000000 [ 2606.846043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2606.847546] R13: 00007ffc84a4d5bf R14: 00007f50ad945300 R15: 0000000000022000 05:59:05 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) 05:59:05 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3600) 05:59:05 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r1, 0x8800000) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000500)=""/73, 0x49}], 0x1, 0x5, 0xf) r2 = memfd_create(&(0x7f0000000340)='\x00', 0x0) ftruncate(r0, 0xc3f7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20aa01, 0x22) ftruncate(r2, 0x8800000) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x200800, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000fcdbdf2504000000050029000000000008000600", @ANYRES32=0x0, @ANYBLOB="59f599932e34feb95fe13dd2fb90b195e81607343ffe30a1a031327457644f7aeddb4a3a5ee6465cabba181e5fab9efc508b4aa4d703660049e4e1ac0c2660e4f16e974d7cfc5334240bf058ef4cb53bb41dd2f3"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x60000) close_range(0xffffffffffffffff, r0, 0x0) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000080)=""/200, 0x20000148}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x1154, 0x3e, 0x4, 0x70bd2d, 0x25dfdbfd, {0xd}, [@typed={0x8, 0x94, 0x0, 0x0, @u32=0x3}, @nested={0x40, 0x96, 0x0, 0x1, [@typed={0x3a, 0x22, 0x0, 0x0, @binary="2c0c4f757d6b73f9a5d75b4937b57c57c108d6451da54866b919ba386f7deb6be51422706cf2f223d4409c1520706a2240cd5fc23f84"}]}, @typed={0xd, 0x1f, 0x0, 0x0, @str='/dev/sr0\x00'}, @typed={0x8, 0xe, 0x0, 0x0, @u32=0x20}, @typed={0x4, 0x54}, @generic="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", @generic="3224aaa73b2def05124035faee0fee3cb4f53bbb3bf5a15e3ddf448abb88623f75d1d51c78b3961793c43052d4182e5f270a49cbb533a944884bfeec7d4e0547e94d9ea8e4c019731433a647fcee25f6d8109df520eccbf8a54718cdad71a7fe58d47556c60c8a1d66cd794fd07f8bad9ad8c68d0a528030022a2c54ccccbfa99a6ef43f3ce183adf4b1eaa00dbaae7eff82a468f0b15a22a537d902844db56c813bd068b1f412eb31f9af4bfb5f14c87f26975a6ea3d96973e52bf70503922481be87351dd488942b382f9f01e205bfa341d626a4fb0745df"]}, 0x1154}}, 0x8000) 05:59:06 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffffffffffff, 0x0, 0x0) 05:59:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(0xffffffffffffffff, 0x0, r2, 0x0, 0x200f5ef, 0x0) [ 2606.989611] FAULT_INJECTION: forcing a failure. [ 2606.989611] name failslab, interval 1, probability 0, space 0, times 0 [ 2606.992616] CPU: 0 PID: 12819 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2606.994193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2606.995965] Call Trace: [ 2606.996536] dump_stack+0x107/0x167 [ 2606.997318] should_fail.cold+0x5/0xa [ 2606.998121] ? create_object.isra.0+0x3a/0xa20 [ 2606.999093] should_failslab+0x5/0x20 [ 2606.999895] kmem_cache_alloc+0x5b/0x310 [ 2607.000762] ? mark_held_locks+0x9e/0xe0 [ 2607.001639] create_object.isra.0+0x3a/0xa20 [ 2607.002567] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2607.003657] kmem_cache_alloc_bulk+0x168/0x320 [ 2607.004629] io_submit_sqes+0x6fe6/0x8610 [ 2607.005584] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2607.006651] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2607.007662] ? find_held_lock+0x2c/0x110 [ 2607.008526] ? io_submit_sqes+0x8610/0x8610 [ 2607.009448] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2607.010472] ? wait_for_completion_io+0x270/0x270 [ 2607.011477] ? rcu_read_lock_any_held+0x75/0xa0 [ 2607.012446] ? vfs_write+0x354/0xb10 [ 2607.013249] ? fput_many+0x2f/0x1a0 [ 2607.014008] ? ksys_write+0x1a9/0x260 [ 2607.014828] ? __ia32_sys_read+0xb0/0xb0 [ 2607.015681] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2607.016786] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2607.017893] do_syscall_64+0x33/0x40 [ 2607.018681] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2607.019774] RIP: 0033:0x7f989282fb19 [ 2607.020563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2607.024488] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2607.026100] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2607.027630] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2607.029142] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2607.030643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2607.032148] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 05:59:06 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) [ 2607.117589] FAULT_INJECTION: forcing a failure. [ 2607.117589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2607.119057] CPU: 1 PID: 12832 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2607.119853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2607.120818] Call Trace: [ 2607.121147] dump_stack+0x107/0x167 [ 2607.121577] should_fail.cold+0x5/0xa [ 2607.122031] _copy_from_user+0x2e/0x1b0 [ 2607.122510] iovec_from_user+0x141/0x400 [ 2607.122989] __import_iovec+0x67/0x590 [ 2607.123451] io_import_iovec+0x581/0x1120 [ 2607.123943] ? io_complete_rw+0x230/0x230 [ 2607.124430] ? kiocb_done+0x16b/0xc90 [ 2607.124878] io_read+0xe14/0x11e0 [ 2607.125303] ? __is_insn_slot_addr+0x14c/0x290 [ 2607.125851] ? kiocb_done+0xc90/0xc90 [ 2607.126304] ? mark_lock+0xf5/0x2df0 [ 2607.126743] ? register_lock_class+0xbb/0x17b0 [ 2607.127282] ? arch_stack_walk+0x99/0xf0 [ 2607.127768] ? lock_chain_count+0x20/0x20 [ 2607.128257] ? is_dynamic_key+0x1e0/0x1e0 [ 2607.128749] ? __lock_acquire+0x1657/0x5b00 [ 2607.129282] io_issue_sqe+0x2e8a/0x77b0 [ 2607.129749] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2607.130365] ? lock_chain_count+0x20/0x20 [ 2607.130844] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2607.131457] ? io_connect+0x610/0x610 [ 2607.131900] ? lock_acquire+0x197/0x470 [ 2607.132360] ? mark_held_locks+0x9e/0xe0 [ 2607.132843] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2607.133463] __io_queue_sqe+0x90/0x9d0 [ 2607.133925] ? io_issue_sqe+0x77b0/0x77b0 [ 2607.134405] ? io_prep_rw+0x557/0x1050 [ 2607.134863] ? io_prep_rw+0x57c/0x1050 [ 2607.135319] ? io_prep_rw+0x7f5/0x1050 [ 2607.135782] io_submit_sqes+0x44aa/0x8610 [ 2607.136291] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2607.136873] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2607.137445] ? find_held_lock+0x2c/0x110 [ 2607.137930] ? io_submit_sqes+0x8610/0x8610 [ 2607.138444] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2607.139019] ? wait_for_completion_io+0x270/0x270 [ 2607.139599] ? rcu_read_lock_any_held+0x75/0xa0 [ 2607.140161] ? vfs_write+0x354/0xb10 [ 2607.140608] ? fput_many+0x2f/0x1a0 [ 2607.141034] ? ksys_write+0x1a9/0x260 [ 2607.141496] ? __ia32_sys_read+0xb0/0xb0 [ 2607.141976] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2607.142597] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2607.143208] do_syscall_64+0x33/0x40 [ 2607.143657] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2607.144256] RIP: 0033:0x7f50b03cfb19 [ 2607.144701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2607.146864] RSP: 002b:00007f50ad945188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2607.147735] RAX: ffffffffffffffda RBX: 00007f50b04e2f60 RCX: 00007f50b03cfb19 [ 2607.148558] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2607.149392] RBP: 00007f50ad9451d0 R08: 0000000000000000 R09: 0000000000000000 [ 2607.150215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2607.151027] R13: 00007ffc84a4d5bf R14: 00007f50ad945300 R15: 0000000000022000 05:59:18 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x4010, r3, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4004, @fd_index, 0x85e, 0x0, 0x0, 0x4, 0x0, {0x1, r7}}, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:18 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffffffffffff, 0x0, 0x0) 05:59:18 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3000, 0x0, 0x0, 0x0) 05:59:18 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) 05:59:18 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3c00) 05:59:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(0xffffffffffffffff, 0x0, r2, 0x0, 0x200f5ef, 0x0) 05:59:18 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) 05:59:18 executing program 4: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x410000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x3, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x800022, &(0x7f0000000140)={[{@lazytime}, {@jqfmt_vfsold}], [{@fsmagic={'fsmagic', 0x3d, 0x2}}, {@smackfsdef={'smackfsdef', 0x3d, '\xafCd\b\xac\xae\xa4\xa8W\xc8\x9920\xbf\x92\x91\x1d\x1b\xba\xec\xab\xd7\x9a\xd7\xea\xd4/\x8c\xbf[\xba\x84\xbd\xc10<\xb5\xea\xbcV)\xa0\x90(\xec\x85\x89\xbca\x89\x1b\x97\xdd\x18\x9a\xd1\xdf\x82\x1d\x8c\xb0\x87\xfe\x94lv\xc6\x91\x05]\x15\x0487\x94\xd3j?\x89\xd2\xe1\xf8\x9f\x9eY@\xac'}}]}) [ 2619.834554] FAULT_INJECTION: forcing a failure. [ 2619.834554] name failslab, interval 1, probability 0, space 0, times 0 [ 2619.837221] CPU: 1 PID: 12854 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2619.838675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2619.840425] Call Trace: [ 2619.840993] dump_stack+0x107/0x167 [ 2619.841776] should_fail.cold+0x5/0xa [ 2619.842582] ? io_setup_async_rw+0x180/0x580 [ 2619.843528] should_failslab+0x5/0x20 [ 2619.844336] __kmalloc+0x72/0x390 [ 2619.845090] io_setup_async_rw+0x180/0x580 [ 2619.845987] ? iov_iter_restore+0x195/0x3a0 [ 2619.846907] io_read+0x775/0x11e0 [ 2619.847652] ? kiocb_done+0xc90/0xc90 [ 2619.848460] ? mark_lock+0xf5/0x2df0 [ 2619.849261] ? lock_chain_count+0x20/0x20 [ 2619.850143] ? stack_trace_consume_entry+0x160/0x160 [ 2619.851221] ? lock_acquire+0x197/0x470 [ 2619.852067] ? __lock_acquire+0xbb1/0x5b00 [ 2619.852955] io_issue_sqe+0x2e8a/0x77b0 [ 2619.853855] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2619.854950] ? lock_chain_count+0x20/0x20 [ 2619.855818] ? __is_insn_slot_addr+0x14c/0x290 [ 2619.856780] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2619.857879] ? io_connect+0x610/0x610 [ 2619.858685] ? lock_acquire+0x197/0x470 [ 2619.859516] ? find_held_lock+0x2c/0x110 [ 2619.860377] ? __fget_files+0x2cf/0x520 [ 2619.861229] ? lock_downgrade+0x6d0/0x6d0 [ 2619.862099] __io_queue_sqe+0x90/0x9d0 [ 2619.862918] ? io_issue_sqe+0x77b0/0x77b0 [ 2619.863788] ? __fget_files+0x2f8/0x520 [ 2619.864637] ? io_prep_rw+0x7f5/0x1050 [ 2619.865473] io_submit_sqes+0x44aa/0x8610 [ 2619.866370] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2619.867412] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2619.868427] ? find_held_lock+0x2c/0x110 [ 2619.869294] ? io_submit_sqes+0x8610/0x8610 [ 2619.870206] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2619.871215] ? wait_for_completion_io+0x270/0x270 [ 2619.872224] ? rcu_read_lock_any_held+0x75/0xa0 [ 2619.873219] ? vfs_write+0x354/0xb10 [ 2619.874000] ? fput_many+0x2f/0x1a0 [ 2619.874770] ? ksys_write+0x1a9/0x260 [ 2619.875568] ? __ia32_sys_read+0xb0/0xb0 [ 2619.876424] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2619.877535] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2619.878618] do_syscall_64+0x33/0x40 [ 2619.879398] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2619.880471] RIP: 0033:0x7f989282fb19 [ 2619.881259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2619.885157] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2619.886778] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2619.888257] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2619.889743] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2619.891254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2619.892736] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 05:59:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(0xffffffffffffffff, 0x0, r2, 0x0, 0x200f5ef, 0x0) 05:59:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0xfffffffc, @private0, 0xcf}}, 0x0, 0x0, 0x44, 0x0, "c88e306008edd3688c7a044c6551130400485afc4b15f433f6bbd83132e85e5d62b30e40be31c380660000000000000000000000000000000002001000"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) [ 2619.924281] FAULT_INJECTION: forcing a failure. [ 2619.924281] name failslab, interval 1, probability 0, space 0, times 0 [ 2619.927302] CPU: 1 PID: 12864 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2619.928761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2619.930510] Call Trace: [ 2619.931065] dump_stack+0x107/0x167 [ 2619.931830] should_fail.cold+0x5/0xa [ 2619.932636] ? create_object.isra.0+0x3a/0xa20 [ 2619.933606] should_failslab+0x5/0x20 [ 2619.934406] kmem_cache_alloc+0x5b/0x310 [ 2619.935267] create_object.isra.0+0x3a/0xa20 [ 2619.936184] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2619.937259] kmem_cache_alloc_bulk+0x168/0x320 [ 2619.938222] io_submit_sqes+0x6fe6/0x8610 [ 2619.939119] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2619.940162] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2619.941194] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2619.942328] ? io_submit_sqes+0x8610/0x8610 [ 2619.943238] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2619.944264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2619.945377] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2619.946510] ? trace_hardirqs_on+0x5b/0x180 [ 2619.947413] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2619.948562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2619.949661] do_syscall_64+0x33/0x40 [ 2619.950449] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2619.951522] RIP: 0033:0x7f50b03cfb19 [ 2619.952298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2619.956166] RSP: 002b:00007f50ad945188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2619.957773] RAX: ffffffffffffffda RBX: 00007f50b04e2f60 RCX: 00007f50b03cfb19 [ 2619.959273] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2619.960768] RBP: 00007f50ad9451d0 R08: 0000000000000000 R09: 0000000000000000 [ 2619.962272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2619.963769] R13: 00007ffc84a4d5bf R14: 00007f50ad945300 R15: 0000000000022000 05:59:19 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) 05:59:19 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfbffffff00000000, 0x0, 0x0) 05:59:19 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) 05:59:19 executing program 7: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x200, @empty, 0x3b930000}, 0x1c, &(0x7f0000001840)=[{&(0x7f0000000280)="d11a7e33200d64297745e9a3daefad4a0c7e57f446a679740bf8010298e7765cd2e3d7ef4a4cfdd0572005", 0x2b}, {&(0x7f0000000340)="f1d4cd547d80a9f6e3dc960dd18bfa04c76b9b2422e717e761d82d248d1bd78ccaa7d3800be5a724a968affe13b3ab87cd36ae6f204d41a730c26ce0f105daa2142709f1fb81942331efb485fd2f6aceba5c235955b59c9d5197c4f1e89eee8ed05a807bca7344b219a5c7e52848debe5f7af5e5506c97d2090a6288f09d31db6a4cba1cc54bc931a0c845b4116b549844c8e932466b3920558fc254790020817d4a88e1878d2f683654ff1f5e52470cd26352d08de92952d87f4cd0969f71fe8aa016cef95e3ebf89f9b79b94084fb6558f43ccd3cbb2be57f5e41d4be797532d5ff217c7883d8f41b7a0bd664a", 0xee}, {&(0x7f0000000440)="8abf53832992864158535838c63be1c5d8d294f5956e6e273e6de848b5b8eb1afa2c86b9f4c8468a5db9455ffa68deb5279d220c64d2f3d38716d930b0ba3ae4636b56410fc7db3a424fe3e08b61d3d61b257ca8733dfafe802f7c79c606e3efcf5a67622537fb24f1d0c43a97e730bd494dda8588c724088fd7f09279c471cebacb33762b9f2c004bb95cf6d4e2470c6db0bf06a3693d7dd2da8eb5509cf77d7b999357b4a41050dc4bd0ae74437a189d8f", 0xb2}, {&(0x7f0000000500)="87633aefafaa95b2665bb584dff0b892e15b0141627f85686d21e97e01f766cc0c04b2c27389f639695a7be3e4b89cda7d21edff896fa65a058e00302192bf75edee5ca1692fa36c811d512552b3aacacb6f1df1fe8b71e8748e29f8efa34e8b0fac229ef4b27dae2f68877f7784bf1fc7bc07303b1ce0c50bf47860666ff52911384962b265bb694d2c0986411b552d72371c4bcdff7d0aa06884f1e2c34a87b64150463b50e57873d72fa8fe", 0xad}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="436732ece35e969f79bc0813eafe9f76f5866f09416564bced80ddeea85c075325c95fb76224ef28430df3e53b36a32c21eae1a0732f306801507a61aef81d0f7325607b6263c1b0782d13ddd18496f5f746445be5760b11", 0x58}, {&(0x7f0000001640)="7ee44ec7f828963bf371decca1a0267f9b77b33c3ef7efebb15cfec653e3dd3b3e65183a5cea4acd49f4ad7aee0860182db07a1958bdc90d45dd75966685c3e00d459acf54d9224dac4fddb04a470cc8929a2e809edc431b3d952196703e53facdccb952f57991077816f9772b6136c9f33077be348bb67b9e359354aefe5460a04c43b5a631e1bd91b56088f4233a56417d07d38b5fef3e4fe4973214bf9e1d06e382d23d7a71fd2b3e4f9d6bafeda707f317e98b833107732a58bcdb08f48ec4d30ff4df85511944543007fdf4d96c5c", 0xd1}, {&(0x7f0000001740)="380ae3314950a65df68773da33f2b7b378124d3f8aab1bdfd78e23c6d0f4bbe92f09d76f4fc16a1af1bcb8ddddc90b201f8ac3bf1504554c6d6dca7ccbd3b25bdb6acdeb0567b45452e08c741d1aed23ea324f6b50c6b9b91f326aab3c55cf1a5d811f851345b46437cea999588df1fc687c9b10fc211a2869a2553eb1aacc9b80785f4e1c19ce8b78f9ed8f5ee305a83e4f2b814ac0e1ab883d85cbc382b4f8a1f94bab350234a6316843c5038b608962863df897fb33b12950fd2b095296324c7a14b840a9b66c23b27c7b6b5161", 0xcf}], 0x8, &(0x7f0000001e00)=ANY=[@ANYBLOB="14000000000000002900000008000000fe000000000000001400000000000000290000003e0000003f00000000000000140000000000000029000000430000000400000000000000980000000000000029000000390000003210000200000000fe880000000000000000000100000101fc010000000000000000000000000001fe80000000000000000000000000007f00000000000000000000000000000000ff0200000000000000000000000000012011000000000000000000000000000200000000000000000000000000000001fc010000000000000000000000000000a00100000000000029000000370000002c3000000000d2074f03c5467b68113aee4ab92528db0681a4c9844d2956dd985fd472b054be1a44d414efde7ff722ba6fadcc593473df8e82e29ae8760665dc64e2866bdd23e7f4afc1f6f6732d2c092374d3220071c5c417b453bffbe56f2c9f788906121f44a02e3adddd4886358e6678c430dcbc10e2ecc695a0e27d23ae928070757da5b9462c9483d60c919936ec300b70a421eb0b6fc7c0071d5900b4307a0e1699d2ff191ffa645914fd98a2916fd2f3237e8f06e1e7d9ec86fb9aa03b63b1a1ae0838d1adf301c181adf19277c609dd582afb614cdc7b7825af5d279004dcdc9b27221908284ec1e21363a5b928b125fdc826b01d7708e30da9517a965e9faeedab723413883c88a0d7d0480767bf3e2132826605135aa77d3df7131164d613d5f4864c650c3907646707372c92139f9bfa5fceb0de367dbc0331196e0cb19d1b6602d93cc0151ea3e865f1325c5291f8219541bf5077fd4271b86fd6fb4bc09b99d3a040a7d55b4d2f9203b9ba744f3750b91496a3f3360976f0998ba39702a568f811c20400000000a96c082b4adce83f2d10f047f1f9ea000000140000000000000029000000080000005ef6ffff00000000600000000000000029000000360000003308000000000000c910fe8000000000000000000000000000bb000100c2040000080000010007200000000006032000001000000000000000080000000000010100000000000000c2040000000500001400000000000000290000"], 0x310}}], 0x1, 0x20008004) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r2, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ftruncate(r1, 0x10001) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:19 executing program 4: pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x80) write(r1, &(0x7f0000000000)="e7", 0x1) 05:59:19 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4200) 05:59:19 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) 05:59:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r4, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x18, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x4, 0xd}]}, 0x18}}, 0x0) [ 2620.241018] FAULT_INJECTION: forcing a failure. [ 2620.241018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2620.242561] CPU: 0 PID: 12898 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2620.243353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2620.244292] Call Trace: [ 2620.244597] dump_stack+0x107/0x167 [ 2620.245012] should_fail.cold+0x5/0xa [ 2620.245453] copy_page_to_iter+0x41e/0xf80 [ 2620.245938] generic_file_buffered_read+0xab2/0x2920 [ 2620.246524] ? pagecache_get_page+0xc80/0xc80 [ 2620.247037] ? preempt_schedule_common+0x44/0x70 [ 2620.247594] generic_file_read_iter+0x33f/0x490 [ 2620.248131] ext4_file_read_iter+0x184/0x4c0 [ 2620.248633] ? ext4_release_file+0x380/0x380 [ 2620.249134] io_read+0x2dc/0x11e0 [ 2620.249557] ? kiocb_done+0xc90/0xc90 [ 2620.249989] ? mark_lock+0xf5/0x2df0 [ 2620.250416] ? lock_chain_count+0x20/0x20 [ 2620.250897] ? stack_trace_consume_entry+0x160/0x160 [ 2620.251482] ? lock_acquire+0x197/0x470 [ 2620.251940] ? __lock_acquire+0xbb1/0x5b00 [ 2620.252425] io_issue_sqe+0x2e8a/0x77b0 [ 2620.252886] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2620.253492] ? lock_chain_count+0x20/0x20 [ 2620.253967] ? lock_chain_count+0x20/0x20 [ 2620.254446] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2620.255044] ? io_connect+0x610/0x610 [ 2620.255480] ? lock_acquire+0x197/0x470 [ 2620.255931] ? find_held_lock+0x2c/0x110 [ 2620.256399] ? __fget_files+0x2cf/0x520 [ 2620.256851] ? lock_downgrade+0x6d0/0x6d0 [ 2620.257334] __io_queue_sqe+0x90/0x9d0 [ 2620.257781] ? io_issue_sqe+0x77b0/0x77b0 [ 2620.258251] ? __fget_files+0x2f8/0x520 [ 2620.258703] ? io_prep_rw+0x7f5/0x1050 [ 2620.259149] io_submit_sqes+0x44aa/0x8610 [ 2620.259636] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2620.260207] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2620.260757] ? find_held_lock+0x2c/0x110 [ 2620.261226] ? io_submit_sqes+0x8610/0x8610 [ 2620.261719] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2620.262265] ? wait_for_completion_io+0x270/0x270 [ 2620.262828] ? rcu_read_lock_any_held+0x75/0xa0 [ 2620.263358] ? vfs_write+0x354/0xb10 [ 2620.263783] ? fput_many+0x2f/0x1a0 [ 2620.264210] ? ksys_write+0x1a9/0x260 [ 2620.264645] ? __ia32_sys_read+0xb0/0xb0 [ 2620.265104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2620.265705] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2620.266295] do_syscall_64+0x33/0x40 [ 2620.266715] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2620.267303] RIP: 0033:0x7f989282fb19 [ 2620.267746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2620.269945] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2620.270819] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2620.271638] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2620.272452] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2620.273286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2620.274111] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 [ 2620.376605] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 05:59:19 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfeffffff00000000, 0x0, 0x0) 05:59:19 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) 05:59:19 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3103, 0x0, 0x0, 0x0) 05:59:19 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) 05:59:19 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) 05:59:19 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6306261f}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x20000010) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffe9a, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000cb47bd1d1e1c5bb85f61b157eead6cd537", @ANYRES16=r2, @ANYBLOB="010000000000000000002100000009001f00706879310000000005002000000000000c0005000000000000000000"], 0x34}}, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x5) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000080)={0x1, 0x3a8396c5, 0xb33db7a}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) 05:59:19 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) [ 2620.747205] FAULT_INJECTION: forcing a failure. [ 2620.747205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2620.751919] CPU: 1 PID: 12919 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2620.753416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2620.755179] Call Trace: [ 2620.755743] dump_stack+0x107/0x167 [ 2620.756518] should_fail.cold+0x5/0xa [ 2620.757342] _copy_from_user+0x2e/0x1b0 [ 2620.758185] iovec_from_user+0x141/0x400 [ 2620.759049] __import_iovec+0x67/0x590 [ 2620.759888] io_import_iovec+0x581/0x1120 [ 2620.760772] ? io_complete_rw+0x230/0x230 [ 2620.761668] ? kiocb_done+0x16b/0xc90 [ 2620.762490] io_read+0xe14/0x11e0 [ 2620.763228] ? ext4_release_file+0x380/0x380 [ 2620.764173] ? kiocb_done+0xc90/0xc90 [ 2620.764981] ? mark_lock+0xf5/0x2df0 [ 2620.765782] ? lock_chain_count+0x20/0x20 [ 2620.766677] ? stack_trace_consume_entry+0x160/0x160 [ 2620.767765] ? mark_held_locks+0x9e/0xe0 05:59:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x4, 0x2, &(0x7f0000000300)=[{0x0, 0x0, 0x7fff}, {0x0}]) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="66cf16a24c7d59a0cfcd747e17644111d90e075b011441e39cc3be7deae19dbf8a29231880f99e4ff10d021dc97fc8543e426b6d6c79a1a6990444fd7b666744ff1b61627775bfd943ee3cee5f33582dd77f43a8000f98eab94b3ac628496606377c6c70b18c0b2584ec5ce1f5170f086fafc672c8b2f2b27e46e3efeb3973516e7f04ff2ff510c35f3850e0da3fd145f2969b147058f1d9d0bce04319b6ff724dd8f6e81264a872ebd0768cf65f3a7be3f4894cc898b75d880a7ee857e371ff327b20f790fdb50d26f3bb5a1ada24e0def027026d4424202ccf05e0319a5105fc28d42014681e05d9255673bff7e7786171a79358518361c1") [ 2620.768634] ? __lock_acquire+0xbb1/0x5b00 [ 2620.769768] io_issue_sqe+0x2e8a/0x77b0 [ 2620.770620] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2620.771727] ? lock_chain_count+0x20/0x20 [ 2620.772608] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2620.773733] ? io_connect+0x610/0x610 [ 2620.774551] ? lock_acquire+0x197/0x470 [ 2620.775399] ? find_held_lock+0x2c/0x110 [ 2620.776273] ? __fget_files+0x2cf/0x520 [ 2620.777126] ? lock_downgrade+0x6d0/0x6d0 [ 2620.778018] __io_queue_sqe+0x90/0x9d0 [ 2620.778852] ? io_issue_sqe+0x77b0/0x77b0 [ 2620.779733] ? __fget_files+0x2f8/0x520 [ 2620.780582] ? io_prep_rw+0x7f5/0x1050 [ 2620.781427] io_submit_sqes+0x44aa/0x8610 [ 2620.782338] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2620.783398] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2620.784431] ? find_held_lock+0x2c/0x110 [ 2620.785310] ? io_submit_sqes+0x8610/0x8610 [ 2620.786231] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2620.787266] ? wait_for_completion_io+0x270/0x270 [ 2620.788292] ? rcu_read_lock_any_held+0x75/0xa0 [ 2620.789289] ? vfs_write+0x354/0xb10 [ 2620.790086] ? fput_many+0x2f/0x1a0 [ 2620.790852] ? ksys_write+0x1a9/0x260 [ 2620.791660] ? __ia32_sys_read+0xb0/0xb0 [ 2620.792529] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2620.793657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2620.794757] do_syscall_64+0x33/0x40 [ 2620.795549] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2620.796638] RIP: 0033:0x7f989282fb19 [ 2620.797435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2620.801350] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2620.802978] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2620.804508] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2620.806044] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2620.807566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2620.809101] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 [ 2620.815283] FAULT_INJECTION: forcing a failure. [ 2620.815283] name failslab, interval 1, probability 0, space 0, times 0 [ 2620.816782] CPU: 0 PID: 12926 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2620.817604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2620.818576] Call Trace: [ 2620.818898] dump_stack+0x107/0x167 [ 2620.819316] should_fail.cold+0x5/0xa [ 2620.819751] ? create_object.isra.0+0x3a/0xa20 [ 2620.820274] should_failslab+0x5/0x20 [ 2620.820713] kmem_cache_alloc+0x5b/0x310 [ 2620.821188] create_object.isra.0+0x3a/0xa20 [ 2620.821687] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2620.822272] kmem_cache_alloc_bulk+0x168/0x320 [ 2620.822796] io_submit_sqes+0x6fe6/0x8610 [ 2620.823284] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2620.823856] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2620.824406] ? find_held_lock+0x2c/0x110 [ 2620.824877] ? io_submit_sqes+0x8610/0x8610 [ 2620.825393] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2620.826034] ? wait_for_completion_io+0x270/0x270 [ 2620.826589] ? rcu_read_lock_any_held+0x75/0xa0 [ 2620.827118] ? vfs_write+0x354/0xb10 [ 2620.827543] ? fput_many+0x2f/0x1a0 [ 2620.827959] ? ksys_write+0x1a9/0x260 [ 2620.828393] ? __ia32_sys_read+0xb0/0xb0 [ 2620.828859] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2620.829464] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2620.830050] do_syscall_64+0x33/0x40 [ 2620.830474] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2620.831055] RIP: 0033:0x7f50b03cfb19 [ 2620.831474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2620.833567] RSP: 002b:00007f50ad945188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2620.834436] RAX: ffffffffffffffda RBX: 00007f50b04e2f60 RCX: 00007f50b03cfb19 [ 2620.835245] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2620.836051] RBP: 00007f50ad9451d0 R08: 0000000000000000 R09: 0000000000000000 [ 2620.836863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2620.837687] R13: 00007ffc84a4d5bf R14: 00007f50ad945300 R15: 0000000000022000 05:59:19 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x0, 0x0) 05:59:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) io_uring_enter(r1, 0x72de, 0x4157, 0x0, &(0x7f0000000100)={[0x3825]}, 0x8) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x10000, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d663f1afe8c4015d291", @ANYRESHEX, @ANYRESHEX=r2, @ANYRESDEC=0xee01, @ANYBLOB=',subj_user=,subj_user=oom_adj\x00,smackfstransmute=ccm-aes-c']) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) dup3(r3, r3, 0x80000) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x7f, 0x5, 0x5, 0x6, 0x0, 0x2, 0xf1500, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x3}, 0x2, 0x7, 0x8000, 0x7, 0x7, 0x1, 0x7, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0x10, r0, 0x9) gettid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) syncfs(r4) 05:59:20 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000) 05:59:33 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3600, 0x0, 0x0, 0x0) 05:59:33 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0xdf) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0x3ff, 0x0, 0x3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000240)={0x100, {0x0, 0x401, 0x100, 0x3, 0x7}}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x4004, @fd, 0x1, &(0x7f0000000bc0)=""/4096, 0x1000, 0x8}, 0x1) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xd}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0xd72d}, 0x0, 0x8, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:33 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) 05:59:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = dup2(r0, r0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffffffffffffffff}, 0x6) getsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x400448e1, &(0x7f0000000040)="0fffff257159955434d51426e2722d33544c9f543d1489559b79576265c36b1173eeb895c2ca69f324f16fd3bd397349ff950e3393cb645f98afe074cd36e1015764e19b7aeeaa2de398026dfba895653d1ed8a1b95894632e02a4fef24a592dbdeb980caa850216da0e18e8b265bf24176aa5f98e4d269b28b9d0b71a5c01eb9e50df4d8bffb74ff836d53e103ee3df56bdabf17a632ce18803ebbef1cddb71bbe6d80990d2645656") 05:59:33 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) 05:59:33 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6000000) 05:59:34 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffff7f00000000, 0x0, 0x0) 05:59:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x0, 0x0) 05:59:34 executing program 4: r0 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x8, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) [ 2634.975111] FAULT_INJECTION: forcing a failure. [ 2634.975111] name failslab, interval 1, probability 0, space 0, times 0 [ 2634.976909] CPU: 0 PID: 12963 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2634.977823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2634.978930] Call Trace: [ 2634.979278] dump_stack+0x107/0x167 [ 2634.979762] should_fail.cold+0x5/0xa [ 2634.980261] ? create_object.isra.0+0x3a/0xa20 [ 2634.980859] should_failslab+0x5/0x20 [ 2634.981377] kmem_cache_alloc+0x5b/0x310 [ 2634.981908] ? mark_held_locks+0x9e/0xe0 [ 2634.982449] create_object.isra.0+0x3a/0xa20 [ 2634.983032] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2634.983705] kmem_cache_alloc_bulk+0x168/0x320 [ 2634.984308] io_submit_sqes+0x6fe6/0x8610 [ 2634.984884] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2634.985545] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2634.986182] ? find_held_lock+0x2c/0x110 [ 2634.986730] ? io_submit_sqes+0x8610/0x8610 [ 2634.987309] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2634.987939] ? wait_for_completion_io+0x270/0x270 [ 2634.988575] ? rcu_read_lock_any_held+0x75/0xa0 [ 2634.989186] ? vfs_write+0x354/0xb10 [ 2634.989680] ? fput_many+0x2f/0x1a0 [ 2634.990157] ? ksys_write+0x1a9/0x260 [ 2634.990661] ? __ia32_sys_read+0xb0/0xb0 [ 2634.991194] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2634.991882] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2634.992551] do_syscall_64+0x33/0x40 [ 2634.993038] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2634.993710] RIP: 0033:0x7f50b03cfb19 [ 2634.994208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2634.996621] RSP: 002b:00007f50ad945188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2634.997640] RAX: ffffffffffffffda RBX: 00007f50b04e2f60 RCX: 00007f50b03cfb19 [ 2634.998571] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2634.999506] RBP: 00007f50ad9451d0 R08: 0000000000000000 R09: 0000000000000000 [ 2635.000460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2635.001409] R13: 00007ffc84a4d5bf R14: 00007f50ad945300 R15: 0000000000022000 [ 2635.004261] FAULT_INJECTION: forcing a failure. [ 2635.004261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2635.007137] CPU: 1 PID: 12974 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2635.008698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2635.010585] Call Trace: [ 2635.011196] dump_stack+0x107/0x167 [ 2635.012022] should_fail.cold+0x5/0xa [ 2635.012905] copy_page_to_iter+0x41e/0xf80 [ 2635.013889] generic_file_buffered_read+0xab2/0x2920 [ 2635.015053] ? pagecache_get_page+0xc80/0xc80 [ 2635.016073] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2635.017252] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2635.018478] ? trace_hardirqs_on+0x5b/0x180 [ 2635.019451] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2635.020691] generic_file_read_iter+0x33f/0x490 [ 2635.021747] ? ext4_file_read_iter+0x179/0x4c0 [ 2635.022784] ext4_file_read_iter+0x184/0x4c0 [ 2635.023780] ? ext4_release_file+0x380/0x380 [ 2635.024767] io_read+0x2dc/0x11e0 [ 2635.025551] ? ext4_release_file+0x380/0x380 [ 2635.026548] ? kiocb_done+0xc90/0xc90 [ 2635.027400] ? mark_lock+0xf5/0x2df0 [ 2635.028246] ? lock_chain_count+0x20/0x20 [ 2635.029189] ? stack_trace_consume_entry+0x160/0x160 [ 2635.030367] ? mark_lock+0xf5/0x2df0 [ 2635.031206] ? mark_lock+0xf5/0x2df0 [ 2635.032050] io_issue_sqe+0x2e8a/0x77b0 [ 2635.032960] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2635.034153] ? lock_chain_count+0x20/0x20 [ 2635.035086] ? __is_insn_slot_addr+0x14c/0x290 [ 2635.036116] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2635.037291] ? io_connect+0x610/0x610 [ 2635.038155] ? mark_held_locks+0x9e/0xe0 [ 2635.039087] ? mark_held_locks+0x9e/0xe0 [ 2635.040007] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2635.041185] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2635.042416] __io_queue_sqe+0x90/0x9d0 [ 2635.043310] ? io_issue_sqe+0x77b0/0x77b0 [ 2635.044236] ? io_prep_rw+0x1d/0x1050 [ 2635.045105] ? __sanitizer_cov_trace_pc+0x52/0x60 [ 2635.046200] ? io_prep_rw+0x7f5/0x1050 [ 2635.047085] io_submit_sqes+0x44aa/0x8610 [ 2635.048048] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2635.049164] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2635.050263] ? find_held_lock+0x2c/0x110 [ 2635.051181] ? io_submit_sqes+0x8610/0x8610 [ 2635.052155] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2635.053237] ? wait_for_completion_io+0x270/0x270 [ 2635.054338] ? rcu_read_lock_any_held+0x75/0xa0 [ 2635.055386] ? vfs_write+0x354/0xb10 [ 2635.056226] ? fput_many+0x2f/0x1a0 [ 2635.057048] ? ksys_write+0x1a9/0x260 [ 2635.057919] ? __ia32_sys_read+0xb0/0xb0 [ 2635.058838] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2635.060026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2635.061193] do_syscall_64+0x33/0x40 [ 2635.062040] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2635.063203] RIP: 0033:0x7f989282fb19 [ 2635.064047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2635.068189] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2635.069908] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2635.071514] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2635.073118] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2635.074741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2635.076349] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 05:59:34 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RXATTRCREATE(r4, &(0x7f0000000200)={0x7}, 0x7) sendfile(r4, r0, 0x0, 0x6f97) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="2397853dcf60e5b7ff07000000000000000000008db0efbe0bd99d3ad7f7b75fc50fa7b794e79bb7ca6ae87d7d08dd2dff443ca5c44f053912e905a281abc7651d2640c7d8f7ffcc31895da36b0edf2ace051cd257e4e15d0e99d0b741b4eba62be96f2c948ae5c7f797ae"], 0x108) setsockopt$inet6_opts(r5, 0x29, 0x36, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:34 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) [ 2635.154202] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. 05:59:34 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc000000) 05:59:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x0, 0x0) 05:59:34 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) 05:59:34 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r1, r0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x4) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r2, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2635.360406] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2635.365161] FAULT_INJECTION: forcing a failure. [ 2635.365161] name failslab, interval 1, probability 0, space 0, times 0 [ 2635.366616] CPU: 0 PID: 13000 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2635.367391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2635.368333] Call Trace: [ 2635.368634] dump_stack+0x107/0x167 [ 2635.369045] should_fail.cold+0x5/0xa [ 2635.369481] ? create_object.isra.0+0x3a/0xa20 [ 2635.370003] should_failslab+0x5/0x20 [ 2635.370439] kmem_cache_alloc+0x5b/0x310 [ 2635.370904] ? mark_held_locks+0x9e/0xe0 [ 2635.371384] create_object.isra.0+0x3a/0xa20 [ 2635.371883] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2635.372466] kmem_cache_alloc_bulk+0x168/0x320 [ 2635.372990] io_submit_sqes+0x6fe6/0x8610 [ 2635.373487] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2635.374058] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2635.374601] ? find_held_lock+0x2c/0x110 [ 2635.375061] ? io_submit_sqes+0x8610/0x8610 [ 2635.375558] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2635.376105] ? wait_for_completion_io+0x270/0x270 [ 2635.376658] ? rcu_read_lock_any_held+0x75/0xa0 [ 2635.377183] ? vfs_write+0x354/0xb10 [ 2635.377618] ? fput_many+0x2f/0x1a0 [ 2635.378032] ? ksys_write+0x1a9/0x260 [ 2635.378469] ? __ia32_sys_read+0xb0/0xb0 [ 2635.378939] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2635.379543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2635.380134] do_syscall_64+0x33/0x40 [ 2635.380562] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2635.381148] RIP: 0033:0x7f50b03cfb19 [ 2635.381585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2635.383670] RSP: 002b:00007f50ad945188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2635.384529] RAX: ffffffffffffffda RBX: 00007f50b04e2f60 RCX: 00007f50b03cfb19 [ 2635.385346] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2635.386151] RBP: 00007f50ad9451d0 R08: 0000000000000000 R09: 0000000000000000 [ 2635.386960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2635.387767] R13: 00007ffc84a4d5bf R14: 00007f50ad945300 R15: 0000000000022000 05:59:34 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) [ 2635.429972] FAULT_INJECTION: forcing a failure. [ 2635.429972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2635.431350] CPU: 0 PID: 13007 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2635.432157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2635.433098] Call Trace: [ 2635.433419] dump_stack+0x107/0x167 [ 2635.433832] should_fail.cold+0x5/0xa [ 2635.434265] ? copyout.part.0+0x112/0x140 [ 2635.434744] copy_page_to_iter+0x878/0xf80 [ 2635.435231] generic_file_buffered_read+0xab2/0x2920 [ 2635.435820] ? pagecache_get_page+0xc80/0xc80 [ 2635.436335] generic_file_read_iter+0x33f/0x490 [ 2635.436871] ext4_file_read_iter+0x184/0x4c0 [ 2635.437379] ? ext4_release_file+0x380/0x380 [ 2635.437882] io_read+0x2dc/0x11e0 [ 2635.438292] ? ext4_release_file+0x380/0x380 [ 2635.438808] ? kiocb_done+0xc90/0xc90 [ 2635.439239] ? mark_lock+0xf5/0x2df0 [ 2635.439663] ? lock_chain_count+0x20/0x20 [ 2635.440247] ? stack_trace_consume_entry+0x160/0x160 [ 2635.440833] ? lock_acquire+0x197/0x470 [ 2635.441285] ? __lock_acquire+0xbb1/0x5b00 [ 2635.441774] io_issue_sqe+0x2e8a/0x77b0 [ 2635.442232] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2635.442833] ? lock_chain_count+0x20/0x20 [ 2635.443309] ? __is_insn_slot_addr+0x14c/0x290 [ 2635.443831] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2635.444429] ? io_connect+0x610/0x610 [ 2635.444864] ? lock_acquire+0x197/0x470 [ 2635.445318] ? find_held_lock+0x2c/0x110 [ 2635.445789] ? __fget_files+0x2cf/0x520 [ 2635.446243] ? lock_downgrade+0x6d0/0x6d0 [ 2635.446717] __io_queue_sqe+0x90/0x9d0 [ 2635.447167] ? io_issue_sqe+0x77b0/0x77b0 [ 2635.447640] ? __fget_files+0x2f8/0x520 [ 2635.448098] ? io_prep_rw+0x7f5/0x1050 [ 2635.448549] io_submit_sqes+0x44aa/0x8610 [ 2635.449033] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2635.449649] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2635.450196] ? find_held_lock+0x2c/0x110 [ 2635.450675] ? io_submit_sqes+0x8610/0x8610 [ 2635.451171] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2635.451714] ? wait_for_completion_io+0x270/0x270 [ 2635.452265] ? rcu_read_lock_any_held+0x75/0xa0 [ 2635.452793] ? vfs_write+0x354/0xb10 [ 2635.453215] ? fput_many+0x2f/0x1a0 [ 2635.453636] ? ksys_write+0x1a9/0x260 [ 2635.454071] ? __ia32_sys_read+0xb0/0xb0 [ 2635.454531] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2635.455129] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2635.455716] do_syscall_64+0x33/0x40 [ 2635.456135] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2635.456721] RIP: 0033:0x7f989282fb19 [ 2635.457143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2635.459334] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2635.460203] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2635.461018] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2635.461844] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2635.462653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2635.463459] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 [ 2635.469994] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. 05:59:47 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x40200, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) 05:59:47 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x12000000) 05:59:47 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffffffffdef, 0x0, 0x0) 05:59:47 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) 05:59:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x40802, &(0x7f0000000980)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="2c63616368653d6d6d61702c667363616368652c63616368657461673aae7048402f403a2c616603003d30782feff2303030303030303030362c636163616d653d7ba3217d5c2d2c00fec80498fbf8be070d92919c1f28c6f87f0f65e8b337552dafd135edaaf1bdc2dc7e1f0bb156d0a7381bf414779ed949a75b43dddf9fdb7f47c9dc1d0be8e87e14295555c37ec9b7566114c5"]) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="34010000170001000000000000000000fe88000000001a0000740000000000010000000000000000e00000010000000000000000000000007f000001000000000000000000000000fc00000000000000000000000000000000000000000000000000000062000000", @ANYRES32=0x0, @ANYRES32, @ANYRES16, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRESHEX], 0x134}}, 0x0) close(r2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x4, 0xabe023afc5a1eeb9, r2, 0x10000000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x1}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x4e, 0x0, 0x4, 0x6, 0x8, 0x3, 0x4, 0xffff8000, 0x3e, 0x38, 0x26d, 0x1000, 0x8a5, 0x20, 0x4, 0x20, 0x8, 0x1ff}, [], "4c447208a301189926908757adc7a6c45a9b280b496b6e879e8b58ba8250c029430113a619f5e7303e38c0bf89f7a70d6627f20c359b57bcaa3ced5531b96b53f124e473dbcdbd906b2cce112b788502dc99e65c28a353323fe284b943394738857469812c183f3699a0e28c0c325260ffa3d3e5be93b0492709e7420e014a264ab5d6155747386ac5bad470d816ff7b982512a27a23e0950188e58b4a94d92cefcf54a25da8ff6464b2f1da"}, 0xe4) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x80000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r6, 0x0, r1, 0x0, 0x200f5ef, 0x0) 05:59:47 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) 05:59:47 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c00, 0x0, 0x0, 0x0) 05:59:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x0) (fail_nth: 1) [ 2648.778019] FAULT_INJECTION: forcing a failure. [ 2648.778019] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.779767] CPU: 1 PID: 13023 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2648.780787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2648.782024] Call Trace: [ 2648.782407] dump_stack+0x107/0x167 [ 2648.782937] should_fail.cold+0x5/0xa [ 2648.783487] ? io_setup_async_rw+0x180/0x580 [ 2648.784130] should_failslab+0x5/0x20 [ 2648.784772] __kmalloc+0x72/0x390 [ 2648.785285] io_setup_async_rw+0x180/0x580 [ 2648.785936] ? iov_iter_restore+0x195/0x3a0 [ 2648.786599] io_read+0x775/0x11e0 [ 2648.787123] ? ext4_release_file+0x380/0x380 [ 2648.787789] ? kiocb_done+0xc90/0xc90 [ 2648.788360] ? mark_lock+0xf5/0x2df0 [ 2648.788918] ? lock_chain_count+0x20/0x20 [ 2648.789562] ? stack_trace_consume_entry+0x160/0x160 [ 2648.790333] ? lock_acquire+0x197/0x470 [ 2648.790918] ? __lock_acquire+0xbb1/0x5b00 [ 2648.791546] io_issue_sqe+0x2e8a/0x77b0 [ 2648.792137] ? lock_chain_count+0x20/0x20 [ 2648.792758] ? lock_chain_count+0x20/0x20 [ 2648.793375] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2648.794174] ? io_connect+0x610/0x610 [ 2648.794741] ? lock_acquire+0x197/0x470 [ 2648.795331] ? find_held_lock+0x2c/0x110 [ 2648.795943] __io_queue_sqe+0x90/0x9d0 [ 2648.796520] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2648.797325] ? trace_hardirqs_on+0x5b/0x180 [ 2648.797965] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2648.798733] ? io_issue_sqe+0x77b0/0x77b0 [ 2648.799327] ? io_submit_sqes+0x2d47/0x8610 [ 2648.799947] io_submit_sqes+0x44aa/0x8610 [ 2648.800586] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2648.801318] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2648.802059] ? find_held_lock+0x2c/0x110 [ 2648.802656] ? io_submit_sqes+0x8610/0x8610 [ 2648.803298] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2648.804017] ? wait_for_completion_io+0x270/0x270 [ 2648.804728] ? rcu_read_lock_any_held+0x75/0xa0 [ 2648.805409] ? vfs_write+0x354/0xb10 [ 2648.805976] ? fput_many+0x2f/0x1a0 [ 2648.806515] ? ksys_write+0x1a9/0x260 [ 2648.807078] ? __ia32_sys_read+0xb0/0xb0 [ 2648.807680] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2648.808441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2648.809206] do_syscall_64+0x33/0x40 [ 2648.809775] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2648.810541] RIP: 0033:0x7f989282fb19 [ 2648.810989] FAULT_INJECTION: forcing a failure. [ 2648.810989] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.811088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2648.811107] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2648.817336] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2648.818419] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2648.819477] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2648.820536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2648.821620] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 [ 2648.822678] CPU: 0 PID: 13033 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2648.824303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2648.826189] Call Trace: [ 2648.826785] dump_stack+0x107/0x167 [ 2648.827628] should_fail.cold+0x5/0xa [ 2648.828718] ? create_object.isra.0+0x3a/0xa20 [ 2648.829783] should_failslab+0x5/0x20 [ 2648.830663] kmem_cache_alloc+0x5b/0x310 [ 2648.831594] ? mark_held_locks+0x9e/0xe0 [ 2648.832534] create_object.isra.0+0x3a/0xa20 [ 2648.833557] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2648.834737] kmem_cache_alloc_bulk+0x168/0x320 [ 2648.835780] io_submit_sqes+0x6fe6/0x8610 [ 2648.836738] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2648.837868] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2648.838955] ? find_held_lock+0x2c/0x110 [ 2648.839875] ? io_submit_sqes+0x8610/0x8610 [ 2648.840856] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2648.841980] ? wait_for_completion_io+0x270/0x270 [ 2648.843093] ? rcu_read_lock_any_held+0x75/0xa0 [ 2648.844159] ? vfs_write+0x354/0xb10 [ 2648.845015] ? fput_many+0x2f/0x1a0 [ 2648.845842] ? ksys_write+0x1a9/0x260 [ 2648.846720] ? __ia32_sys_read+0xb0/0xb0 [ 2648.847654] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2648.848867] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2648.850076] do_syscall_64+0x33/0x40 [ 2648.850927] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2648.852099] RIP: 0033:0x7f50b03cfb19 [ 2648.852944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2648.857177] RSP: 002b:00007f50ad945188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2648.858932] RAX: ffffffffffffffda RBX: 00007f50b04e2f60 RCX: 00007f50b03cfb19 [ 2648.860577] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2648.862220] RBP: 00007f50ad9451d0 R08: 0000000000000000 R09: 0000000000000000 [ 2648.863855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2648.865504] R13: 00007ffc84a4d5bf R14: 00007f50ad945300 R15: 0000000000022000 [ 2648.901368] FAULT_INJECTION: forcing a failure. [ 2648.901368] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.904515] CPU: 0 PID: 13028 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2648.906131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2648.908050] Call Trace: [ 2648.908666] dump_stack+0x107/0x167 [ 2648.909525] should_fail.cold+0x5/0xa [ 2648.910407] ? alloc_pipe_info+0x10a/0x590 [ 2648.911382] should_failslab+0x5/0x20 05:59:47 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) [ 2648.912253] kmem_cache_alloc_trace+0x55/0x320 [ 2648.913457] alloc_pipe_info+0x10a/0x590 [ 2648.914392] splice_direct_to_actor+0x774/0x980 [ 2648.915462] ? _cond_resched+0x10/0x30 [ 2648.916349] ? inode_security+0x107/0x140 [ 2648.917292] ? pipe_to_sendpage+0x380/0x380 [ 2648.918291] ? avc_policy_seqno+0x9/0x70 [ 2648.919219] ? selinux_file_permission+0x92/0x520 [ 2648.920310] ? do_splice_to+0x160/0x160 [ 2648.921220] ? security_file_permission+0xb1/0xe0 [ 2648.922333] do_splice_direct+0x1c4/0x290 [ 2648.923270] ? splice_direct_to_actor+0x980/0x980 [ 2648.924389] vfs_copy_file_range+0x4f8/0x13c0 [ 2648.925419] ? generic_file_rw_checks+0x240/0x240 [ 2648.926548] __do_sys_copy_file_range+0x193/0x420 [ 2648.927650] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2648.928735] ? ksys_write+0x1a9/0x260 [ 2648.929615] ? __ia32_sys_read+0xb0/0xb0 [ 2648.930526] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2648.931710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2648.932862] do_syscall_64+0x33/0x40 [ 2648.933718] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2648.934869] RIP: 0033:0x7f8f1efeeb19 [ 2648.935707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2648.939834] RSP: 002b:00007f8f1c564188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2648.941532] RAX: ffffffffffffffda RBX: 00007f8f1f101f60 RCX: 00007f8f1efeeb19 [ 2648.943163] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000007 [ 2648.944790] RBP: 00007f8f1c5641d0 R08: 000000000200f5ef R09: 0000000000000000 [ 2648.946431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2648.948061] R13: 00007ffe243be31f R14: 00007f8f1c564300 R15: 0000000000022000 05:59:47 executing program 4: set_robust_list(0x0, 0x0) alarm(0x7fff) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) dup3(r1, r0, 0x80000) [ 2648.984877] FAULT_INJECTION: forcing a failure. [ 2648.984877] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.986864] CPU: 1 PID: 13041 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2648.987848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2648.989016] Call Trace: [ 2648.989393] dump_stack+0x107/0x167 [ 2648.989923] should_fail.cold+0x5/0xa [ 2648.990471] ? create_object.isra.0+0x3a/0xa20 [ 2648.991126] should_failslab+0x5/0x20 [ 2648.991682] kmem_cache_alloc+0x5b/0x310 [ 2648.992255] create_object.isra.0+0x3a/0xa20 [ 2648.992886] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2648.993616] __kmalloc+0x16e/0x390 [ 2648.994121] io_setup_async_rw+0x180/0x580 [ 2648.994732] ? iov_iter_restore+0x195/0x3a0 [ 2648.995351] io_read+0x775/0x11e0 [ 2648.995830] ? ext4_release_file+0x380/0x380 [ 2648.996462] ? kiocb_done+0xc90/0xc90 [ 2648.996999] ? mark_lock+0xf5/0x2df0 [ 2648.997549] ? lock_chain_count+0x20/0x20 [ 2648.998144] ? lock_chain_count+0x20/0x20 [ 2648.998719] ? stack_trace_consume_entry+0x160/0x160 [ 2648.999437] ? lock_acquire+0x197/0x470 [ 2649.000016] ? mark_lock+0xf5/0x2df0 [ 2649.000566] io_issue_sqe+0x2e8a/0x77b0 [ 2649.001151] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2649.001910] ? lock_chain_count+0x20/0x20 [ 2649.002499] ? lock_chain_count+0x20/0x20 [ 2649.003076] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2649.003845] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2649.004588] ? io_connect+0x610/0x610 [ 2649.005139] ? mark_held_locks+0x9e/0xe0 [ 2649.005741] ? find_held_lock+0x2c/0x110 [ 2649.006321] ? __fget_files+0x2cf/0x520 [ 2649.006890] ? lock_downgrade+0x6d0/0x6d0 [ 2649.007479] __io_queue_sqe+0x90/0x9d0 [ 2649.008033] ? io_issue_sqe+0x77b0/0x77b0 [ 2649.008623] ? __fget_files+0x2f8/0x520 [ 2649.009176] ? io_prep_rw+0x7f5/0x1050 [ 2649.009755] io_submit_sqes+0x44aa/0x8610 [ 2649.010355] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2649.011042] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2649.011691] ? find_held_lock+0x2c/0x110 [ 2649.012245] ? io_submit_sqes+0x8610/0x8610 [ 2649.012833] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2649.013495] ? wait_for_completion_io+0x270/0x270 [ 2649.014209] ? rcu_read_lock_any_held+0x75/0xa0 [ 2649.014888] ? vfs_write+0x354/0xb10 [ 2649.015430] ? fput_many+0x2f/0x1a0 [ 2649.015960] ? ksys_write+0x1a9/0x260 [ 2649.016512] ? __ia32_sys_read+0xb0/0xb0 [ 2649.017104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2649.017879] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2649.018628] do_syscall_64+0x33/0x40 [ 2649.019154] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2649.019896] RIP: 0033:0x7f989282fb19 [ 2649.020434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2649.023026] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2649.024137] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2649.025164] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2649.026157] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2649.027114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2649.028070] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 05:59:48 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffffffffff5, 0x0, 0x0) 05:59:48 executing program 4: r0 = semget$private(0x0, 0x3, 0x153) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x30f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0100000a0001000000000000000000e0000002000000000000210000000000ac1414bb0000000000000000000000000000000000000024f238080000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e000000100000000000000000000008e9df4d9f0f15ee1f6c6c05f150fda000000000033000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00010000000000000000004c001400736861323536000000000000000000000000000000000000000000000000000000000000000100"/259], 0x13c}}, 0x0) r2 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r2, 0x0, 0xb) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semtimedop(r2, &(0x7f0000000100)=[{0x3, 0x52e5, 0x1000}, {0x4, 0x40, 0x800}, {0x4, 0xffd1}], 0x3, &(0x7f0000000180)={r3, r4+60000000}) r5 = semget$private(0x0, 0x4000, 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x800}, {0x0, 0x20}, {0x0, 0x101, 0x1800}, {0x1, 0x0, 0x800}, {0x4, 0x0, 0x800}, {0x4, 0x5}], 0x6) semtimedop(r5, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x6, 0x2, 0x800}, {0x3, 0xff00}, {0x4, 0x6468}, {0x0, 0x5, 0x1000}, {0x3, 0x4, 0x1800}, {0x3, 0x9, 0x1800}], 0x8, &(0x7f0000000040)) semctl$SEM_STAT_ANY(r5, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(r5, 0x0, 0x0) r6 = semget$private(0x0, 0x6, 0x0) semop(r6, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x40, 0x60, 0x16}, &(0x7f0000000240)='.\x00', 0x18, 0x0, 0x23456, {0x0, r7}}, 0x39) semctl$SEM_INFO(r6, 0x5, 0x13, &(0x7f0000000080)=""/101) unshare(0x900) 05:59:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x0) (fail_nth: 2) [ 2649.125527] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=10 sclass=netlink_xfrm_socket pid=13050 comm=syz-executor.4 05:59:48 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x18000000) [ 2649.157333] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=10 sclass=netlink_xfrm_socket pid=13053 comm=syz-executor.4 [ 2649.199968] FAULT_INJECTION: forcing a failure. [ 2649.199968] name failslab, interval 1, probability 0, space 0, times 0 [ 2649.201593] CPU: 1 PID: 13058 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2649.202463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2649.203488] Call Trace: [ 2649.203825] dump_stack+0x107/0x167 [ 2649.204278] should_fail.cold+0x5/0xa [ 2649.204750] ? create_object.isra.0+0x3a/0xa20 [ 2649.205320] should_failslab+0x5/0x20 [ 2649.205809] kmem_cache_alloc+0x5b/0x310 [ 2649.206321] create_object.isra.0+0x3a/0xa20 [ 2649.206856] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2649.207489] kmem_cache_alloc_trace+0x151/0x320 [ 2649.208069] alloc_pipe_info+0x10a/0x590 [ 2649.208583] splice_direct_to_actor+0x774/0x980 [ 2649.209160] ? _cond_resched+0x10/0x30 [ 2649.209661] ? inode_security+0x107/0x140 [ 2649.210181] ? pipe_to_sendpage+0x380/0x380 [ 2649.210716] ? avc_policy_seqno+0x9/0x70 [ 2649.211216] ? selinux_file_permission+0x92/0x520 [ 2649.211809] ? do_splice_to+0x160/0x160 [ 2649.212304] ? security_file_permission+0xb1/0xe0 [ 2649.212910] do_splice_direct+0x1c4/0x290 [ 2649.213431] ? splice_direct_to_actor+0x980/0x980 [ 2649.214038] ? avc_policy_seqno+0x9/0x70 [ 2649.214540] ? security_file_permission+0xb1/0xe0 [ 2649.215144] vfs_copy_file_range+0x4f8/0x13c0 [ 2649.215707] ? generic_file_rw_checks+0x240/0x240 [ 2649.216298] ? trace_hardirqs_on+0x5b/0x180 [ 2649.216839] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2649.217519] ? __do_sys_copy_file_range+0x166/0x420 [ 2649.218138] ? __do_sys_copy_file_range+0x176/0x420 [ 2649.218752] __do_sys_copy_file_range+0x193/0x420 [ 2649.219344] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2649.219924] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2649.220571] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2649.221209] do_syscall_64+0x33/0x40 [ 2649.221688] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2649.222313] RIP: 0033:0x7f8f1efeeb19 [ 2649.222770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2649.225017] RSP: 002b:00007f8f1c564188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2649.225980] RAX: ffffffffffffffda RBX: 00007f8f1f101f60 RCX: 00007f8f1efeeb19 [ 2649.226866] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000007 [ 2649.227726] RBP: 00007f8f1c5641d0 R08: 000000000200f5ef R09: 0000000000000000 [ 2649.228602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2649.229494] R13: 00007ffe243be31f R14: 00007f8f1c564300 R15: 0000000000022000 06:00:04 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3f00, 0x0, 0x0, 0x0) 06:00:04 executing program 7: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) execveat(r4, &(0x7f0000000240)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/dev/full\x00', &(0x7f0000000340)='$\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='}^\\\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='(({\\,:\x00', &(0x7f0000000480)='%,@-\\\x00', &(0x7f00000004c0)='/dev/full\x00'], 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:04 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76) 06:00:04 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffffffffffff, 0x0, 0x0) 06:00:04 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) 06:00:04 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x7, &(0x7f00000001c0)=[{0xff, 0x7, 0x2, 0x1}, {0x1, 0x2, 0x1f, 0x9}, {0xdc7, 0x2, 0x5, 0x10b7}, {0x5, 0x6, 0x3f, 0x59}, {0x661, 0x71, 0x3, 0x8}, {0x7f, 0x7f, 0x3, 0x7f}, {0x2590, 0xff, 0x0, 0xfff}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xb0, 0x2, 0x4, 0x1, 0x0, 0x10001, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x2}, 0x10, 0x6, 0x1000, 0x8, 0xfe1, 0x0, 0x20, 0x0, 0x80000001, 0x0, 0x9}, 0x0, 0x0, r2, 0x9) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r4, r3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000240)={0x1, [0x0]}) fstat(r1, &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) creat(&(0x7f00000000c0)='./file0\x00', 0x1) 06:00:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x0) (fail_nth: 3) 06:00:04 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1e000000) [ 2665.416249] FAULT_INJECTION: forcing a failure. [ 2665.416249] name failslab, interval 1, probability 0, space 0, times 0 [ 2665.418782] CPU: 0 PID: 13078 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2665.420367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2665.422224] Call Trace: [ 2665.422774] dump_stack+0x107/0x167 [ 2665.422975] FAULT_INJECTION: forcing a failure. [ 2665.422975] name failslab, interval 1, probability 0, space 0, times 0 [ 2665.423522] should_fail.cold+0x5/0xa [ 2665.423545] ? create_object.isra.0+0x3a/0xa20 [ 2665.423574] should_failslab+0x5/0x20 [ 2665.428511] kmem_cache_alloc+0x5b/0x310 [ 2665.429354] ? mark_held_locks+0x9e/0xe0 [ 2665.430208] create_object.isra.0+0x3a/0xa20 [ 2665.431100] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2665.432287] kmem_cache_alloc_bulk+0x168/0x320 [ 2665.433256] io_submit_sqes+0x6fe6/0x8610 [ 2665.434353] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2665.435623] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2665.436627] ? find_held_lock+0x2c/0x110 [ 2665.437470] ? io_submit_sqes+0x8610/0x8610 [ 2665.438383] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2665.439365] ? wait_for_completion_io+0x270/0x270 [ 2665.440377] ? rcu_read_lock_any_held+0x75/0xa0 [ 2665.441346] ? vfs_write+0x354/0xb10 [ 2665.442134] ? fput_many+0x2f/0x1a0 [ 2665.443065] ? ksys_write+0x1a9/0x260 [ 2665.443860] ? __ia32_sys_read+0xb0/0xb0 [ 2665.444906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2665.446106] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2665.447179] do_syscall_64+0x33/0x40 [ 2665.448126] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2665.449449] RIP: 0033:0x7f50b03cfb19 [ 2665.450250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2665.454037] RSP: 002b:00007f50ad945188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2665.455959] RAX: ffffffffffffffda RBX: 00007f50b04e2f60 RCX: 00007f50b03cfb19 [ 2665.457607] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2665.459145] RBP: 00007f50ad9451d0 R08: 0000000000000000 R09: 0000000000000000 [ 2665.460626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2665.462136] R13: 00007ffc84a4d5bf R14: 00007f50ad945300 R15: 0000000000022000 [ 2665.463760] CPU: 1 PID: 13073 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2665.465237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2665.466994] Call Trace: [ 2665.467554] dump_stack+0x107/0x167 [ 2665.468332] should_fail.cold+0x5/0xa [ 2665.469130] ? create_object.isra.0+0x3a/0xa20 [ 2665.470104] should_failslab+0x5/0x20 [ 2665.470915] kmem_cache_alloc+0x5b/0x310 [ 2665.471768] create_object.isra.0+0x3a/0xa20 [ 2665.472679] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2665.473753] __kmalloc+0x16e/0x390 [ 2665.474509] io_setup_async_rw+0x180/0x580 [ 2665.475400] ? iov_iter_restore+0x195/0x3a0 [ 2665.476307] io_read+0x775/0x11e0 [ 2665.477035] ? ext4_release_file+0x380/0x380 [ 2665.477986] ? kiocb_done+0xc90/0xc90 [ 2665.478786] ? mark_lock+0xf5/0x2df0 [ 2665.479568] ? lock_chain_count+0x20/0x20 [ 2665.480452] ? stack_trace_consume_entry+0x160/0x160 [ 2665.481532] ? lock_acquire+0x197/0x470 [ 2665.482382] ? __lock_acquire+0xbb1/0x5b00 [ 2665.483280] io_issue_sqe+0x2e8a/0x77b0 [ 2665.484130] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2665.485230] ? lock_chain_count+0x20/0x20 [ 2665.486115] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2665.487222] ? io_connect+0x610/0x610 [ 2665.488034] ? lock_acquire+0x197/0x470 [ 2665.488873] ? find_held_lock+0x2c/0x110 [ 2665.489732] ? __fget_files+0x2cf/0x520 [ 2665.490579] ? lock_downgrade+0x6d0/0x6d0 [ 2665.491451] __io_queue_sqe+0x90/0x9d0 [ 2665.492278] ? io_issue_sqe+0x77b0/0x77b0 [ 2665.493140] ? __fget_files+0x2f8/0x520 [ 2665.494013] ? io_prep_rw+0x7f5/0x1050 [ 2665.494831] io_submit_sqes+0x44aa/0x8610 [ 2665.495729] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2665.496772] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2665.497792] ? find_held_lock+0x2c/0x110 [ 2665.498645] ? io_submit_sqes+0x8610/0x8610 [ 2665.499546] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2665.500568] ? wait_for_completion_io+0x270/0x270 [ 2665.501594] ? rcu_read_lock_any_held+0x75/0xa0 [ 2665.502579] ? vfs_write+0x354/0xb10 [ 2665.503367] ? fput_many+0x2f/0x1a0 [ 2665.504130] ? ksys_write+0x1a9/0x260 [ 2665.504925] ? __ia32_sys_read+0xb0/0xb0 [ 2665.505789] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2665.506894] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2665.507991] do_syscall_64+0x33/0x40 [ 2665.508767] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2665.509850] RIP: 0033:0x7f989282fb19 [ 2665.510657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2665.514502] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2665.516110] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2665.517614] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2665.519120] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2665.520618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2665.522129] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 [ 2665.541271] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2665.541908] FAULT_INJECTION: forcing a failure. [ 2665.541908] name failslab, interval 1, probability 0, space 0, times 0 [ 2665.545927] CPU: 0 PID: 13084 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2665.547373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2665.549071] Call Trace: [ 2665.549610] dump_stack+0x107/0x167 [ 2665.550376] should_fail.cold+0x5/0xa [ 2665.551163] ? alloc_pipe_info+0x1e5/0x590 [ 2665.552022] should_failslab+0x5/0x20 [ 2665.552786] __kmalloc+0x72/0x390 [ 2665.553488] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2665.554521] alloc_pipe_info+0x1e5/0x590 [ 2665.555369] splice_direct_to_actor+0x774/0x980 [ 2665.556322] ? _cond_resched+0x10/0x30 [ 2665.557124] ? inode_security+0x107/0x140 [ 2665.557972] ? pipe_to_sendpage+0x380/0x380 [ 2665.558986] ? avc_policy_seqno+0x9/0x70 [ 2665.560004] ? selinux_file_permission+0x92/0x520 [ 2665.561030] ? do_splice_to+0x160/0x160 [ 2665.561875] ? security_file_permission+0xb1/0xe0 [ 2665.562873] do_splice_direct+0x1c4/0x290 [ 2665.563884] ? splice_direct_to_actor+0x980/0x980 [ 2665.565021] ? avc_policy_seqno+0x9/0x70 [ 2665.565887] ? security_file_permission+0xb1/0xe0 [ 2665.566864] vfs_copy_file_range+0x4f8/0x13c0 [ 2665.567763] ? generic_file_rw_checks+0x240/0x240 [ 2665.568754] __do_sys_copy_file_range+0x193/0x420 [ 2665.569733] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2665.570675] ? ksys_write+0x1a9/0x260 [ 2665.571444] ? __ia32_sys_read+0xb0/0xb0 [ 2665.572273] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2665.573361] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2665.574435] do_syscall_64+0x33/0x40 [ 2665.575199] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2665.576422] RIP: 0033:0x7f8f1efeeb19 [ 2665.577213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2665.580911] RSP: 002b:00007f8f1c564188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2665.582459] RAX: ffffffffffffffda RBX: 00007f8f1f101f60 RCX: 00007f8f1efeeb19 [ 2665.583870] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000007 [ 2665.585286] RBP: 00007f8f1c5641d0 R08: 000000000200f5ef R09: 0000000000000000 [ 2665.586726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2665.588375] R13: 00007ffe243be31f R14: 00007f8f1c564300 R15: 0000000000022000 [ 2665.599757] kauditd_printk_skb: 10 callbacks suppressed [ 2665.599777] audit: type=1326 audit(1751436004.657:212): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13077 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb0aa8b19 code=0x7ffc0000 06:00:04 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4) [ 2665.631337] audit: type=1326 audit(1751436004.657:213): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13077 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb0aa8b19 code=0x7ffc0000 [ 2665.673055] audit: type=1326 audit(1751436004.694:214): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13077 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fafb0aa8b19 code=0x7ffc0000 [ 2665.697103] audit: type=1326 audit(1751436004.695:215): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13077 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb0aa8b19 code=0x7ffc0000 06:00:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x0) (fail_nth: 4) [ 2665.726563] audit: type=1326 audit(1751436004.695:216): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13077 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb0aa8b19 code=0x7ffc0000 [ 2665.750604] audit: type=1326 audit(1751436004.697:217): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13077 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fafb0aa8b19 code=0x7ffc0000 [ 2665.774032] audit: type=1326 audit(1751436004.697:218): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13077 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb0aa8b19 code=0x7ffc0000 06:00:04 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffd, 0x3ab}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b0a4f975e286"}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x2, &(0x7f0000000280)={0x0, 0x3938700}}, 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$inet(0x2, 0xa, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25", 0x2d}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000, 0x1}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80101) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}, 0x10002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r5, r4, 0x0) fcntl$addseals(r5, 0x409, 0x8) write$binfmt_elf64(r5, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x71, 0xe8, 0x9, 0x2, 0x2, 0x2, 0x3, 0x0, 0x234, 0x40, 0x322, 0x8001, 0x4c62, 0x38, 0x2, 0xffff, 0x1000, 0x800}, [{0x1, 0x7, 0xff, 0x4, 0x9d23, 0x624, 0x7, 0x7ff}], "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"}, 0x1078) [ 2665.808714] audit: type=1326 audit(1751436004.698:219): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13077 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb0aa8b19 code=0x7ffc0000 06:00:04 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 06:00:04 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x76}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) dup2(r4, r0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2665.823332] FAULT_INJECTION: forcing a failure. [ 2665.823332] name failslab, interval 1, probability 0, space 0, times 0 [ 2665.825475] CPU: 0 PID: 13103 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2665.826726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2665.828193] Call Trace: [ 2665.828755] dump_stack+0x107/0x167 [ 2665.829416] should_fail.cold+0x5/0xa [ 2665.830219] ? create_object.isra.0+0x3a/0xa20 [ 2665.831105] should_failslab+0x5/0x20 [ 2665.831782] kmem_cache_alloc+0x5b/0x310 [ 2665.832672] create_object.isra.0+0x3a/0xa20 [ 2665.833498] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2665.834424] __kmalloc+0x16e/0x390 [ 2665.835065] alloc_pipe_info+0x1e5/0x590 [ 2665.835783] splice_direct_to_actor+0x774/0x980 [ 2665.836598] ? _cond_resched+0x10/0x30 [ 2665.837297] ? inode_security+0x107/0x140 [ 2665.838048] ? pipe_to_sendpage+0x380/0x380 [ 2665.838965] ? avc_policy_seqno+0x9/0x70 [ 2665.839716] ? selinux_file_permission+0x92/0x520 [ 2665.840563] ? do_splice_to+0x160/0x160 [ 2665.841406] ? security_file_permission+0xb1/0xe0 [ 2665.842400] do_splice_direct+0x1c4/0x290 [ 2665.843174] ? splice_direct_to_actor+0x980/0x980 [ 2665.844007] ? avc_policy_seqno+0x9/0x70 [ 2665.844722] ? security_file_permission+0xb1/0xe0 [ 2665.845577] vfs_copy_file_range+0x4f8/0x13c0 [ 2665.846539] ? generic_file_rw_checks+0x240/0x240 [ 2665.847488] __do_sys_copy_file_range+0x193/0x420 [ 2665.848339] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2665.849177] ? ksys_write+0x1a9/0x260 [ 2665.849865] ? __ia32_sys_read+0xb0/0xb0 [ 2665.850576] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2665.851499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2665.852598] do_syscall_64+0x33/0x40 [ 2665.853284] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2665.854177] RIP: 0033:0x7f8f1efeeb19 [ 2665.854810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2665.858032] RSP: 002b:00007f8f1c564188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2665.859354] RAX: ffffffffffffffda RBX: 00007f8f1f101f60 RCX: 00007f8f1efeeb19 [ 2665.860577] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000007 [ 2665.861827] RBP: 00007f8f1c5641d0 R08: 000000000200f5ef R09: 0000000000000000 [ 2665.863050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2665.864275] R13: 00007ffe243be31f R14: 00007f8f1c564300 R15: 0000000000022000 [ 2665.871671] audit: type=1326 audit(1751436004.700:220): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13077 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafb0aa8b19 code=0x7ffc0000 [ 2665.886231] audit: type=1326 audit(1751436004.700:221): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13077 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb0aa8b19 code=0x7ffc0000 [ 2665.964195] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. 06:00:18 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 77) 06:00:18 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76) 06:00:18 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) 06:00:18 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$addseals(r0, 0x409, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r1, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x0) (fail_nth: 5) 06:00:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806c2d, 0x0, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2160}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000900)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, 0x0, "4fb2386f65a856b6930930052d7d4e52fc4032fe98f268baabdf34269819ec36e44c87f906b59567acb1dd5aa5ba7be8ecc7069f172fddc076e97b1bb7ad34493270d4dbba4a2ca52cc13ca18e08c805"}, 0xd8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x51, 0x0, 0x0, 0x3ff, 0x1, 0x1}, 0x10000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x20d315) 06:00:18 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x24000000) 06:00:18 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6) [ 2679.254892] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2679.273061] FAULT_INJECTION: forcing a failure. [ 2679.273061] name failslab, interval 1, probability 0, space 0, times 0 [ 2679.275923] CPU: 0 PID: 13144 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2679.277353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2679.279091] Call Trace: [ 2679.279633] dump_stack+0x107/0x167 [ 2679.280400] should_fail.cold+0x5/0xa [ 2679.281193] ? __iomap_dio_rw+0x1ee/0x1110 [ 2679.282082] should_failslab+0x5/0x20 [ 2679.282869] kmem_cache_alloc_trace+0x55/0x320 [ 2679.283817] __iomap_dio_rw+0x1ee/0x1110 [ 2679.284666] ? lock_release+0x680/0x680 [ 2679.285485] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2679.286472] ? down_read+0x10f/0x430 [ 2679.287235] ? lock_chain_count+0x20/0x20 [ 2679.288083] ? down_write+0x160/0x160 [ 2679.288900] iomap_dio_rw+0x31/0x90 [ 2679.289651] ext4_file_read_iter+0x2c7/0x4c0 [ 2679.290590] generic_file_splice_read+0x455/0x6d0 [ 2679.290999] FAULT_INJECTION: forcing a failure. [ 2679.290999] name failslab, interval 1, probability 0, space 0, times 0 [ 2679.291617] ? pipe_to_user+0x170/0x170 [ 2679.291665] ? fsnotify_perm.part.0+0x22d/0x620 [ 2679.291691] ? security_file_permission+0xb1/0xe0 [ 2679.296822] ? pipe_to_user+0x170/0x170 [ 2679.297639] do_splice_to+0x10e/0x160 [ 2679.298441] splice_direct_to_actor+0x2fe/0x980 [ 2679.299411] ? pipe_to_sendpage+0x380/0x380 [ 2679.300314] ? do_splice_to+0x160/0x160 [ 2679.301177] ? security_file_permission+0xb1/0xe0 [ 2679.302233] do_splice_direct+0x1c4/0x290 [ 2679.303131] ? splice_direct_to_actor+0x980/0x980 [ 2679.304171] ? avc_policy_seqno+0x9/0x70 [ 2679.305057] ? security_file_permission+0xb1/0xe0 [ 2679.306114] vfs_copy_file_range+0x4f8/0x13c0 [ 2679.307093] ? generic_file_rw_checks+0x240/0x240 [ 2679.308162] __do_sys_copy_file_range+0x193/0x420 [ 2679.309204] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2679.310234] ? ksys_write+0x1a9/0x260 [ 2679.311058] ? __ia32_sys_read+0xb0/0xb0 [ 2679.311940] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2679.313073] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2679.314196] do_syscall_64+0x33/0x40 [ 2679.315001] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2679.316108] RIP: 0033:0x7f8f1efeeb19 [ 2679.316913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2679.320909] RSP: 002b:00007f8f1c564188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2679.322561] RAX: ffffffffffffffda RBX: 00007f8f1f101f60 RCX: 00007f8f1efeeb19 [ 2679.324108] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000007 [ 2679.325650] RBP: 00007f8f1c5641d0 R08: 000000000200f5ef R09: 0000000000000000 [ 2679.327199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2679.328743] R13: 00007ffe243be31f R14: 00007f8f1c564300 R15: 0000000000022000 [ 2679.330330] CPU: 1 PID: 13147 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2679.331860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2679.333654] Call Trace: [ 2679.334242] dump_stack+0x107/0x167 [ 2679.335037] should_fail.cold+0x5/0xa [ 2679.335864] ? create_object.isra.0+0x3a/0xa20 [ 2679.336855] should_failslab+0x5/0x20 [ 2679.337679] kmem_cache_alloc+0x5b/0x310 [ 2679.338568] ? mark_held_locks+0x9e/0xe0 [ 2679.339447] create_object.isra.0+0x3a/0xa20 [ 2679.340393] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2679.341489] kmem_cache_alloc_bulk+0x168/0x320 [ 2679.342490] io_submit_sqes+0x6fe6/0x8610 [ 2679.343408] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2679.344487] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2679.345532] ? find_held_lock+0x2c/0x110 [ 2679.346428] ? io_submit_sqes+0x8610/0x8610 [ 2679.347366] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2679.348411] ? wait_for_completion_io+0x270/0x270 [ 2679.349462] ? rcu_read_lock_any_held+0x75/0xa0 [ 2679.350457] ? vfs_write+0x354/0xb10 [ 2679.351239] ? fput_many+0x2f/0x1a0 [ 2679.352005] ? ksys_write+0x1a9/0x260 [ 2679.352812] ? __ia32_sys_read+0xb0/0xb0 [ 2679.353680] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2679.354807] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2679.355900] do_syscall_64+0x33/0x40 [ 2679.356689] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2679.357774] RIP: 0033:0x7f50b03cfb19 [ 2679.358572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2679.362479] RSP: 002b:00007f50ad945188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2679.364088] RAX: ffffffffffffffda RBX: 00007f50b04e2f60 RCX: 00007f50b03cfb19 [ 2679.365596] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2679.367111] RBP: 00007f50ad9451d0 R08: 0000000000000000 R09: 0000000000000000 [ 2679.368619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2679.370142] R13: 00007ffc84a4d5bf R14: 00007f50ad945300 R15: 0000000000022000 [ 2679.392473] FAULT_INJECTION: forcing a failure. [ 2679.392473] name failslab, interval 1, probability 0, space 0, times 0 [ 2679.395990] CPU: 1 PID: 13145 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2679.397484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2679.399261] Call Trace: [ 2679.399824] dump_stack+0x107/0x167 [ 2679.400595] should_fail.cold+0x5/0xa [ 2679.401410] ? create_object.isra.0+0x3a/0xa20 [ 2679.402388] should_failslab+0x5/0x20 [ 2679.403203] kmem_cache_alloc+0x5b/0x310 [ 2679.404070] create_object.isra.0+0x3a/0xa20 [ 2679.405012] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2679.406105] __kmalloc+0x16e/0x390 [ 2679.406867] io_setup_async_rw+0x180/0x580 [ 2679.407764] ? iov_iter_restore+0x195/0x3a0 [ 2679.408667] io_read+0x775/0x11e0 [ 2679.409409] ? ext4_release_file+0x380/0x380 [ 2679.410369] ? kiocb_done+0xc90/0xc90 [ 2679.411175] ? mark_lock+0xf5/0x2df0 [ 2679.411959] ? register_lock_class+0xbb/0x17b0 [ 2679.412925] ? arch_stack_walk+0x99/0xf0 [ 2679.413808] ? lock_chain_count+0x20/0x20 [ 2679.414697] ? is_dynamic_key+0x1e0/0x1e0 [ 2679.415593] ? __lock_acquire+0x1657/0x5b00 [ 2679.416523] ? __lock_acquire+0xbb1/0x5b00 [ 2679.417449] io_issue_sqe+0x2e8a/0x77b0 [ 2679.418336] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2679.419471] ? lock_chain_count+0x20/0x20 [ 2679.420373] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2679.421512] ? io_connect+0x610/0x610 [ 2679.422362] ? lock_acquire+0x197/0x470 [ 2679.423226] ? find_held_lock+0x2c/0x110 [ 2679.424113] ? __fget_files+0x2cf/0x520 [ 2679.424971] ? lock_downgrade+0x6d0/0x6d0 [ 2679.425882] __io_queue_sqe+0x90/0x9d0 [ 2679.426733] ? io_issue_sqe+0x77b0/0x77b0 [ 2679.427632] ? __fget_files+0x2f8/0x520 [ 2679.428501] ? io_prep_rw+0x7f5/0x1050 [ 2679.429351] io_submit_sqes+0x44aa/0x8610 [ 2679.430286] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2679.431365] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2679.432410] ? find_held_lock+0x2c/0x110 [ 2679.433294] ? io_submit_sqes+0x8610/0x8610 [ 2679.434245] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2679.435289] ? wait_for_completion_io+0x270/0x270 [ 2679.436328] ? rcu_read_lock_any_held+0x75/0xa0 [ 2679.437329] ? vfs_write+0x354/0xb10 [ 2679.438142] ? fput_many+0x2f/0x1a0 [ 2679.438927] ? ksys_write+0x1a9/0x260 [ 2679.439750] ? __ia32_sys_read+0xb0/0xb0 [ 2679.440631] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2679.441763] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2679.442892] do_syscall_64+0x33/0x40 [ 2679.443691] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2679.444796] RIP: 0033:0x7f989282fb19 [ 2679.445599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2679.449574] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2679.451225] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2679.452765] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2679.454313] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2679.455845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2679.457378] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:00:18 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) fcntl$addseals(r6, 0x409, 0x8) dup3(r5, r6, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2679.628931] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. 06:00:32 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x682a, 0x0, 0x0, 0x0) 06:00:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(0x0, r0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000000)={0x1, 0x8, 0x401}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000080)=ANY=[@ANYBLOB="05ced54baaf027292f7d0f994c85b258b0cb1195e38038b2a4dccc36aeaefd4312f4931a93eded747ccdb090cfab93fa92f620631b8f54eac96f06d52213", @ANYRES16=r2, @ANYBLOB="010200"/18, @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x20000850) dup(r1) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x4044084}, 0x40000) unshare(0x48020200) 06:00:32 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 78) 06:00:32 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8) 06:00:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x0) (fail_nth: 6) 06:00:32 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a000000) 06:00:32 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 77) 06:00:32 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) fcntl$addseals(r5, 0x409, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f00000003c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r5, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x1}}, 0x6f) [ 2693.747856] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2693.755194] FAULT_INJECTION: forcing a failure. [ 2693.755194] name failslab, interval 1, probability 0, space 0, times 0 [ 2693.756418] CPU: 0 PID: 13182 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2693.756991] FAULT_INJECTION: forcing a failure. [ 2693.756991] name failslab, interval 1, probability 0, space 0, times 0 [ 2693.757172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2693.757185] Call Trace: [ 2693.760804] dump_stack+0x107/0x167 [ 2693.761222] should_fail.cold+0x5/0xa [ 2693.761662] ? create_object.isra.0+0x3a/0xa20 [ 2693.762198] should_failslab+0x5/0x20 [ 2693.762632] kmem_cache_alloc+0x5b/0x310 [ 2693.763104] ? mark_held_locks+0x9e/0xe0 [ 2693.763569] create_object.isra.0+0x3a/0xa20 [ 2693.764072] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2693.764656] kmem_cache_alloc_bulk+0x168/0x320 [ 2693.765185] io_submit_sqes+0x6fe6/0x8610 [ 2693.765676] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2693.766252] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2693.766809] ? find_held_lock+0x2c/0x110 [ 2693.767274] ? io_submit_sqes+0x8610/0x8610 [ 2693.767777] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2693.768325] ? wait_for_completion_io+0x270/0x270 [ 2693.768883] ? rcu_read_lock_any_held+0x75/0xa0 [ 2693.769415] ? vfs_write+0x354/0xb10 [ 2693.769849] ? fput_many+0x2f/0x1a0 [ 2693.770278] ? ksys_write+0x1a9/0x260 [ 2693.770719] ? __ia32_sys_read+0xb0/0xb0 [ 2693.771186] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2693.771791] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2693.772383] do_syscall_64+0x33/0x40 [ 2693.772812] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2693.773394] RIP: 0033:0x7f50b03cfb19 [ 2693.773825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2693.775934] RSP: 002b:00007f50ad945188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2693.776803] RAX: ffffffffffffffda RBX: 00007f50b04e2f60 RCX: 00007f50b03cfb19 [ 2693.777616] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2693.778442] RBP: 00007f50ad9451d0 R08: 0000000000000000 R09: 0000000000000000 [ 2693.779265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2693.780087] R13: 00007ffc84a4d5bf R14: 00007f50ad945300 R15: 0000000000022000 [ 2693.780929] CPU: 1 PID: 13174 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2693.782411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2693.784158] Call Trace: [ 2693.784722] dump_stack+0x107/0x167 [ 2693.785571] should_fail.cold+0x5/0xa [ 2693.786387] ? create_object.isra.0+0x3a/0xa20 [ 2693.787349] should_failslab+0x5/0x20 [ 2693.788147] kmem_cache_alloc+0x5b/0x310 [ 2693.789012] create_object.isra.0+0x3a/0xa20 [ 2693.789933] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2693.791018] kmem_cache_alloc_trace+0x151/0x320 [ 2693.792000] __iomap_dio_rw+0x1ee/0x1110 [ 2693.792858] ? lock_release+0x680/0x680 [ 2693.793690] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2693.794666] ? down_read+0x10f/0x430 [ 2693.795443] ? lock_chain_count+0x20/0x20 [ 2693.796306] ? down_write+0x160/0x160 [ 2693.797107] iomap_dio_rw+0x31/0x90 [ 2693.797870] ext4_file_read_iter+0x2c7/0x4c0 [ 2693.798796] generic_file_splice_read+0x455/0x6d0 [ 2693.799814] ? pipe_to_user+0x170/0x170 [ 2693.800660] ? fsnotify_perm.part.0+0x22d/0x620 [ 2693.801638] ? security_file_permission+0xb1/0xe0 [ 2693.802656] ? pipe_to_user+0x170/0x170 [ 2693.803486] do_splice_to+0x10e/0x160 [ 2693.804292] splice_direct_to_actor+0x2fe/0x980 [ 2693.805272] ? pipe_to_sendpage+0x380/0x380 [ 2693.806187] ? do_splice_to+0x160/0x160 [ 2693.807019] ? security_file_permission+0xb1/0xe0 [ 2693.808037] do_splice_direct+0x1c4/0x290 [ 2693.808910] ? splice_direct_to_actor+0x980/0x980 [ 2693.809923] ? avc_policy_seqno+0x9/0x70 [ 2693.810793] ? security_file_permission+0xb1/0xe0 [ 2693.811816] vfs_copy_file_range+0x4f8/0x13c0 [ 2693.812762] ? generic_file_rw_checks+0x240/0x240 [ 2693.813789] __do_sys_copy_file_range+0x193/0x420 [ 2693.814827] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2693.815822] ? ksys_write+0x1a9/0x260 [ 2693.816617] ? __ia32_sys_read+0xb0/0xb0 [ 2693.817472] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2693.818579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2693.819665] do_syscall_64+0x33/0x40 [ 2693.820437] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2693.821504] RIP: 0033:0x7f8f1efeeb19 [ 2693.822274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2693.826003] RSP: 002b:00007f8f1c564188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2693.827550] RAX: ffffffffffffffda RBX: 00007f8f1f101f60 RCX: 00007f8f1efeeb19 [ 2693.828995] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000007 [ 2693.830447] RBP: 00007f8f1c5641d0 R08: 000000000200f5ef R09: 0000000000000000 [ 2693.831900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2693.833353] R13: 00007ffe243be31f R14: 00007f8f1c564300 R15: 0000000000022000 [ 2693.854528] FAULT_INJECTION: forcing a failure. [ 2693.854528] name failslab, interval 1, probability 0, space 0, times 0 [ 2693.857552] CPU: 1 PID: 13184 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2693.859012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2693.860742] Call Trace: [ 2693.861301] dump_stack+0x107/0x167 [ 2693.862074] should_fail.cold+0x5/0xa [ 2693.862874] ? io_setup_async_rw+0x180/0x580 [ 2693.863803] should_failslab+0x5/0x20 [ 2693.864603] __kmalloc+0x72/0x390 [ 2693.865341] io_setup_async_rw+0x180/0x580 06:00:32 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x208041, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2693.866346] ? iov_iter_restore+0x195/0x3a0 [ 2693.867305] io_read+0x775/0x11e0 [ 2693.868034] ? ext4_release_file+0x380/0x380 [ 2693.868971] ? kiocb_done+0xc90/0xc90 [ 2693.869770] ? mark_lock+0xf5/0x2df0 [ 2693.870579] ? lock_chain_count+0x20/0x20 [ 2693.871461] ? stack_trace_consume_entry+0x160/0x160 [ 2693.872529] ? lock_acquire+0x197/0x470 [ 2693.873372] ? __lock_acquire+0xbb1/0x5b00 [ 2693.874278] io_issue_sqe+0x2e8a/0x77b0 [ 2693.875114] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2693.876225] ? lock_chain_count+0x20/0x20 [ 2693.877092] ? __is_insn_slot_addr+0x14c/0x290 [ 2693.878058] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2693.879152] ? io_connect+0x610/0x610 [ 2693.879959] ? lock_acquire+0x197/0x470 [ 2693.880787] ? find_held_lock+0x2c/0x110 [ 2693.881645] ? __fget_files+0x2cf/0x520 [ 2693.882483] ? lock_downgrade+0x6d0/0x6d0 [ 2693.883354] __io_queue_sqe+0x90/0x9d0 [ 2693.884179] ? io_issue_sqe+0x77b0/0x77b0 [ 2693.885050] ? __fget_files+0x2f8/0x520 [ 2693.885890] ? io_prep_rw+0x7f5/0x1050 [ 2693.886723] io_submit_sqes+0x44aa/0x8610 [ 2693.887612] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2693.888653] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2693.889665] ? find_held_lock+0x2c/0x110 [ 2693.890540] ? io_submit_sqes+0x8610/0x8610 [ 2693.891457] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2693.892476] ? wait_for_completion_io+0x270/0x270 [ 2693.893501] ? rcu_read_lock_any_held+0x75/0xa0 [ 2693.894479] ? vfs_write+0x354/0xb10 [ 2693.895262] ? fput_many+0x2f/0x1a0 [ 2693.896032] ? ksys_write+0x1a9/0x260 [ 2693.896832] ? __ia32_sys_read+0xb0/0xb0 [ 2693.897696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2693.898805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2693.899900] do_syscall_64+0x33/0x40 [ 2693.900681] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2693.901767] RIP: 0033:0x7f989282fb19 [ 2693.902557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2693.906432] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2693.908031] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2693.909524] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2693.911032] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2693.912529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2693.914050] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:00:33 executing program 4: ftruncate(0xffffffffffffffff, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680), 0xc, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000001c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/1863], 0x751) umount2(0x0, 0x8) read(0xffffffffffffffff, &(0x7f0000000040)=""/24, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000000c0)) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x400, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@initdev, @in=@empty}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000140)=0x80) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', &(0x7f00000007c0), 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 06:00:33 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc) 06:00:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x0) (fail_nth: 7) 06:00:33 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x30000000) 06:00:33 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 78) [ 2694.154594] FAULT_INJECTION: forcing a failure. [ 2694.154594] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2694.157363] CPU: 1 PID: 13203 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2694.158857] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2694.160592] Call Trace: [ 2694.161156] dump_stack+0x107/0x167 [ 2694.161926] should_fail.cold+0x5/0xa [ 2694.162743] __alloc_pages_nodemask+0x182/0x600 [ 2694.163722] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2694.164970] ? lock_acquire+0x197/0x470 [ 2694.165795] ? find_held_lock+0x2c/0x110 [ 2694.166668] ? jbd2_transaction_committed+0x111/0x150 [ 2694.167742] ? lock_downgrade+0x6d0/0x6d0 [ 2694.168604] ? ext4_map_blocks+0x87c/0x1910 [ 2694.169513] alloc_pages_current+0x187/0x280 [ 2694.170444] ? __kernel_text_address+0x9/0x40 [ 2694.171378] push_pipe+0x2b5/0x6d0 [ 2694.172139] iov_iter_zero+0x418/0xef0 [ 2694.172965] ? ext4_iomap_begin+0x1a0/0x700 [ 2694.173863] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 2694.175026] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2694.176040] ? kasan_save_stack+0x1b/0x40 [ 2694.176907] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2694.177975] ? __iomap_dio_rw+0x1ee/0x1110 [ 2694.178860] ? iomap_dio_rw+0x31/0x90 [ 2694.179657] ? ext4_file_read_iter+0x2c7/0x4c0 [ 2694.180629] iomap_dio_actor+0x40f/0x560 [ 2694.181489] iomap_apply+0x289/0x810 [ 2694.182281] ? iomap_dio_rw+0x90/0x90 [ 2694.183088] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2694.184302] ? mark_held_locks+0x9e/0xe0 [ 2694.185168] ? filemap_check_errors+0xa5/0x150 [ 2694.186149] __iomap_dio_rw+0x6cd/0x1110 [ 2694.187004] ? iomap_dio_rw+0x90/0x90 [ 2694.187827] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2694.188793] ? down_read+0x10f/0x430 [ 2694.189570] ? lock_chain_count+0x20/0x20 [ 2694.190454] ? down_write+0x160/0x160 [ 2694.191261] iomap_dio_rw+0x31/0x90 [ 2694.192024] ext4_file_read_iter+0x2c7/0x4c0 [ 2694.192960] generic_file_splice_read+0x455/0x6d0 [ 2694.193978] ? pipe_to_user+0x170/0x170 [ 2694.194826] ? fsnotify_perm.part.0+0x22d/0x620 [ 2694.195809] ? security_file_permission+0xb1/0xe0 [ 2694.196824] ? pipe_to_user+0x170/0x170 [ 2694.197658] do_splice_to+0x10e/0x160 [ 2694.198471] splice_direct_to_actor+0x2fe/0x980 [ 2694.199462] ? pipe_to_sendpage+0x380/0x380 [ 2694.200370] ? do_splice_to+0x160/0x160 [ 2694.201204] ? security_file_permission+0xb1/0xe0 [ 2694.202230] do_splice_direct+0x1c4/0x290 [ 2694.203102] ? splice_direct_to_actor+0x980/0x980 [ 2694.204119] ? avc_policy_seqno+0x9/0x70 [ 2694.204977] ? security_file_permission+0xb1/0xe0 [ 2694.206006] vfs_copy_file_range+0x4f8/0x13c0 [ 2694.206955] ? generic_file_rw_checks+0x240/0x240 [ 2694.207984] __do_sys_copy_file_range+0x193/0x420 [ 2694.208993] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2694.209985] ? ksys_write+0x1a9/0x260 [ 2694.210787] ? __ia32_sys_read+0xb0/0xb0 [ 2694.211645] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2694.212743] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2694.213821] do_syscall_64+0x33/0x40 [ 2694.214606] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2694.215674] RIP: 0033:0x7f8f1efeeb19 [ 2694.216450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2694.220287] RSP: 002b:00007f8f1c564188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2694.221886] RAX: ffffffffffffffda RBX: 00007f8f1f101f60 RCX: 00007f8f1efeeb19 [ 2694.223382] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000007 [ 2694.224869] RBP: 00007f8f1c5641d0 R08: 000000000200f5ef R09: 0000000000000000 [ 2694.226364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2694.227852] R13: 00007ffe243be31f R14: 00007f8f1c564300 R15: 0000000000022000 06:00:33 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x37}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRES16=r5, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="73ff39bd1666fb1d985bef29", @ANYRES16=r5, @ANYRES16], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x48801) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0xa, 0x1, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0x10c}, 0x1, 0x0, 0x0, 0x1040}, 0x0) ftruncate(r0, 0x1000003) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) syz_open_pts(r3, 0x282000) ioctl$TIOCGPTPEER(r2, 0x5441, 0x11000001) write$binfmt_elf64(r3, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x10) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) write(r4, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x10010, r4, 0x800000000000202) lseek(r4, 0x0, 0x1) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 06:00:47 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x10) 06:00:47 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x36000000) 06:00:47 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xdd00, 0x0, 0x0, 0x0) 06:00:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x0) (fail_nth: 8) 06:00:47 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000140)) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000005c0), 0x4) sendfile(r2, r0, 0x0, 0x80000001) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x202800, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x0, r4}) 06:00:47 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 79) 06:00:47 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2708.320327] FAULT_INJECTION: forcing a failure. [ 2708.320327] name failslab, interval 1, probability 0, space 0, times 0 [ 2708.322894] CPU: 1 PID: 13238 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2708.324349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2708.326120] Call Trace: [ 2708.326684] dump_stack+0x107/0x167 [ 2708.327454] should_fail.cold+0x5/0xa [ 2708.328253] ? io_setup_async_rw+0x180/0x580 [ 2708.329182] should_failslab+0x5/0x20 [ 2708.329981] __kmalloc+0x72/0x390 [ 2708.330726] io_setup_async_rw+0x180/0x580 [ 2708.331615] ? iov_iter_restore+0x195/0x3a0 [ 2708.332540] io_read+0x775/0x11e0 [ 2708.333275] ? ext4_release_file+0x380/0x380 [ 2708.334221] ? kiocb_done+0xc90/0xc90 [ 2708.335025] ? mark_lock+0xf5/0x2df0 [ 2708.335814] ? lock_chain_count+0x20/0x20 [ 2708.336704] ? stack_trace_consume_entry+0x160/0x160 [ 2708.337789] ? lock_acquire+0x197/0x470 [ 2708.338639] ? __lock_acquire+0xbb1/0x5b00 [ 2708.339537] io_issue_sqe+0x2e8a/0x77b0 [ 2708.340392] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2708.341494] ? lock_chain_count+0x20/0x20 [ 2708.342377] ? __is_insn_slot_addr+0x14c/0x290 [ 2708.343341] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2708.344441] ? io_connect+0x610/0x610 [ 2708.345247] ? lock_acquire+0x197/0x470 [ 2708.346127] ? find_held_lock+0x2c/0x110 [ 2708.346990] ? __fget_files+0x2cf/0x520 [ 2708.347828] ? lock_downgrade+0x6d0/0x6d0 [ 2708.348708] __io_queue_sqe+0x90/0x9d0 [ 2708.349538] ? io_issue_sqe+0x77b0/0x77b0 [ 2708.350416] ? __fget_files+0x2f8/0x520 [ 2708.351260] ? io_prep_rw+0x7f5/0x1050 [ 2708.352098] io_submit_sqes+0x44aa/0x8610 [ 2708.352987] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2708.354038] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2708.355068] ? find_held_lock+0x2c/0x110 [ 2708.355926] ? io_submit_sqes+0x8610/0x8610 [ 2708.356842] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2708.357856] ? wait_for_completion_io+0x270/0x270 [ 2708.358859] ? rcu_read_lock_any_held+0x75/0xa0 [ 2708.359806] ? vfs_write+0x354/0xb10 [ 2708.360565] ? fput_many+0x2f/0x1a0 [ 2708.361326] ? ksys_write+0x1a9/0x260 [ 2708.362118] ? __ia32_sys_read+0xb0/0xb0 [ 2708.362969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2708.364060] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2708.365139] do_syscall_64+0x33/0x40 [ 2708.365912] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2708.366992] RIP: 0033:0x7f989282fb19 [ 2708.367768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2708.372148] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2708.373744] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2708.375245] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2708.376743] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2708.378238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2708.379731] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:00:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x0) 06:00:47 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3c000000) 06:00:47 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x12) 06:00:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x2) 06:00:47 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x42000000) 06:00:48 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x3) 06:00:48 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 80) 06:00:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x4) [ 2709.116338] FAULT_INJECTION: forcing a failure. [ 2709.116338] name failslab, interval 1, probability 0, space 0, times 0 [ 2709.118715] CPU: 0 PID: 13281 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2709.120075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2709.121702] Call Trace: [ 2709.122234] dump_stack+0x107/0x167 [ 2709.122949] should_fail.cold+0x5/0xa [ 2709.123704] ? create_object.isra.0+0x3a/0xa20 [ 2709.124599] should_failslab+0x5/0x20 [ 2709.125343] kmem_cache_alloc+0x5b/0x310 [ 2709.126158] create_object.isra.0+0x3a/0xa20 [ 2709.127023] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2709.128020] __kmalloc+0x16e/0x390 [ 2709.128721] io_setup_async_rw+0x180/0x580 [ 2709.129544] ? iov_iter_restore+0x195/0x3a0 [ 2709.130417] io_read+0x775/0x11e0 [ 2709.131105] ? ext4_release_file+0x380/0x380 [ 2709.131979] ? kiocb_done+0xc90/0xc90 [ 2709.132716] ? mark_lock+0xf5/0x2df0 [ 2709.133457] ? lock_chain_count+0x20/0x20 [ 2709.134286] ? stack_trace_consume_entry+0x160/0x160 [ 2709.135293] ? lock_acquire+0x197/0x470 [ 2709.136084] ? __lock_acquire+0xbb1/0x5b00 [ 2709.136916] io_issue_sqe+0x2e8a/0x77b0 [ 2709.137707] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2709.138948] ? lock_chain_count+0x20/0x20 [ 2709.139905] ? __is_insn_slot_addr+0x14c/0x290 [ 2709.140805] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2709.141831] ? io_connect+0x610/0x610 [ 2709.142601] ? lock_acquire+0x197/0x470 [ 2709.143383] ? find_held_lock+0x2c/0x110 [ 2709.144183] ? __fget_files+0x2cf/0x520 [ 2709.144970] ? lock_downgrade+0x6d0/0x6d0 [ 2709.145786] __io_queue_sqe+0x90/0x9d0 [ 2709.146578] ? io_issue_sqe+0x77b0/0x77b0 [ 2709.147390] ? __fget_files+0x2f8/0x520 [ 2709.148185] ? io_prep_rw+0x7f5/0x1050 [ 2709.148957] io_submit_sqes+0x44aa/0x8610 [ 2709.149805] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2709.150794] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2709.151762] ? find_held_lock+0x2c/0x110 [ 2709.152565] ? io_submit_sqes+0x8610/0x8610 [ 2709.153418] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2709.154373] ? wait_for_completion_io+0x270/0x270 [ 2709.155317] ? rcu_read_lock_any_held+0x75/0xa0 [ 2709.156229] ? vfs_write+0x354/0xb10 [ 2709.156958] ? fput_many+0x2f/0x1a0 [ 2709.157669] ? ksys_write+0x1a9/0x260 [ 2709.158429] ? __ia32_sys_read+0xb0/0xb0 [ 2709.159232] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2709.160261] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2709.161287] do_syscall_64+0x33/0x40 [ 2709.162018] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2709.163030] RIP: 0033:0x7f989282fb19 [ 2709.163765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2709.167368] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2709.168862] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2709.170270] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2709.171670] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2709.173069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2709.174475] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:01:02 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 81) 06:01:02 executing program 4: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf250c000000080001000300000008000b009300cb2b27c1231c3a5ad500000c0006000300000003000000080001000100000008000300c478da3c375cef9e9e29e6d48c9982d091d97d113db0a1886b951ea927e5650f6bc31c", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24040090}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r2 = shmget(0x1, 0x1000, 0x1, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000001480)=""/228) shmctl$SHM_INFO(r2, 0xe, &(0x7f00000013c0)=""/174) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000000c0)=""/22) [ 2723.819399] FAULT_INJECTION: forcing a failure. [ 2723.819399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2723.821367] CPU: 0 PID: 13308 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2723.822430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2723.823649] Call Trace: [ 2723.824045] dump_stack+0x107/0x167 [ 2723.824599] should_fail.cold+0x5/0xa [ 2723.825183] _copy_from_user+0x2e/0x1b0 [ 2723.825783] iovec_from_user+0x141/0x400 [ 2723.826393] __import_iovec+0x67/0x590 [ 2723.826987] io_import_iovec+0x581/0x1120 [ 2723.827892] ? io_complete_rw+0x230/0x230 [ 2723.828514] ? kiocb_done+0x16b/0xc90 [ 2723.829097] io_read+0xe14/0x11e0 [ 2723.829626] ? ext4_release_file+0x380/0x380 [ 2723.830293] ? kiocb_done+0xc90/0xc90 [ 2723.830867] ? mark_lock+0xf5/0x2df0 [ 2723.831438] ? lock_chain_count+0x20/0x20 [ 2723.832055] ? stack_trace_consume_entry+0x160/0x160 [ 2723.832827] ? lock_acquire+0x197/0x470 [ 2723.833426] ? lock_acquire+0x197/0x470 [ 2723.834002] ? __lock_acquire+0xbb1/0x5b00 [ 2723.834653] io_issue_sqe+0x2e8a/0x77b0 [ 2723.835261] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2723.836058] ? lock_chain_count+0x20/0x20 [ 2723.836681] ? __is_insn_slot_addr+0x14c/0x290 [ 2723.837365] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2723.838144] ? io_connect+0x610/0x610 [ 2723.838729] ? lock_acquire+0x197/0x470 [ 2723.839316] ? find_held_lock+0x2c/0x110 [ 2723.839926] ? __fget_files+0x2cf/0x520 [ 2723.840495] ? lock_downgrade+0x6d0/0x6d0 [ 2723.841123] __io_queue_sqe+0x90/0x9d0 [ 2723.841716] ? io_issue_sqe+0x77b0/0x77b0 [ 2723.842337] ? __fget_files+0x2f8/0x520 [ 2723.842943] ? io_prep_rw+0x7f5/0x1050 [ 2723.843533] io_submit_sqes+0x44aa/0x8610 [ 2723.844173] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2723.844920] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2723.845641] ? find_held_lock+0x2c/0x110 [ 2723.846246] ? io_submit_sqes+0x8610/0x8610 [ 2723.846871] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2723.847584] ? wait_for_completion_io+0x270/0x270 [ 2723.848294] ? rcu_read_lock_any_held+0x75/0xa0 [ 2723.848981] ? vfs_write+0x354/0xb10 [ 2723.849540] ? fput_many+0x2f/0x1a0 [ 2723.850082] ? ksys_write+0x1a9/0x260 [ 2723.850634] ? __ia32_sys_read+0xb0/0xb0 [ 2723.851234] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2723.852003] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2723.852738] do_syscall_64+0x33/0x40 [ 2723.853274] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2723.854046] RIP: 0033:0x7f989282fb19 [ 2723.854585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2723.857351] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2723.858451] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2723.859455] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2723.860461] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2723.861471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2723.862485] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:01:02 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x18) 06:01:02 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x10000000000) 06:01:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x5) 06:01:02 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1517f, 0x0, 0x0, 0x0) 06:01:02 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x14ad, &(0x7f0000000280)={0x0, 0x20000, 0x2, 0x0, 0x13b, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r2, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r6 = eventfd2(0x1d7, 0x80801) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0xc2b9414c7319be3b, @fd=r6, 0x10002, &(0x7f0000000240), 0x0, 0x1}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:02 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4, 0x0, 0x0, 0x0) 06:01:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x6) 06:01:02 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000003}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, r0) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x80) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0xa, r3) 06:01:03 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) 06:01:03 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x46d81, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x13, r4, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r6, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)=0x80, &(0x7f0000001c80)=@alg, 0x0, 0x80000}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x7) 06:01:03 executing program 4: r0 = syz_io_uring_setup(0x3618, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x0, 0x0) openat(r3, &(0x7f0000000200)='./file1\x00', 0x4040, 0x160) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x7f) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 2724.144610] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. 06:01:03 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000000000000) 06:01:03 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1e) [ 2724.183381] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. 06:01:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x8) 06:01:15 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/node', 0x1012c0, 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000280)={0x8, 0x2, 0x20, 0x1b, 0x4}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:15 executing program 4: ftruncate(0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x5, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000140)={0x0, 0x0, 0x8, 0x1, 0x0, r2, 0x0, 0x800000}]) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04000000000000000000", @ANYRES16, @ANYRES16=r1], 0x28}}, 0x4) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579e1fa459ba7c2e51e171400002000000000000a548867a29f29fd1637ddac658a719b49b093393d0e1c739010000007c", 0xfffffffc}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xee01, 0xee00) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000380), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)="fcdd866bb08466f70cae34b78131bb1cb5a4ceb88f77b8254c5bee682dffb3e4287beaaf0650d92207a6a9bfc5563f37f2f3382c04cfa0fba41938368e355ab6a34c216ebddc857df89434f7e08bbc683323349984aad6d210dcba242273bb7ce59cdbcf8276082c4ec89f528ba86d4b142c1c6e7c59221e7dcb2b2f6bda72a5e19615a2303da329e12411685f3d74ff", 0x90, r4) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000600)=0x1e) perf_event_open(&(0x7f0000001d80)={0x1, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x5, 0x0, 0x7, 0x1f, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000200)=@chain) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 06:01:15 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x80000, 0x0, 0x0, 0x0) 06:01:15 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x24) 06:01:15 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 82) 06:01:15 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0) 06:01:16 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x600000000000000) 06:01:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x9) [ 2737.020213] FAULT_INJECTION: forcing a failure. [ 2737.020213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2737.023035] CPU: 0 PID: 13385 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2737.024597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2737.026480] Call Trace: [ 2737.027078] dump_stack+0x107/0x167 [ 2737.027902] should_fail.cold+0x5/0xa [ 2737.028768] copy_page_to_iter+0x41e/0xf80 [ 2737.029742] generic_file_buffered_read+0xab2/0x2920 [ 2737.030918] ? pagecache_get_page+0xc80/0xc80 [ 2737.031952] generic_file_read_iter+0x33f/0x490 [ 2737.033008] ext4_file_read_iter+0x184/0x4c0 [ 2737.033999] ? ext4_release_file+0x380/0x380 [ 2737.035005] io_read+0x2dc/0x11e0 [ 2737.035785] ? ext4_release_file+0x380/0x380 [ 2737.036788] ? kiocb_done+0xc90/0xc90 [ 2737.037645] ? mark_lock+0xf5/0x2df0 [ 2737.038506] ? lock_chain_count+0x20/0x20 [ 2737.039452] ? stack_trace_consume_entry+0x160/0x160 [ 2737.040607] ? lock_acquire+0x197/0x470 [ 2737.041510] ? __lock_acquire+0xbb1/0x5b00 [ 2737.042476] io_issue_sqe+0x2e8a/0x77b0 [ 2737.043381] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2737.044566] ? lock_chain_count+0x20/0x20 [ 2737.045501] ? __is_insn_slot_addr+0x14c/0x290 [ 2737.046545] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2737.047728] ? io_connect+0x610/0x610 [ 2737.048595] ? lock_acquire+0x197/0x470 [ 2737.049492] ? find_held_lock+0x2c/0x110 [ 2737.050427] ? __fget_files+0x2cf/0x520 [ 2737.051330] ? lock_downgrade+0x6d0/0x6d0 [ 2737.052270] __io_queue_sqe+0x90/0x9d0 [ 2737.053152] ? io_issue_sqe+0x77b0/0x77b0 [ 2737.054084] ? __fget_files+0x2f8/0x520 [ 2737.054993] ? io_prep_rw+0x7f5/0x1050 [ 2737.055879] io_submit_sqes+0x44aa/0x8610 [ 2737.056847] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2737.057971] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2737.059069] ? find_held_lock+0x2c/0x110 [ 2737.059991] ? io_submit_sqes+0x8610/0x8610 [ 2737.060974] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2737.062067] ? wait_for_completion_io+0x270/0x270 [ 2737.063163] ? rcu_read_lock_any_held+0x75/0xa0 [ 2737.064215] ? vfs_write+0x354/0xb10 [ 2737.065058] ? fput_many+0x2f/0x1a0 [ 2737.065882] ? ksys_write+0x1a9/0x260 [ 2737.066751] ? __ia32_sys_read+0xb0/0xb0 [ 2737.067675] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2737.068862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2737.070025] do_syscall_64+0x33/0x40 [ 2737.070877] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2737.072036] RIP: 0033:0x7f989282fb19 [ 2737.072881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2737.077051] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2737.078768] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2737.080378] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2737.081988] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2737.083597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2737.085204] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:01:16 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00000000000000) 06:01:16 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a) 06:01:16 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0) 06:01:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0xa) 06:01:16 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_capability(r0, &(0x7f0000000340), 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:pinentry_exec_t:s0\x00', 0x25, 0x0) recvmsg$unix(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/32, 0x20}, {&(0x7f0000000280)=""/51, 0x33}], 0x2, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x158}, 0x12000) openat(r1, &(0x7f0000000500)='./file0\x00', 0x8000, 0x110) fsetxattr$security_capability(r0, &(0x7f0000000180), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f0000000540)='./file0\x00') 06:01:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0xb) 06:01:16 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000240)={0x0, 0x3, 0xfffffffffffff634, 0x0, 0xffffffffffffffff}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0xc0045878, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="a5e8500d280a6b94d3077ab62bddcd4ce404937e8e64b0fce794e74155917d135214f9bb66796de92b74744465559472c5dc0307638b79946e4525f2c66a60b85b9c0ac8db6d7dffe5715e7ccd9b4046be23f6fc98efc7cc18798c5bcdfa35cd59251db42952e05a6d66ecff8297e6f775869fdf97fb83b4de9323ac1ff5a1d44d8fed552f14fef53fed60a04c4321f4fe1c1d28d0d6143d00bdbe1b7c13c20419e773f0aeb39a7a4763a6258c6ef1ec78f3ad2badb46ac8b46a548b673bd0cd6683a9565a896a21c2e558ca5f4f433b9690aca3dc7df4bf8da33164b6f546370b7951250b9a1c9e1c63dbd5f7"]}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="98000000200039040000e5ffffff0000020000000dc0c23671f1a964651e4d52c3dc9432e6af000060c901a7ea83dce8f6a9c36adbbf7c23348ed75a7bf5116e03f38056144e579e46004fbfb9ae99572129d57aa41a4c792b56978ebd2e72f57ca14145d7bcd879afed4e97abd691d56cf2d815f272170c00110000000000000000655e381211079b3ec2ac35557eb5758500bb3e3c2686d40f485f757e7bd51e163e9c2394948632056b9357f234b64631cba457c59e6d0eae9098c89e3c7aa8b1cbc03bd674263161cff69945516614595dfad881c353d7fb9bbdc2fb19f3306b4f29f5ac8dddb92ee4fe33f6e190dffd186aa055b9a9547a834f1d619073f3ccf4b3acda5d78a8cff254a2de72f20938d689ca4044fab0a3ee36278183e00f05d56ee58c70cc78f1fe11e55c898d61e09dd9ec4b060000000000000006ffd93de78dd56ff6fabb99fb6b42eb449d317ff0f62c982878d984496c08a7a672102affbb245b18bb39d4a7b9a75298857b75fa243b23c8cf9643bb00000000005fc15e6ecd09464e59eb7fd89947c9213bca5dc0b85ccc521acda794895462c77f5ff370f89a2e870f5d485e58951dd7d1e27236dc52ce2c5ad9c73e0a61401a4a516c41604d7981f0c5d28db9d69e06008070a1c8a29ab4b046f86a311abc00000000000000000000000021d58c77edb293cc9578f585bdd701f9ee210643dc82cf55fe6240095b6b3d472798f8f9275542afa54cb35bead6ff06f9faacfe22aecf3a338b66d6b6d7493b8154647492b7504ee04560f3f09be3740b31fc8e83b0d8d71b009490cc8c05463d87a3dc636dd21e096d9d81c6d82e6476e7d92eac37b40eabf6c87bcf97f4e81c20d6cbc305948014b499ce164cd61e37a219f9e9d6192534a1e19508041dee4e6388531d075a48f73d985675042259c55328516aa0d7714a86cb42c54b353075a75bd6c97f07e67799bb3c4acdf717de323a07b094965969ea17dedd4e913cc697ce6454df791c397f653bc1d2408fe440061011d098bba54b0d10a129c468dc1c556c655499d5a8d997d7ba122c42209860f8dd4e3f2993f60563fbb3017e102c0ba23b7a165e666393c89f528000e9545d150b98be854f41773afda6d73adb0f00d1a977cbdb5c3cb7e00897420f0df622573b78bd6c04d38822dc8a2c0a34984c28fe9b13010e182ad700007186202d8177d60129be4d487ab48759eabcb23ff4fc"], 0x98}}, 0x0) close_range(r2, r1, 0x0) fcntl$addseals(r2, 0x409, 0x8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x8, [{0x7, 0x80000001}, {}, {0x7fff}, {0xfffffff7, 0x5}, {0x2, 0xffff}, {0x28f2, 0x3}, {0x1f, 0xfd9}, {0xffff, 0x6}]}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='./file2\x00', 0x200002, 0x84) r3 = fork() ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}]) 06:01:16 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1200000000000000) [ 2737.381099] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2737.472292] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. 06:01:29 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 06:01:29 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 06:01:29 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83) 06:01:29 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x30) 06:01:29 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1800000000000000) 06:01:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0xc) 06:01:29 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5327, &(0x7f0000000440)=@disckey={0x2, 0x0, "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"}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) timer_create(0x3, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="45eceaf0489d7f79fb0000000000000000000000006956a3af7a439cce17ba01be63a2c57b0029ad163c8fa09dc7b4a9d2d3812d760ba3b96dc21572ec9d0df4ecbd151700e9c67d6e96468178feb384fca7e9efab3e0572ad31b72addced879cfad"], 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 06:01:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000040)=0x2700) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={@mcast1, 0x5b}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x64d79ca4eb02dbd8, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r3 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000001400)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) lseek(0xffffffffffffffff, 0x0, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x800001}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x4, 0x40100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext, 0x409becb7bdfc1d3, 0x1, 0x0, 0x9, 0x9db, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2750.334634] FAULT_INJECTION: forcing a failure. [ 2750.334634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2750.337576] CPU: 1 PID: 13447 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2750.339055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2750.340813] Call Trace: [ 2750.341370] dump_stack+0x107/0x167 [ 2750.342136] should_fail.cold+0x5/0xa [ 2750.342950] ? copyout.part.0+0x112/0x140 [ 2750.343834] copy_page_to_iter+0x878/0xf80 [ 2750.344739] generic_file_buffered_read+0xab2/0x2920 [ 2750.345839] ? pagecache_get_page+0xc80/0xc80 [ 2750.346808] generic_file_read_iter+0x33f/0x490 [ 2750.347791] ext4_file_read_iter+0x184/0x4c0 [ 2750.348715] ? ext4_release_file+0x380/0x380 [ 2750.349643] io_read+0x2dc/0x11e0 [ 2750.350376] ? ext4_release_file+0x380/0x380 [ 2750.351320] ? kiocb_done+0xc90/0xc90 [ 2750.352127] ? mark_lock+0xf5/0x2df0 [ 2750.352918] ? lock_chain_count+0x20/0x20 [ 2750.353807] ? stack_trace_consume_entry+0x160/0x160 [ 2750.354902] ? lock_acquire+0x197/0x470 [ 2750.355743] ? __lock_acquire+0xbb1/0x5b00 [ 2750.356651] io_issue_sqe+0x2e8a/0x77b0 [ 2750.357496] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2750.358601] ? lock_chain_count+0x20/0x20 [ 2750.359482] ? __is_insn_slot_addr+0x14c/0x290 [ 2750.360446] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2750.361542] ? io_connect+0x610/0x610 [ 2750.362349] ? lock_acquire+0x197/0x470 [ 2750.363186] ? find_held_lock+0x2c/0x110 [ 2750.364048] ? __fget_files+0x2cf/0x520 [ 2750.364891] ? lock_downgrade+0x6d0/0x6d0 [ 2750.365764] __io_queue_sqe+0x90/0x9d0 [ 2750.366599] ? io_issue_sqe+0x77b0/0x77b0 [ 2750.367461] ? __fget_files+0x2f8/0x520 [ 2750.368299] ? io_prep_rw+0x7f5/0x1050 [ 2750.369123] io_submit_sqes+0x44aa/0x8610 [ 2750.370020] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2750.371073] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2750.372086] ? find_held_lock+0x2c/0x110 [ 2750.372941] ? io_submit_sqes+0x8610/0x8610 [ 2750.373848] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2750.374873] ? wait_for_completion_io+0x270/0x270 [ 2750.375888] ? rcu_read_lock_any_held+0x75/0xa0 [ 2750.376871] ? vfs_write+0x354/0xb10 [ 2750.377651] ? fput_many+0x2f/0x1a0 [ 2750.378423] ? ksys_write+0x1a9/0x260 [ 2750.379247] ? __ia32_sys_read+0xb0/0xb0 [ 2750.380104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2750.381213] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2750.382293] do_syscall_64+0x33/0x40 [ 2750.383082] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2750.384168] RIP: 0033:0x7f989282fb19 [ 2750.384949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2750.388835] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2750.390439] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2750.391955] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2750.393463] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2750.394990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2750.396491] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:01:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0xd) 06:01:29 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1e00000000000000) 06:01:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0xe) 06:01:29 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x10, 0x0, 0x0, 0x0) 06:01:29 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x36) 06:01:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0xf) [ 2751.148326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2751.227030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:01:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x10) 06:01:44 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 06:01:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000002c0)="9cacde3fc52225e04e5d157b8865acd79e", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3, 0x0, 0x3, 0x4, 0x0, 0x6, 0x10028, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x7ff, 0x1}, 0xa00, 0x8000, 0x2, 0x5, 0x7ff, 0x5, 0x7f, 0x0, 0x9, 0x0, 0x7}, r1, 0x6, 0xffffffffffffffff, 0x8) 06:01:44 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3c) 06:01:44 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0) 06:01:44 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 84) 06:01:44 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf0ff7f, 0x0, 0x0, 0x0) 06:01:44 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) [ 2765.618991] FAULT_INJECTION: forcing a failure. [ 2765.618991] name failslab, interval 1, probability 0, space 0, times 0 [ 2765.622037] CPU: 1 PID: 13508 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2765.623561] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2765.625361] Call Trace: [ 2765.625928] dump_stack+0x107/0x167 [ 2765.626751] should_fail.cold+0x5/0xa [ 2765.627594] ? io_setup_async_rw+0x180/0x580 [ 2765.628542] should_failslab+0x5/0x20 [ 2765.629378] __kmalloc+0x72/0x390 [ 2765.630153] io_setup_async_rw+0x180/0x580 [ 2765.631098] ? iov_iter_restore+0x195/0x3a0 [ 2765.632029] io_read+0x775/0x11e0 [ 2765.632784] ? ext4_release_file+0x380/0x380 [ 2765.633763] ? kiocb_done+0xc90/0xc90 [ 2765.634600] ? mark_lock+0xf5/0x2df0 [ 2765.635434] ? lock_chain_count+0x20/0x20 [ 2765.636345] ? stack_trace_consume_entry+0x160/0x160 [ 2765.637460] ? lock_acquire+0x197/0x470 [ 2765.638342] ? __lock_acquire+0xbb1/0x5b00 [ 2765.639292] io_issue_sqe+0x2e8a/0x77b0 [ 2765.640174] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2765.641313] ? lock_chain_count+0x20/0x20 [ 2765.642215] ? __is_insn_slot_addr+0x14c/0x290 [ 2765.643243] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2765.644388] ? io_connect+0x610/0x610 [ 2765.645223] ? lock_acquire+0x197/0x470 [ 2765.646090] ? find_held_lock+0x2c/0x110 [ 2765.646972] ? __fget_files+0x2cf/0x520 [ 2765.647842] ? lock_downgrade+0x6d0/0x6d0 [ 2765.648769] __io_queue_sqe+0x90/0x9d0 [ 2765.649628] ? io_issue_sqe+0x77b0/0x77b0 [ 2765.650525] ? __fget_files+0x2f8/0x520 [ 2765.651407] ? io_prep_rw+0x7f5/0x1050 [ 2765.652268] io_submit_sqes+0x44aa/0x8610 [ 2765.653204] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2765.654284] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2765.655341] ? find_held_lock+0x2c/0x110 [ 2765.656250] ? io_submit_sqes+0x8610/0x8610 [ 2765.657192] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2765.658233] ? wait_for_completion_io+0x270/0x270 [ 2765.659294] ? rcu_read_lock_any_held+0x75/0xa0 [ 2765.660304] ? vfs_write+0x354/0xb10 [ 2765.661132] ? fput_many+0x2f/0x1a0 [ 2765.661909] ? ksys_write+0x1a9/0x260 [ 2765.662744] ? __ia32_sys_read+0xb0/0xb0 [ 2765.663615] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2765.664742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2765.665859] do_syscall_64+0x33/0x40 [ 2765.666669] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2765.667786] RIP: 0033:0x7f989282fb19 [ 2765.668582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2765.672615] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2765.674278] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2765.675819] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2765.677369] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2765.678910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2765.680446] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:01:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="10000000", @ANYRES16=r1, @ANYBLOB="010000000000000000006000000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa50801}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 06:01:44 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840), 0x8}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r1, r0, 0x0) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000240)="f2203ddb7c6fdc891dbd10abb8664304e6d755e1", 0x14}, {&(0x7f0000000280)="9871b4957c0090744695d067b5bb5aa44868d6e900b342fc4e0a6e", 0x1b}, {&(0x7f0000000340)="a3c7671402e6896e4f02b59be70860b5719871372500e4c999cd5e9fb9bb2eaa14fe64e0963b82907513eb6652117056a8edd438fc1761357d02d1625a4237b8e8424c4147260d66bfbda4d8fd58248893f199df276c73848f45b76cb96fd6c0c3e1b9c08aac7d0cada6d8d996ec24cd", 0x70}, {&(0x7f00000003c0)="d03c023dd7c461749e070f11c154653957c2c1b282ff8650e7d1725176e3774fc41f4f39bf820a349f59a937411ac6909cd79b4d80f390067ff026f2b11e18fc262b97c183c71b3b3859af87408c6952dc8a1dda3e5c75992dfcf5e37ebb513c13141ac0ad488a8969127da94bd07e37db7d1b8f3eec4da0", 0x78}], 0x4, 0x2) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r2, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x11) [ 2765.799081] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. 06:01:44 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2400000000000000) 06:01:44 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000380)="9a4876e5213215efccf96076d081584efe9a9c7bf2a33452ed1b104fe62bb2c52657a8bc41eb1001abcdb8ec06e3774cd3b5466fc0071e074e5e87a36d0f33ea72251fd91783d332a21dfa9671d996f90f1b88ae8ac8bf34af2555d6f6affd6a3efa53be538ec3b7a3ef545e2a4c3d9b161477a325d221ad41e92934061b90665c12ab094334fb5e5d927bb6a3", 0x8d}], 0x1) pidfd_open(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000fffffdfd022a059c374702ce9daaa25c98927fa70100000000000000000000000000000000000000000000000000000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000004000000ac806262ebac1cf74f90c50617ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000009e209655a31e2d11eb1c36fce51f7b43b19b08e244e9905b311f58f6c960189aced22ecbc10b8b6ce2da5194f965040735999538baff0a799356711026abe1d34c706cad9a404547c6c46977f2941411ef7cd9890a607c61840ba1c8380c2f8cf7d10aaebd0776e20d4e015f2844a6913b6d2582094c145e15bf51"]) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe72"]}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r1, 0x10000000) r3 = accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) r4 = openat$cgroup_int(r0, &(0x7f0000000300)='memory.max\x00', 0x2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000500)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x5, 0x3f, {0x0, r3}, 0x7, 0x7, 0x0, {0x0, 0x0, r4}}, 0x9) close(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x20000004}}, 0x81) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) unshare(0x48020200) pwrite64(r0, &(0x7f0000000440)="3acff55253c450b17cecaeb5ffae4379d2fe166cf9631407a35b8ad99b31b57576126186954a22c5ba9895b5e95d805fc1854c266310c9db7a901175afcc61a6b872dc6d677f2b90141b5b51923c19d1a7d92de6ec518417881e9198b71fd903e12c712d584b631f6daad6194185dbde7c2e67586adc86f9fdfc69e68e7cb3a039483a41e53a2c2b20e052e99ef433d80abb5e39e89c33211847c312460362008d115de216de6f4bad466377cf9c26613a8d3e16ca", 0xb5, 0xfffffffffffffe01) 06:01:44 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0) 06:01:44 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xde) 06:01:45 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 85) 06:01:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x12) [ 2766.001067] FAULT_INJECTION: forcing a failure. [ 2766.001067] name failslab, interval 1, probability 0, space 0, times 0 [ 2766.002477] CPU: 0 PID: 13553 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2766.003266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2766.004160] Call Trace: [ 2766.004458] dump_stack+0x107/0x167 [ 2766.004851] should_fail.cold+0x5/0xa [ 2766.005261] ? io_setup_async_rw+0x180/0x580 [ 2766.005738] should_failslab+0x5/0x20 [ 2766.006147] __kmalloc+0x72/0x390 [ 2766.006545] io_setup_async_rw+0x180/0x580 [ 2766.007020] ? iov_iter_restore+0x195/0x3a0 [ 2766.007514] io_read+0x775/0x11e0 [ 2766.007893] ? ext4_release_file+0x380/0x380 [ 2766.008403] ? kiocb_done+0xc90/0xc90 [ 2766.008833] ? mark_lock+0xf5/0x2df0 [ 2766.009255] ? register_lock_class+0xbb/0x17b0 [ 2766.009755] ? arch_stack_walk+0x99/0xf0 [ 2766.010216] ? lock_chain_count+0x20/0x20 [ 2766.010683] ? is_dynamic_key+0x1e0/0x1e0 [ 2766.011151] ? __lock_acquire+0x1657/0x5b00 [ 2766.011650] ? __lock_acquire+0xbb1/0x5b00 [ 2766.012108] io_issue_sqe+0x2e8a/0x77b0 [ 2766.012562] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2766.013133] ? lock_chain_count+0x20/0x20 [ 2766.013608] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2766.014175] ? io_connect+0x610/0x610 [ 2766.014597] ? lock_acquire+0x197/0x470 [ 2766.015063] ? find_held_lock+0x2c/0x110 [ 2766.015527] ? __fget_files+0x2cf/0x520 [ 2766.015980] ? lock_downgrade+0x6d0/0x6d0 [ 2766.016461] __io_queue_sqe+0x90/0x9d0 [ 2766.016912] ? io_issue_sqe+0x77b0/0x77b0 [ 2766.017372] ? __fget_files+0x2f8/0x520 [ 2766.017817] ? io_prep_rw+0x7f5/0x1050 [ 2766.018262] io_submit_sqes+0x44aa/0x8610 [ 2766.018729] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2766.019277] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2766.019801] ? find_held_lock+0x2c/0x110 [ 2766.020241] ? io_submit_sqes+0x8610/0x8610 [ 2766.020710] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2766.021238] ? wait_for_completion_io+0x270/0x270 [ 2766.021762] ? rcu_read_lock_any_held+0x75/0xa0 [ 2766.022259] ? vfs_write+0x354/0xb10 [ 2766.022661] ? fput_many+0x2f/0x1a0 [ 2766.023067] ? ksys_write+0x1a9/0x260 [ 2766.023479] ? __ia32_sys_read+0xb0/0xb0 [ 2766.023920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2766.024494] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2766.025084] do_syscall_64+0x33/0x40 [ 2766.025494] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2766.026085] RIP: 0033:0x7f989282fb19 [ 2766.026503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2766.028506] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2766.029367] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2766.030180] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2766.030996] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2766.031781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2766.032592] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 [ 2766.544559] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. 06:02:00 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5) 06:02:00 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a00000000000000) 06:02:00 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x7e81, &(0x7f00000002c0)={0x0, 0x2, 0x2, 0x800002, 0x388}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000200)=0x0) io_uring_enter(r0, 0x5b7, 0xc77c, 0x3, &(0x7f0000000280)={[0x2000000005]}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000400), 0x2484c0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x7) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000240)={0x2, 0x5, 0x8a, &(0x7f0000000340)=""/138}) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x4e71, 0xeb, 0x0, 0x0, 0x0) 06:02:00 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1000000, 0x0, 0x0, 0x0) 06:02:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x23) 06:02:00 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 86) 06:02:00 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e, 0x0, 0x0, 0x0) 06:02:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x5}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x911802, 0x140) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) r6 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) flistxattr(r6, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)) dup3(r6, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) mq_timedsend(r6, &(0x7f0000001e00)="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", 0xff8, 0x5, &(0x7f0000000000)={0x0, 0x3938700}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x7f, "9656c75f04ba4d"}) lseek(r1, 0x1, 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(r2, 0x0, 0x0, 0x186) copy_file_range(r7, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 2781.571509] FAULT_INJECTION: forcing a failure. [ 2781.571509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2781.574035] CPU: 1 PID: 13578 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2781.575494] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2781.577227] Call Trace: [ 2781.577784] dump_stack+0x107/0x167 [ 2781.578554] should_fail.cold+0x5/0xa [ 2781.579364] _copy_from_user+0x2e/0x1b0 [ 2781.580213] iovec_from_user+0x141/0x400 [ 2781.581068] __import_iovec+0x67/0x590 [ 2781.581898] io_import_iovec+0x581/0x1120 [ 2781.582772] ? io_complete_rw+0x230/0x230 [ 2781.583658] ? kiocb_done+0x16b/0xc90 [ 2781.584453] io_read+0xe14/0x11e0 [ 2781.585188] ? ext4_release_file+0x380/0x380 [ 2781.586110] ? kiocb_done+0xc90/0xc90 [ 2781.586916] ? mark_lock+0xf5/0x2df0 [ 2781.587704] ? lock_chain_count+0x20/0x20 [ 2781.588583] ? stack_trace_consume_entry+0x160/0x160 [ 2781.589643] ? lock_acquire+0x197/0x470 [ 2781.590480] ? lock_acquire+0x197/0x470 [ 2781.591324] ? __lock_acquire+0xbb1/0x5b00 [ 2781.592218] io_issue_sqe+0x2e8a/0x77b0 [ 2781.593060] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2781.594163] ? lock_chain_count+0x20/0x20 [ 2781.595055] ? __is_insn_slot_addr+0x14c/0x290 [ 2781.596024] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2781.597116] ? io_connect+0x610/0x610 [ 2781.597920] ? lock_acquire+0x197/0x470 [ 2781.598744] ? find_held_lock+0x2c/0x110 [ 2781.599603] ? __fget_files+0x2cf/0x520 [ 2781.600432] ? lock_downgrade+0x6d0/0x6d0 [ 2781.601305] __io_queue_sqe+0x90/0x9d0 [ 2781.602117] ? io_issue_sqe+0x77b0/0x77b0 [ 2781.602984] ? __fget_files+0x2f8/0x520 [ 2781.603821] ? io_prep_rw+0x7f5/0x1050 [ 2781.604633] io_submit_sqes+0x44aa/0x8610 [ 2781.605519] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2781.606560] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2781.607580] ? find_held_lock+0x2c/0x110 [ 2781.608436] ? io_submit_sqes+0x8610/0x8610 [ 2781.609336] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2781.610338] ? wait_for_completion_io+0x270/0x270 [ 2781.611357] ? rcu_read_lock_any_held+0x75/0xa0 [ 2781.612326] ? vfs_write+0x354/0xb10 [ 2781.613099] ? fput_many+0x2f/0x1a0 [ 2781.613860] ? ksys_write+0x1a9/0x260 [ 2781.614652] ? __ia32_sys_read+0xb0/0xb0 [ 2781.615523] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2781.616621] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2781.617698] do_syscall_64+0x33/0x40 [ 2781.618473] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2781.619543] RIP: 0033:0x7f989282fb19 [ 2781.620322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2781.624169] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2781.625754] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2781.627246] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2781.628742] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2781.630229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2781.631722] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:02:00 executing program 4: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840), 0x8}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r1, r0, 0x0) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000240)="f2203ddb7c6fdc891dbd10abb8664304e6d755e1", 0x14}, {&(0x7f0000000280)="9871b4957c0090744695d067b5bb5aa44868d6e900b342fc4e0a6e", 0x1b}, {&(0x7f0000000340)="a3c7671402e6896e4f02b59be70860b5719871372500e4c999cd5e9fb9bb2eaa14fe64e0963b82907513eb6652117056a8edd438fc1761357d02d1625a4237b8e8424c4147260d66bfbda4d8fd58248893f199df276c73848f45b76cb96fd6c0c3e1b9c08aac7d0cada6d8d996ec24cd", 0x70}, {&(0x7f00000003c0)="d03c023dd7c461749e070f11c154653957c2c1b282ff8650e7d1725176e3774fc41f4f39bf820a349f59a937411ac6909cd79b4d80f390067ff026f2b11e18fc262b97c183c71b3b3859af87408c6952dc8a1dda3e5c75992dfcf5e37ebb513c13141ac0ad488a8969127da94bd07e37db7d1b8f3eec4da0", 0x78}], 0x4, 0x2) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r2, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x64) [ 2781.749159] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. 06:02:00 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3000000000000000) 06:02:00 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x321) 06:02:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0xf1) 06:02:00 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x700, 0x93) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x9c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xd8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x68, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x408c0}, 0x20000042) r1 = socket$netlink(0x10, 0x3, 0x0) getpgrp(0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000013000100000000000000000000000000f4000000000000000c00008008000d006415e32d5e2fb4e57d144079b49a582a424109741e6309cec98dce21eed070004378eba1b0c4a28603a978374e7455b8dff036acc1c0195cb0c5195666d6f2812fd9d09aaf2644", @ANYRES32=r1, @ANYBLOB="6e33d90df21fea540696a7ae3b1e6312cfe4a4857fda70b13b00000000400000000000000036e2a64803d638ac92c0923ed6433bfc53fe95014a7043cd18064a536f0e35cf6223c6d8b0212100074b4b105db9fa74ef15dd7400"/105], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x88041) 06:02:15 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000000, 0x0, 0x0, 0x0) 06:02:15 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3600000000000000) 06:02:15 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r4, 0x12a3, 0x349b, 0x4, &(0x7f0000000240)={[0x1]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x102) 06:02:15 executing program 4: listen(0xffffffffffffffff, 0x0) r0 = pidfd_open(0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000140)={0x4, 0x9, 0x3, 0x0, 0x0, [0x0, 0x3f, 0x8001, 0xffffffff]}) sendfile(r0, r0, &(0x7f0000000180)=0x7, 0x80) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r2 = io_uring_setup(0x6646, &(0x7f0000000040)={0x0, 0x9055, 0x4, 0x1, 0x2ef, 0x0, r1}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/77, 0x4d, 0x9) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x48, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}, @nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}]}]}, 0x48}}, 0x0) 06:02:15 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x24, 0x0, 0x0, 0x0) 06:02:15 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x600) 06:02:15 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 87) [ 2796.023227] debugfs: Directory '€˜§°ÇÛ ”uòQÇC !' with parent 'ieee80211' already present! [ 2796.042268] FAULT_INJECTION: forcing a failure. [ 2796.042268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2796.045144] CPU: 0 PID: 13649 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2796.046909] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2796.049058] Call Trace: [ 2796.049741] dump_stack+0x107/0x167 [ 2796.050684] should_fail.cold+0x5/0xa [ 2796.051803] _copy_from_user+0x2e/0x1b0 [ 2796.052781] iovec_from_user+0x141/0x400 [ 2796.053777] __import_iovec+0x67/0x590 [ 2796.054739] io_import_iovec+0x581/0x1120 [ 2796.055787] ? io_complete_rw+0x230/0x230 [ 2796.056651] ? kiocb_done+0x16b/0xc90 [ 2796.057424] io_read+0xe14/0x11e0 [ 2796.058120] ? ext4_release_file+0x380/0x380 [ 2796.059018] ? kiocb_done+0xc90/0xc90 [ 2796.059776] ? mark_lock+0xf5/0x2df0 [ 2796.060535] ? lock_chain_count+0x20/0x20 [ 2796.061380] ? stack_trace_consume_entry+0x160/0x160 [ 2796.062407] ? lock_acquire+0x197/0x470 [ 2796.063219] ? __lock_acquire+0xbb1/0x5b00 [ 2796.064069] io_issue_sqe+0x2e8a/0x77b0 [ 2796.064879] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2796.065926] ? lock_chain_count+0x20/0x20 [ 2796.066753] ? __is_insn_slot_addr+0x14c/0x290 [ 2796.067683] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2796.068736] ? io_connect+0x610/0x610 [ 2796.069510] ? lock_acquire+0x197/0x470 [ 2796.070312] ? find_held_lock+0x2c/0x110 [ 2796.071142] ? __fget_files+0x2cf/0x520 [ 2796.071939] ? lock_downgrade+0x6d0/0x6d0 [ 2796.072776] __io_queue_sqe+0x90/0x9d0 [ 2796.073564] ? io_issue_sqe+0x77b0/0x77b0 [ 2796.074395] ? __fget_files+0x2f8/0x520 [ 2796.075211] ? io_prep_rw+0x7f5/0x1050 [ 2796.076002] io_submit_sqes+0x44aa/0x8610 [ 2796.076861] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2796.077872] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2796.078836] ? find_held_lock+0x2c/0x110 [ 2796.079671] ? io_submit_sqes+0x8610/0x8610 [ 2796.080547] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2796.081521] ? wait_for_completion_io+0x270/0x270 [ 2796.082493] ? rcu_read_lock_any_held+0x75/0xa0 [ 2796.083438] ? vfs_write+0x354/0xb10 [ 2796.084187] ? fput_many+0x2f/0x1a0 [ 2796.084921] ? ksys_write+0x1a9/0x260 [ 2796.085693] ? __ia32_sys_read+0xb0/0xb0 [ 2796.086517] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2796.087585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2796.088638] do_syscall_64+0x33/0x40 [ 2796.089402] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2796.090432] RIP: 0033:0x7f989282fb19 [ 2796.091189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2796.094878] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2796.096426] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2796.097860] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2796.099306] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2796.100731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2796.102172] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 [ 2796.205243] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2796.207216] CPU: 0 PID: 13663 Comm: syz-executor.4 Not tainted 5.10.239 #1 [ 2796.208633] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2796.210328] Call Trace: [ 2796.210872] dump_stack+0x107/0x167 [ 2796.211626] sysfs_warn_dup.cold+0x1c/0x29 [ 2796.212494] sysfs_do_create_link_sd+0x122/0x140 [ 2796.213458] sysfs_create_link+0x5f/0xc0 [ 2796.214292] device_add+0x703/0x1c50 [ 2796.215124] ? devlink_add_symlinks+0x970/0x970 [ 2796.216281] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2796.217356] wiphy_register+0x1da6/0x2850 [ 2796.218215] ? wiphy_unregister+0xb90/0xb90 [ 2796.219103] ? write_comp_data+0x18/0x80 [ 2796.219939] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2796.221030] ieee80211_register_hw+0x23c5/0x38b0 [ 2796.222010] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2796.222986] ? net_generic+0xdb/0x2b0 [ 2796.223771] ? lockdep_init_map_type+0x2c7/0x780 [ 2796.224727] ? memset+0x20/0x50 [ 2796.225397] ? __hrtimer_init+0x12c/0x270 [ 2796.226238] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2796.227276] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2796.228217] ? hwsim_new_radio_nl+0x967/0x1080 [ 2796.229142] ? memcpy+0x39/0x60 [ 2796.229820] hwsim_new_radio_nl+0x991/0x1080 [ 2796.230722] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2796.231806] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2796.233140] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2796.234470] genl_family_rcv_msg_doit+0x22d/0x330 [ 2796.235462] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2796.236797] ? cap_capable+0x1cd/0x230 [ 2796.237599] ? ns_capable+0xe2/0x110 [ 2796.238363] genl_rcv_msg+0x36a/0x5a0 [ 2796.239147] ? genl_get_cmd+0x480/0x480 [ 2796.239956] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2796.241007] ? lock_release+0x680/0x680 [ 2796.241810] ? netlink_deliver_tap+0xf4/0xcc0 [ 2796.242728] netlink_rcv_skb+0x14b/0x430 [ 2796.243565] ? genl_get_cmd+0x480/0x480 [ 2796.244372] ? netlink_ack+0xab0/0xab0 [ 2796.245169] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2796.246095] ? is_vmalloc_addr+0x7b/0xb0 [ 2796.246926] genl_rcv+0x24/0x40 [ 2796.247604] netlink_unicast+0x54e/0x800 [ 2796.248439] ? netlink_attachskb+0x870/0x870 [ 2796.249343] netlink_sendmsg+0x90f/0xe00 [ 2796.250174] ? netlink_unicast+0x800/0x800 [ 2796.251049] ? netlink_unicast+0x800/0x800 [ 2796.251913] __sock_sendmsg+0x154/0x190 [ 2796.252719] ____sys_sendmsg+0x70d/0x870 [ 2796.253544] ? sock_write_iter+0x3d0/0x3d0 [ 2796.254401] ? do_recvmmsg+0x6d0/0x6d0 [ 2796.255219] ___sys_sendmsg+0xf3/0x170 [ 2796.256013] ? sendmsg_copy_msghdr+0x160/0x160 [ 2796.256940] ? __fget_files+0x2cf/0x520 [ 2796.257744] ? lock_downgrade+0x6d0/0x6d0 [ 2796.258584] ? finish_task_switch+0x126/0x5d0 [ 2796.259502] ? lock_downgrade+0x6d0/0x6d0 [ 2796.260351] ? __fget_files+0x2f8/0x520 [ 2796.261179] ? __fget_light+0xea/0x290 [ 2796.261978] __sys_sendmsg+0xe5/0x1b0 [ 2796.262749] ? __sys_sendmsg_sock+0x40/0x40 [ 2796.263646] ? io_schedule_timeout+0x140/0x140 [ 2796.264589] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2796.265652] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2796.266693] ? trace_hardirqs_on+0x5b/0x180 [ 2796.267578] do_syscall_64+0x33/0x40 [ 2796.268332] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2796.269372] RIP: 0033:0x7fafb0aa8b19 [ 2796.270128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2796.273860] RSP: 002b:00007fafadffd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2796.275409] RAX: ffffffffffffffda RBX: 00007fafb0bbc020 RCX: 00007fafb0aa8b19 [ 2796.276855] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2796.278297] RBP: 00007fafb0b02f6d R08: 0000000000000000 R09: 0000000000000000 [ 2796.279757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2796.281206] R13: 00007ffc2d3533ef R14: 00007fafadffd300 R15: 0000000000022000 06:02:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x10a) 06:02:15 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00) 06:02:15 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:15 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3c00000000000000) 06:02:15 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000a00008b50b24b4b39d0094c50a020a05b47124a9a2c5ba0727c63244f20a8523e73b1a0dd85a2affa6bcad4285b50cc1ecc029f541a4d739b484a4580d46e6187cfe1b06d88a6bd1b7804d7092c02a4c56d9229de63b7ad02ab37abf17d9ab7bdb6106a17f6", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = syz_io_uring_setup(0x4d4d, &(0x7f00000002c0)={0x0, 0x4959, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r1, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:15 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a, 0x0, 0x0, 0x0) 06:02:15 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4200000000000000) 06:02:15 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1200) 06:02:31 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x30, 0x0, 0x0, 0x0) 06:02:31 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008001}, 0x0, 0xe, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) syz_io_uring_setup(0x4a40, &(0x7f0000000280)={0x0, 0x9b21, 0x8, 0x2, 0x1d9}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x6, 0x1, 0x1, 0x0, 0x2, 0x0, {0x1, r5}}, 0x9) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x1, 0x0, 0x1, {0x0, r5}}, 0x0) 06:02:31 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3000000, 0x0, 0x0, 0x0) 06:02:31 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 88) 06:02:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x201) 06:02:31 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)={[{@fat=@uid={'uid', 0x3d, 0xee01}}], [{@obj_user={'obj_user', 0x3d, 'uid'}}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x30, 0x66, 0x39, 0x30, 0x37, 0x35, 0xcf], 0x2d, [0x32, 0x36, 0x66, 0x63], 0x2d, [0x35, 0x34, 0x64, 0x31], 0x2d, [0x38, 0x38, 0x66, 0x62], 0x2d, [0x38, 0x33, 0x0, 0x38, 0x30, 0x31, 0x61, 0x31]}}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000800)=[{&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000400)=""/149, 0x95}, {&(0x7f00000004c0)=""/191, 0xbf}, {&(0x7f0000000580)=""/114, 0x72}, {&(0x7f0000000600)=""/122, 0x7a}, {&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/205, 0xcd}], 0x9, 0x3, 0x9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setstatus(r2, 0x4, 0x2000) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x200) 06:02:31 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0x1, 0x23001, 0x23456, {0x0, r5}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:31 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1800) [ 2812.698267] FAULT_INJECTION: forcing a failure. [ 2812.698267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2812.701943] CPU: 0 PID: 13722 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2812.703517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2812.705398] Call Trace: [ 2812.706004] dump_stack+0x107/0x167 [ 2812.706831] should_fail.cold+0x5/0xa [ 2812.707701] ? copyout.part.0+0x112/0x140 [ 2812.708636] copy_page_to_iter+0x878/0xf80 [ 2812.709607] generic_file_buffered_read+0xab2/0x2920 [ 2812.710777] ? pagecache_get_page+0xc80/0xc80 [ 2812.711822] generic_file_read_iter+0x33f/0x490 [ 2812.712916] ext4_file_read_iter+0x184/0x4c0 [ 2812.713913] ? ext4_release_file+0x380/0x380 [ 2812.714895] io_read+0x2dc/0x11e0 [ 2812.715685] ? ext4_release_file+0x380/0x380 [ 2812.716692] ? kiocb_done+0xc90/0xc90 [ 2812.717551] ? mark_lock+0xf5/0x2df0 [ 2812.718402] ? lock_chain_count+0x20/0x20 [ 2812.719367] ? stack_trace_consume_entry+0x160/0x160 [ 2812.720532] ? lock_acquire+0x197/0x470 [ 2812.721423] ? __lock_acquire+0xbb1/0x5b00 [ 2812.722383] io_issue_sqe+0x2e8a/0x77b0 [ 2812.723302] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2812.724487] ? lock_chain_count+0x20/0x20 [ 2812.725424] ? __is_insn_slot_addr+0x14c/0x290 [ 2812.726458] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2812.727661] ? io_connect+0x610/0x610 [ 2812.728551] ? lock_acquire+0x197/0x470 [ 2812.729450] ? find_held_lock+0x2c/0x110 [ 2812.730374] ? __fget_files+0x2cf/0x520 [ 2812.731282] ? lock_downgrade+0x6d0/0x6d0 [ 2812.732224] __io_queue_sqe+0x90/0x9d0 [ 2812.733113] ? io_issue_sqe+0x77b0/0x77b0 [ 2812.734046] ? __fget_files+0x2f8/0x520 [ 2812.734951] ? io_prep_rw+0x7f5/0x1050 [ 2812.735847] io_submit_sqes+0x44aa/0x8610 [ 2812.736816] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2812.737940] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2812.739032] ? find_held_lock+0x2c/0x110 [ 2812.739967] ? io_submit_sqes+0x8610/0x8610 [ 2812.740932] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2812.742028] ? wait_for_completion_io+0x270/0x270 [ 2812.743122] ? rcu_read_lock_any_held+0x75/0xa0 [ 2812.744186] ? vfs_write+0x354/0xb10 [ 2812.745033] ? fput_many+0x2f/0x1a0 [ 2812.745857] ? ksys_write+0x1a9/0x260 [ 2812.746722] ? __ia32_sys_read+0xb0/0xb0 [ 2812.747655] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2812.748844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2812.750016] do_syscall_64+0x33/0x40 [ 2812.750857] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2812.752027] RIP: 0033:0x7f989282fb19 [ 2812.752884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2812.757063] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2812.758788] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2812.760417] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2812.762040] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2812.763662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2812.765280] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:02:31 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x640c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400000, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000e, 0x30, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)={0x8402, 0x0, 0x15}, 0x18) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x2a7b, &(0x7f0000000340)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827bd7000fddbdf254c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0f00006e0000000400bf0008000d00ffffffff0400cc00"], 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x240000d0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x1, &(0x7f0000000100)="b9bbb734ec3e0929789a3961a5b9680cd29efec6900cc290bb23b3fcff7d414f2931bb1c90ae40ce334aafb19e494aff84030f5e8849b01598eda6eecb2e661fd9ba3de4b6c8b6131fa48a94503b44258278606ee4f5e1b0c22fe722fc684181a5921c013d67acabe26a09d312cf88bd17c88f3494f58da6b5", 0x7, 0x0, 0x0, {0x1}}, 0x2) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000600)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2f13) fallocate(0xffffffffffffffff, 0x0, 0x4, 0x2) 06:02:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x281) 06:02:31 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1e00) 06:02:31 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000240), 0x0, 0x82) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000280)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x20c380, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x300) 06:02:32 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x36, 0x0, 0x0, 0x0) 06:02:32 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x640c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400000, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000e, 0x30, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)={0x8402, 0x0, 0x15}, 0x18) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x2a7b, &(0x7f0000000340)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827bd7000fddbdf254c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0f00006e0000000400bf0008000d00ffffffff0400cc00"], 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x240000d0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x1, &(0x7f0000000100)="b9bbb734ec3e0929789a3961a5b9680cd29efec6900cc290bb23b3fcff7d414f2931bb1c90ae40ce334aafb19e494aff84030f5e8849b01598eda6eecb2e661fd9ba3de4b6c8b6131fa48a94503b44258278606ee4f5e1b0c22fe722fc684181a5921c013d67acabe26a09d312cf88bd17c88f3494f58da6b5", 0x7, 0x0, 0x0, {0x1}}, 0x2) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000600)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2f13) fallocate(0xffffffffffffffff, 0x0, 0x4, 0x2) 06:02:32 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x18000, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0xa) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x404d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, &(0x7f0000000240)=0x6e, 0x180000) dup3(0xffffffffffffffff, r3, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0xcfda1194c326c2fd, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:32 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 06:02:46 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2103) 06:02:46 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000000, 0x0, 0x0, 0x0) 06:02:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x321) 06:02:46 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 89) 06:02:46 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) vmsplice(r4, &(0x7f0000001800)=[{&(0x7f0000000280)="29dfebfe041f6526088ac7e5bd7cbdf8c4c40d65c4ad3d70ac221ac82890db7a8759963a9f7d1c3a94b41655b3776f159bf2686cd18a54b87f", 0x39}, {&(0x7f00000003c0)="f6d9cf4510fcbceb2d620af92cd6dde79bd464a75f67019122c8cb1eb5ce634bf21d94527a5d3bff919d711015843df3be47231ab301ebb9606eca1c4316e40bcd3988c48d0c49af5a58f36e28aa8beb61a1a714a3c49d497ca9a175cc4e5df0df08dc1786426835edbe62463f316c7123f04e426ad1589616dde9380dfeb37ed295f168428894df6cd72341af15b488a08b59548d3db73a6aad6e77631a9032ea72b9c05fd51dea21bda542fbc44167c68121fdd7d4a0578fcbb53ad8b06c5279d3beb665433844c78c3f17b4ff72b3e534370bed5ea6a4798b96c18a6294f49996ea28afbc89057a2fd3", 0xeb}, {&(0x7f00000004c0)="b85d3f208034b1f22a43caaa6e64ccc90e68e365429d5d89d405755628ff77ad32", 0x21}, {&(0x7f0000000500)="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", 0xfd}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="d336d16a14a0654e065dbf847fb93ba5189df8a1750577cfb09ec8f306009e9bf9c110f048a91c85161b0b5ae3cee05d1d71d6d13b49533468d9054ddbba20bd97f6bfb6629fa9174d53945d36d9186a5aae8d90741b28db569b6c66e184734a5137b6879fd45ac5fdb1d196ff0e9cb19938", 0x72}, {&(0x7f0000001680)="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", 0xfb}, {&(0x7f0000001780)="52e64a", 0x3}, {&(0x7f00000017c0)="cde3d6ab67b2b7c6a9a93a3a9a62df652dd776131983132e606f174048dcc5026f4d715db82668c296ba7ab0c6a3fc80fc49552fba0550a097121da7", 0x3c}], 0x9, 0x8) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r6}, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xd, 0x4, 0xf7, 0xa2, 0x0, 0x7ff, 0x22010, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x0, 0x5, 0x1, 0x8, 0x7, 0x40, 0x0, 0x0, 0x1cbd7f48, 0x0, 0x7}, r6, 0x3, 0xffffffffffffffff, 0x9) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2827.029869] 9pnet: Insufficient options for proto=fd [ 2827.039879] FAULT_INJECTION: forcing a failure. [ 2827.039879] name failslab, interval 1, probability 0, space 0, times 0 [ 2827.041265] CPU: 0 PID: 13778 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2827.042097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2827.043111] Call Trace: [ 2827.043444] dump_stack+0x107/0x167 [ 2827.043891] should_fail.cold+0x5/0xa [ 2827.044355] ? io_setup_async_rw+0x180/0x580 [ 2827.044894] should_failslab+0x5/0x20 [ 2827.045349] __kmalloc+0x72/0x390 [ 2827.045772] io_setup_async_rw+0x180/0x580 [ 2827.046280] ? iov_iter_restore+0x195/0x3a0 [ 2827.046801] io_read+0x775/0x11e0 [ 2827.047453] ? ext4_release_file+0x380/0x380 [ 2827.048056] ? kiocb_done+0xc90/0xc90 [ 2827.048522] ? mark_lock+0xf5/0x2df0 [ 2827.048975] ? lock_chain_count+0x20/0x20 [ 2827.049473] ? mark_lock+0xf5/0x2df0 [ 2827.049922] ? lock_chain_count+0x20/0x20 [ 2827.050427] ? lock_acquire+0x197/0x470 [ 2827.050908] ? __lock_acquire+0xbb1/0x5b00 [ 2827.051429] io_issue_sqe+0x2e8a/0x77b0 [ 2827.051914] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2827.052550] ? lock_chain_count+0x20/0x20 [ 2827.053052] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2827.053681] ? io_connect+0x610/0x610 [ 2827.054144] ? lock_acquire+0x197/0x470 [ 2827.054631] ? find_held_lock+0x2c/0x110 [ 2827.055122] ? __fget_files+0x2cf/0x520 [ 2827.055614] ? lock_downgrade+0x6d0/0x6d0 [ 2827.056112] __io_queue_sqe+0x90/0x9d0 [ 2827.056588] ? io_issue_sqe+0x77b0/0x77b0 [ 2827.057077] ? __fget_files+0x2f8/0x520 [ 2827.057559] ? io_prep_rw+0x7f5/0x1050 [ 2827.058027] io_submit_sqes+0x44aa/0x8610 [ 2827.058539] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2827.059135] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2827.059728] ? find_held_lock+0x2c/0x110 [ 2827.060217] ? io_submit_sqes+0x8610/0x8610 [ 2827.060742] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2827.061321] ? wait_for_completion_io+0x270/0x270 [ 2827.061903] ? rcu_read_lock_any_held+0x75/0xa0 [ 2827.062455] ? vfs_write+0x354/0xb10 [ 2827.062898] ? fput_many+0x2f/0x1a0 [ 2827.063340] ? ksys_write+0x1a9/0x260 [ 2827.063792] ? __ia32_sys_read+0xb0/0xb0 [ 2827.064277] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2827.064898] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2827.065525] do_syscall_64+0x33/0x40 [ 2827.065971] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2827.066576] RIP: 0033:0x7f989282fb19 [ 2827.067026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2827.069236] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2827.070144] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2827.071008] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2827.071868] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2827.072735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2827.073599] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:02:46 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c, 0x0, 0x0, 0x0) 06:02:46 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001400)=""/53, 0x35) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001440)={{r0}, 0x0, 0x0, @inherit={0x60, &(0x7f0000000500)={0x1, 0x3, 0x8, 0xfd, {0x30, 0x80000000, 0x3, 0x300000000000000, 0x49cae5c0}, [0x6, 0x7, 0x0]}}, @name="22aa1f5488b9052868a3fd2b828f3ab7ca3e83688e5f8c8cf9768ade7918aa9c1332bfa292e9672e7631795ddb0c8197dab2dcffea9d2f0eace285aa3e7e207f9f3f8f86d65977c79856b836dcf348eae2d39703d0629afbafbf00d51e866f947b60b32ddad93ed754db200f8234549d827254e7f29f7f05bc6213ecc9dceb636ab84750df44b4b8b28d4823072756ee7c216e47afefcf8ac87959c4009beb47e89431faafdf7c2cc24abd25845b303e42b65b98a26c6315f880a09b64cf29027664720691d4b5da4a8283a4e0111f741a75518cfde704268b6c9c1c65592702e602c355824da9240e83457e2e08064cfa205cc00694e399c8e926ae6509ee184ed996d7c553ac55e3f003a94f52ea8bf27a988e5216d762537686422a4fd55bc63bd444e95ff2377a5fed5d8e75fe0a5dbbf916851f3fe0c7818ef1a604298b662072885ee5510e263d31abcab02db827d71eccedb843401e7a8302076b6ff27853481a26a37a92c1613dee981d1c406af43ca5a56bb3b1e78e2c17363e4b322d12256664da2368d0bc87c3726d00a68cef044d170494a6800edc32d62e3d53a6acbc52a3027c366ccf2bc517820aaae1f71cfb856065e6ea74f482c3109e49d260c1d09074cb373df2c25e8fcd1975d219c48a0c66194b32dcdcd3e778de657a476eb17f7d579e151bbd70b2b2d6735a9424885c21ad1406a7d03fe73d9378d826dcbbd2cd0efb59d977bd376611ad9b6c8e3917f04a5c2f353dbfff6dba7318cca5c94b2571ef9bcc0052f5c3ed9c5833eabbfb10f08d9814a9da54d26764a9783f03ba39a0e17952c33d08dfb262c4947f856600c47d537a2b042bfaf85062462ca686f3e1ace31ba5069242223931fbbcd67ab23074094c40b60742ba2f722a97ce8f0d9a2ae260eb0724b7d526e50912100393e9d04a5566c54292ec9fe51b76daa68fcc2cfd3844b8251e191f273daf8db43efd2bf66da54a4c8616860a9524f6d5c337b9c10a8376b618ae21bc2747b4700f7a889951df8c3a7a30842e1a69a3cfc11ecbd97a00e4fa3e675b87e98f1ea14e0820186fe0be0c9efabf078b8ed467d94d705ec4cc559b187bd62f33be7f2736e2077bfa74db8c616988120e73200dccca94dfb3d91ed11fe1d5e96a58a3b04f4bfd5b37e865ac1cc6d39e1b886d09a434ff10dd93d7e35b1f6285063946989ed269cb9f012847f7f8003c5b6c44d91355a76e56247b561585eacbfbd47ebd5d563423695ed056679de9750540a6366ce9aad3f6a9ce2b054d18ea6c401dedceed61ab7152910c4e423c47579271f654a10f0d7b0131756f4b137703e86493e9cfeaa6803b4c24951191736f58d6302fd1bf8d335b3d6868c7817a463aca6289751e47ed22b9b4024bdc33e18dac8e93774a45201451f93a21bd74336781a864689fd9b5add61237920d07433b33201d8575f04435f7401649dbb623871434ccbf38e45346906539624e36f1044ef4f36d20f93e5803a8a6d63ba1d69980872618fc71bb86c197af855c1d571bd82008ee611919a79b18838f2168c3a3e48eb6b93ba6e11d7b1476d4f78962c20c13a6992c42425d388f58a5946dca948435236f84ddab1623e811899eb770c51fa42f4df10023bc53944304f51c60c13bb626fa82bf7cd0fea1936af7902a6ffb568eb066b36eaf5b71bfb007d1c6ddf871bad2f58a39802d2b6ec0ae5aa3aa6e587596b2064c86cd8e47cf428d2f46d28861a3da0bcee9628022973aab1215c9d7fcb3587f33f546718a2830e546f191407763c1a0abe656e4e5da06d8ea0e0d10759065d81d6ed2f52c57b94bb7d1f0721e497ce2958e817d579c5371db1a5cd76c86814368c9fda9145a1e767ea5745e6e7c0671d9ca927ed92a05550b796941a6f2f277729f8000fe0a0c45ad75bc27282806d1f9d8b339124297adf6970abedc2717ff7236b893904d032b47e1ea42f6ad1427b61eea9af8e0b7a3e1eba25100b84e37b7cae743c9e672081014766fef2da928e98968705b17a311a5cdcae0eb260b5f5253b359c0f6effeca70079929f77b06b497f6526ac0ed623e0bb60bc761404caeb4d642b0598baa2e2268ccaeaab91c641cdc352b314547cdd57d3e720c77d0b59d1568ce3a82a6ec2f0398c45d5ecad2c40294b4c6708877b8e7e5e187713da1dc5cc62ff9510ac14fa1f7df5f37e5146a936806beca29a38d011f43ded7af3ed2f7e945d9179aaba57de54c8bce6f65227efff4f08e00042b3408d5b8c127862bc3cd9f969e38bc8c22cda945cba82448b2b8920b115081e095daad9d184b06f119ca82eef8bb340accd77d140b6a46039cf2f6df83f42f96d5ddaf16a7527fbac7907033828e3c6272c86afd290abe796197c82603c923e9347e5d5146c2cf84a2ec007c7f66b48a5c819926ccec7ccd682a2eb87f52c0d784ae32563abe63ed274ff7fe2eb8f7c241da7a4b3fec63d29ce7cc4e10fc6f4ec697199faaddd8b7b12039214ea509098ca339f4cbf3a1b33ea8d2c5cbad16e88691492b11cd792d35c145bc983666702aa2b8d711aabdce08ca86dd53f5b52fa7178d9265846be1f8da37484bf970751563c31de9a599a15319817f8529b0757d7a98a50b0265ac93082825d6d5f2956bab6b97596d0ddd0fa9a8a66f8847c99c975e0e1ee917f73edf104c57c8217153b4242980aed9876e7167d65fd4d691e2395eff58743443acb04d14550299a4f4435ab688811d1238a0ba76898d08a6a318ba5c759caa3f795fa1d46bb03ee0115da76422409a83bdb52e972975febf4838a8b1263f223561f87831e4c633aa197a5c477df0dc4d881f30afa20fa399134192c983f6b64b1666ce3e562110e5beb6c5c2c8936741270c37dd32f373d3e977c944541e47540dff9ec2c3961d1e81af89c431c66570809f81321ed6421d7bf104f823c05e9411b823128782181dfb55c147aecaa04816240c7c9019cfedb4886f3aee9e42ae09215404257158b30e41d8f76fddc6674048cf98ae4e8dda7b4d33ddd4fb4a69a33ea2fab130d7e8c17cf795f43253aa5f449ddb75fa5623909792fcd9bf81d071b44a7e710b7a53772fc42d6ebd96b342a1a1db15592dcdaccafc1cdd0eace0e0d73758af451a2a734d5e860599e55df70c6bb325ec91d4bbbefbc0af2831b44d40a427535e80cb97c64db41c6c42bf2757d7fc25145d0988c991049afdaaa3ddf853b23dde7115627d3ebcd4416f17e2de8cd2087a0b45631b080c859718092d2888b643e77dd054829e9630d1ebb07f3bb81d14836da2ccb406c38295b48cbf779eb0ea169883f7f63d43e48793fb7cdd07340ef6d0dfb515f56b258681526850455a2299225b91ed7c3a2d8f528157dce720b13b5ade45576de9c5e90bfc28860468ce14beb77c3324458892ca52332a1cf6ef66607fff4f0e5d1960134c85968de9d5e6706b8654b57ca17260d4eaf333cfa82181f7cd0fd4cf2fd4692abb6ac778b007ef987918615689ebebbb8a887ea7e1f60fb6c1d15c7c701c91233c0858c27c465ee589dfe87c6e89b0a025b51603fc29f06204f6c5a52850afef70746c2dfebfb8514de2801985b710e344986fdc404584152e1ddab3597e80e97783b3f783475b1ca20a802a4c201bd6bf5cbfb22c42a7c508fc33c4d553064da8f86d9ce4482d871c29fc83b35fe23cacf02640bf8eafacc48ac0c1399ad2a9614b1c5e561fdc8f957ad7bdff8cc8a95ea02d784d956d0bd25b32d05975e46081f69eaab6cf59dc8ece1c9eb02a598b9caab9233e11313aa8802b4806e727db0a573ca37808845cd5c196bc27baa92a7092131d02a4d324f3f68ea31be4216af63ff8584100d59039a60743adf63baa728b0275c63ee16ae5adf53651d4558ff92d822fd8b9dfd033b96751afc4c7f067d9e3cebcd26aef7c1bdbc13bef5a22546f33870f767d6791c9243463be04f190115081862c8d641b4aff5d283198f0bb7cf11e215a6ff8638ca3df4d3edb78f5e237d8e4151c16db9eca2f537ed4691663831211ac0e3f8b56b0503117132ea480f493b04151b550ad2d97815e02c035ffa2631f31a3112a03479402a8b2b488ee1d25d961643faa9d865c551896f6d1e757715fca66c18e71f163a14525649c3913b22e2472269194919f3364b719033a5aa439d7942931e6c310cf99e2a4b9128b4b9a49e73971ca2cbb43a80c117bb6ec35b725ff64127031bc326e667946dd5fa9939bdf1be7a68fcc2cb9f2643076f3d18a85f55d9e0af27ec81b2689b9152372963838df1f411681b1c2104d87f4c2b9b42c3ef14331987d349bc44415873edba9906e4b7766985308cce8bf5c5889018875c5067d7da0894913ec23783923d215311131cac00814fbdf6118814ea4b41f42faa5f6c31a39b8031ef91e2c667f3c010f123551fcd8a0e00683a211adf25269939f98d0c7b24e91424759a5dbe3a9a447d22e04b7a01383922a383be6a06d347d074a2ac8d37c71ee5552919983b407906ebec236c6b7a892ce5c09d5f8fb5bab8e4f8d1845fe16a163092a7b1a32e88459b3f1a7fcaba24344efd670e16b76d87cb449882c480c526bb2a82e39cb2431d2bf45418a3216cee76fe4871679ed786ee9044540f786458e0fea9932e2bbc09edec953f865f0f731e0f6b99b7a1a950da0b6fe3d3c5aed81df9b12c55d885131e7d1d5b3625605ba840de080dc7f21a7f17eaa464943775a4b5ecd503f69e0abb372b3f15d9ea2e650fb68fb8cf40144ea3111b7d8c3d0c8f1651d6186893177c1d28455281225736852b476f6b968a1db59855f97a5d29794f392341fdfcdafe9972eefe3e782fdc34ac3fd3d189cab5ed2e305deeffc870c7013cab5894b58a6155a1b5151da04b8d5a4ab30c2461bc56f1267decad6374f509c863a4c11fb3c7c249aa401d7d662ac8d9a4cd6faae5dfb86aaa55d57cb320dfc4942d0b6831a3aa6de45df02245209198e0431e6bf44b1a8e2cf577a6a208397b63aeb1309037ba379a5aea048c9698ed30a77e4f184a1da23924894b1436c4254e5615306d8cd7242e6496c6838cbd0c9ea5dec64a2188d0722c8cf4b97e3b7741cbc9a084e814bd7ff3ca8a7d13f3057d634c77eb5a6f17c0d83285cfc736dfe34c4d3218601b3c27ae91057bdb41ed18ec47a74a85a50b9f1ec573bfba72e5e076405df0774ad8d2c7f642ef01ef41baae4e64a2c89207803d00afb36e71dd92e4f4a666b67e7dfe43f077dd6b124330cb02f421cc04e121f704af9311f55e0ac40d57c6dc148b347e54d7948fd43efefcdecaacc042f732ce648307c3e8f373f94a829b3149b9a2e37878f0719ad697ec0d801aee30d2350333454b5eb8cce9594a0a4817a775f8b6126d673f67c9211e57a63961cc1a18f4611a9724484c1bb8ed098e32c9e85c5d68d8487b34daecabdde075061f9ba4f39b41e1166059cee1b30acaae3a2bf1ef0b03f301ff93061942b840c93c1425d44cab7926b72121396d3a548089e576c05b40853b50fe719c9d273d7853eef1d686beff3d0797c5ae0f661467d0eb20ff6a6db49db280bde280cf65eb2baf7d1a3dab08dbd6f34848b8f99bddf7b7e17a5b65bf69fe3a9cd309335987c1fbfa2b408f9e3f313abbc3e27f114a016772545e3b34be6954b9a15e1b0d6f220df581a7de26cdb3162cebd7cd542fbf3125b"}) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="7472616e733d66642cff0f00006f", @ANYRESHEX, @ANYRESHEX, @ANYBLOB]) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = pidfd_getfd(r1, r0, 0x0) tee(r2, r0, 0x4, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000180)=@ieee802154}, 0x80) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x40010, 0xffffffffffffffff, 0x0) fgetxattr(r3, &(0x7f0000000000)=@random={'btrfs.', '\',{[[(\x00'}, &(0x7f0000000380)=""/234, 0xea) r4 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @typed={0x4}, @typed={0x8, 0x2e, 0x0, 0x0, @fd}]}, 0x28}}, 0x0) 06:02:46 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000340)={0x0, 0x6e02, 0x2, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005ae80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "134ee591e9a611"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005be80)={0x7fffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x3, "99e3cee90d7a7e"}) [ 2827.097304] 9pnet: Insufficient options for proto=fd 06:02:46 executing program 4: r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x1e, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r1, 0x5451) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b93729354d76d28e85bcb6144cee70fb2d4781cc61c0000"], 0x38) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES16, @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="2e10d479262bb2f134f50e5648f6c4e7e5a91c99a5488eafdbeb33b600c1d2a9da5f098312b5fb771dd17b6c0497979a3b1367f9", @ANYRESHEX=r4, @ANYRESOCT=r6], 0x508}, 0x1, 0x0, 0x0, 0x21}, 0x20000010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x0, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000200)=0x1f) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 06:02:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x500) [ 2827.158267] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2827.208311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2827.209908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2827.211721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2827.221131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 06:02:46 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@initdev}, &(0x7f0000000240)=0xc) 06:02:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000900)) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00007f7000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet(0x2, 0x3, 0xff) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000020c0)) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000005700)={0x0, 0x0, &(0x7f0000005540)=[{0x0}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/146, 0x92}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/43, 0x2b}, {&(0x7f00000043c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000005440)=""/45, 0x2d}], 0x8, &(0x7f0000005600)=ANY=[@ANYBLOB="1c000000000000000108000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xf0}, 0x40) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000005780)={0x7, &(0x7f0000005740)=[{0x5, 0xfffe}, {0x1, 0x74}, {0x8, 0x9}, {0xfff, 0x9}, {0x100, 0x1}, {0x5, 0x3f}, {0x8fcb, 0x5}]}) bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x4e21, @multicast1}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001980)=[{&(0x7f00000016c0)=""/196, 0xc4}, {&(0x7f00000017c0)=""/182, 0xb6}, {&(0x7f0000001880)=""/197, 0xc5}, {&(0x7f0000000100)=""/5, 0x5}], 0x4}, 0xb66b}, {{&(0x7f00000019c0)=@hci, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a40)=""/1, 0x1}, {&(0x7f0000001a80)=""/110, 0x6e}], 0x2, &(0x7f0000001b40)=""/9, 0x9}, 0x5}, {{&(0x7f0000001b80)=@caif=@dgm, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c00)=""/77, 0x4d}, {&(0x7f0000001c80)=""/173, 0xad}, {&(0x7f0000001e00)=""/248, 0xf8}], 0x3, &(0x7f0000001f00)=""/179, 0xb3}, 0x3}], 0x3, 0x40, &(0x7f0000002080)={0x0, 0x989680}) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000040)="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", 0x890}], 0x1) 06:02:46 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001600), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x38, r1, 0x72e1dfd66a9a627b, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, '\'(^!&\x92\x90(\'{\\@&\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x38}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4010) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x1}, 0x0) io_uring_enter(r3, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r3, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x600) 06:02:46 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 90) [ 2827.404191] FAULT_INJECTION: forcing a failure. [ 2827.404191] name failslab, interval 1, probability 0, space 0, times 0 [ 2827.405524] CPU: 0 PID: 13824 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2827.406324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2827.407279] Call Trace: [ 2827.407602] dump_stack+0x107/0x167 [ 2827.408021] should_fail.cold+0x5/0xa [ 2827.408459] ? io_setup_async_rw+0x180/0x580 [ 2827.408971] should_failslab+0x5/0x20 [ 2827.409412] __kmalloc+0x72/0x390 [ 2827.409814] io_setup_async_rw+0x180/0x580 [ 2827.410300] ? iov_iter_restore+0x195/0x3a0 [ 2827.410799] io_read+0x775/0x11e0 [ 2827.411199] ? ext4_release_file+0x380/0x380 [ 2827.411719] ? kiocb_done+0xc90/0xc90 [ 2827.412158] ? mark_lock+0xf5/0x2df0 [ 2827.412583] ? register_lock_class+0xbb/0x17b0 [ 2827.413109] ? arch_stack_walk+0x99/0xf0 [ 2827.413576] ? lock_chain_count+0x20/0x20 [ 2827.414050] ? is_dynamic_key+0x1e0/0x1e0 [ 2827.414535] ? __lock_acquire+0x1657/0x5b00 [ 2827.415035] ? __lock_acquire+0xbb1/0x5b00 [ 2827.415533] io_issue_sqe+0x2e8a/0x77b0 [ 2827.415997] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2827.416600] ? lock_chain_count+0x20/0x20 [ 2827.417079] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2827.417677] ? io_connect+0x610/0x610 [ 2827.418114] ? lock_acquire+0x197/0x470 [ 2827.418570] ? find_held_lock+0x2c/0x110 [ 2827.419044] ? __fget_files+0x2cf/0x520 [ 2827.419505] ? lock_downgrade+0x6d0/0x6d0 [ 2827.419984] __io_queue_sqe+0x90/0x9d0 [ 2827.420436] ? io_issue_sqe+0x77b0/0x77b0 [ 2827.420913] ? __fget_files+0x2f8/0x520 [ 2827.421373] ? io_prep_rw+0x7f5/0x1050 [ 2827.421825] io_submit_sqes+0x44aa/0x8610 [ 2827.422319] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2827.422894] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2827.423456] ? find_held_lock+0x2c/0x110 [ 2827.423921] ? io_submit_sqes+0x8610/0x8610 [ 2827.424421] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2827.424983] ? wait_for_completion_io+0x270/0x270 [ 2827.425539] ? rcu_read_lock_any_held+0x75/0xa0 [ 2827.426079] ? vfs_write+0x354/0xb10 [ 2827.426506] ? fput_many+0x2f/0x1a0 [ 2827.426927] ? ksys_write+0x1a9/0x260 [ 2827.427376] ? __ia32_sys_read+0xb0/0xb0 [ 2827.427849] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2827.428454] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2827.429048] do_syscall_64+0x33/0x40 [ 2827.429470] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2827.430057] RIP: 0033:0x7f989282fb19 [ 2827.430485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2827.432613] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2827.433488] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2827.434312] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2827.435129] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2827.435959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2827.436780] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 [ 2841.202477] FAULT_INJECTION: forcing a failure. [ 2841.202477] name failslab, interval 1, probability 0, space 0, times 0 [ 2841.204061] CPU: 0 PID: 13839 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2841.204951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2841.206051] Call Trace: [ 2841.206407] dump_stack+0x107/0x167 [ 2841.206890] should_fail.cold+0x5/0xa [ 2841.207394] ? create_object.isra.0+0x3a/0xa20 [ 2841.208008] should_failslab+0x5/0x20 [ 2841.208496] kmem_cache_alloc+0x5b/0x310 [ 2841.209033] create_object.isra.0+0x3a/0xa20 [ 2841.209616] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2841.210271] __kmalloc+0x16e/0x390 [ 2841.210739] io_setup_async_rw+0x180/0x580 [ 2841.211285] ? iov_iter_restore+0x195/0x3a0 [ 2841.212169] io_read+0x775/0x11e0 [ 2841.212610] ? ext4_release_file+0x380/0x380 [ 2841.213188] ? kiocb_done+0xc90/0xc90 [ 2841.213682] ? mark_lock+0xf5/0x2df0 [ 2841.214172] ? lock_chain_count+0x20/0x20 [ 2841.214719] ? stack_trace_consume_entry+0x160/0x160 [ 2841.215386] ? mark_lock+0xf5/0x2df0 [ 2841.215890] io_issue_sqe+0x2e8a/0x77b0 [ 2841.216417] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2841.217101] ? lock_chain_count+0x20/0x20 [ 2841.217642] ? __is_insn_slot_addr+0x14c/0x290 [ 2841.218237] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2841.218923] ? io_connect+0x610/0x610 [ 2841.219424] ? mark_held_locks+0x9e/0xe0 [ 2841.219960] ? find_held_lock+0x2c/0x110 [ 2841.220498] ? __fget_files+0x2cf/0x520 [ 2841.221020] ? lock_downgrade+0x6d0/0x6d0 [ 2841.221548] __io_queue_sqe+0x90/0x9d0 [ 2841.222056] ? __fget_files+0x253/0x520 [ 2841.222580] ? io_issue_sqe+0x77b0/0x77b0 [ 2841.223124] ? __fget_files+0x2f8/0x520 [ 2841.223642] ? io_prep_rw+0x7f5/0x1050 [ 2841.224156] io_submit_sqes+0x44aa/0x8610 [ 2841.224715] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2841.225367] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2841.225998] ? find_held_lock+0x2c/0x110 [ 2841.226533] ? io_submit_sqes+0x8610/0x8610 [ 2841.227098] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2841.227736] ? wait_for_completion_io+0x270/0x270 [ 2841.228368] ? rcu_read_lock_any_held+0x75/0xa0 [ 2841.228952] ? vfs_write+0x354/0xb10 [ 2841.229420] ? fput_many+0x2f/0x1a0 [ 2841.229911] ? ksys_write+0x1a9/0x260 [ 2841.230390] ? __ia32_sys_read+0xb0/0xb0 [ 2841.230907] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2841.231583] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2841.232241] do_syscall_64+0x33/0x40 [ 2841.232713] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2841.233360] RIP: 0033:0x7f989282fb19 [ 2841.233828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2841.236234] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2841.237250] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2841.238168] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2841.239084] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2841.240004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2841.240903] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:03:00 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x2, 0x9}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x1d4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:00 executing program 4: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038679de021f8c801000000000000009d1fa459d07100000000bc7ae631f7a54805ff070000000000093393d0e1c7391515c7ab7c8e0600", 0x27}, 0xffffff93, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000005c0)='{N$\x0f[\xc9UY\xb1y\x9a\x03\r\xc8y8\xb5\x15\xb2\xa6\x11\x9e\xaf\xd3bj\xd0\xee0%`\xf7\xd6\xf3\xf3\x03\x8da7\xa6\x95\x85\xbc\xfc\xae%~V\x8c\x90C\x13\xba\x1c0q3\tET(_\xa8\xbb\x9c\xd9e\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffc) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000080)="a3", 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000780)='dns_resolver\x00', &(0x7f0000000740)=@chain={'key_or_keyring:', r1}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolve\xc8C', 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x4000001) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x530a, &(0x7f0000000580)={0x92, 0x1, 0x3, 0x5}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 06:03:00 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x5000000, 0x0, 0x0, 0x0) 06:03:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x700) 06:03:00 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xde, 0x0, 0x0, 0x0) 06:03:00 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 91) 06:03:00 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2400) 06:03:00 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000340)={{0x0, 0x6, 0x60b, 0x6, 0x58, 0x35, 0x5, 0x8, 0x6, 0xfffffffa, 0xffffff00, 0xb82, 0xffffffff, 0x5, 0x6}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:00 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) sendmmsg$inet(r1, &(0x7f00000035c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f0000001140)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000015c0)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {r2, @multicast1, @local}}}], 0x20}}], 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2201, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x2, 0x140, 0x31713}, 0x1f7) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000500)) readv(r3, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="b6ffffff008415a75600ee3d41653200"]) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40086607, &(0x7f0000000080)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000700)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000004d420ed499248eafd56b250fe1ea130000000000000000000000000000000000000000000000000007000000fe0000000d0000000000000000000000000029af5067e281411dc6c84bed0000ffffffff000000000900000000000000000000000000000000000000000000000000000000000000932e0000060000000900000000000000020000000000000001000000000000000600"/271]) 06:03:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x900) 06:03:00 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0xd4a, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r5 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xc, 0x0, r6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2}, 0x0, 0x0, 0x8000}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:00 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_setup(0x2205, &(0x7f0000000240)={0x0, 0xbf83, 0x4, 0x2, 0x289}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:00 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a00) 06:03:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0xa00) 06:03:00 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5, 0x0, 0x0, 0x0) 06:03:00 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xc, 0x0, r4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r4}}, 0x42e9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0xa01) 06:03:00 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe4, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xfd}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0xd95a}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x30000}}, './file0\x00'}) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x8080) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r6, 0x188, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x58}, 0x1, 0x0, 0x0, 0x200c000}, 0x8800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r8, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x24000001) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f00000008c0), &(0x7f0000000900)=0x4) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000980), r7) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r10, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4000010) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4c}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5b}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc001}, 0x4008000) sendmsg$OSF_MSG_ADD(r9, &(0x7f00000017c0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001780)={&(0x7f0000000bc0)={0xbb8, 0x0, 0x5, 0x401, 0x0, 0x0, {0xc, 0x0, 0x3}, [{{0x254, 0x1, {{0x0, 0x80}, 0x19, 0x4, 0x9, 0x1, 0x15, 'syz1\x00', "863013104ce1b45cea3f947141ada5563e90dc557b6c92baac785f77645c37be", "54cc535bf8d1886cc5526c4d4b21c7ee396c242a0de05e9a88cb535afe3d60b5", [{0xdd4e, 0x6, {0x3, 0x839c}}, {0x7f, 0x81, {0x1, 0x6}}, {0x5, 0x6, {0x2, 0xf2ad}}, {0x5, 0x2, {0x1, 0xffffffc0}}, {0x553, 0x8, {0x1, 0x20}}, {0xffff, 0x4e, {0x3, 0xbcf}}, {0x5, 0x6, {0x1, 0x80000000}}, {0x0, 0x6, {0x1}}, {0xe2, 0x2, {0x0, 0x9}}, {0x7fff, 0x5, {0x3, 0x40}}, {0xffff, 0x9, {0x2, 0x95}}, {0x1ff, 0x400, {0x3}}, {0x76c, 0x5, {0x3, 0x3}}, {0x5, 0x4, {0x4, 0x16a}}, {0x9, 0x0, {0x1, 0x6}}, {0x8, 0x2, {0x3, 0xffffff9a}}, {0x6, 0x8, {0x3, 0x7}}, {0x4, 0x0, {0x0, 0x3}}, {0x3f, 0xa237, {0x2, 0x800}}, {0x101, 0x8, {0x1, 0x5}}, {0x1, 0x4, {0x0, 0x8000}}, {0xa, 0x0, {0x3, 0x2}}, {0x43, 0xfff, {0x0, 0x80}}, {0x40b, 0x7}, {0x401, 0x9, {0x2, 0x4b55c448}}, {0x40, 0x8000, {0x1, 0x1f}}, {0xf70, 0x8, {0x2, 0x2}}, {0x3, 0xff, {0x3, 0xa9}}, {0x6, 0x2, {0x2, 0x5}}, {0x4ded, 0x1, {0x3, 0xfffff2c4}}, {0x8, 0x3ff, {0x3, 0xfff}}, {0x3, 0x2, {0x2, 0x6}}, {0x1, 0x7f, {0x3, 0xffffff01}}, {0x0, 0xd32f, {0x3}}, {0xfff7, 0xff, {0x15209b9e846f326a, 0x4}}, {0x5, 0x8001, {0x3, 0x8}}, {0x8, 0x4, {0x3, 0x6}}, {0x6, 0x1f, {0x1, 0x7}}, {0x8, 0x3ff, {0x3, 0x1000}}, {0x1ff, 0x8, {0x0, 0x5c}}]}}}, {{0x254, 0x1, {{0x0, 0xc00000}, 0x8, 0x1, 0x7f, 0xffff, 0x2, 'syz0\x00', "45a176997a0adc939f9b4184f9b94f6206cfde67420f72b9d853d031c8c59429", "16f4123410fc3df0244f8f5c89c7e0087f979afe085b0fd3d85eecd9e9947c95", [{0x9, 0x1, {0x3, 0xfffffffc}}, {0x200, 0x7, {0x2, 0x81}}, {0x2, 0x7f, {0x3, 0x8}}, {0x7, 0x1, {0x1}}, {0x56, 0x86, {0x3, 0x2}}, {0x4, 0x7fff, {0x1, 0xfff}}, {0x2, 0x20, {0x0, 0x6}}, {0x7f, 0x2, {0x2, 0x2}}, {0x8, 0x7ff, {0x3, 0x2}}, {0x3, 0x5, {0x2, 0xb9ca}}, {0x14, 0x1ff, {0x3, 0xd275}}, {0x4, 0xf801, {0x0, 0x7}}, {0xff87, 0x1, {0x2, 0x1}}, {0x4, 0x0, {0x2, 0x5}}, {0x9, 0x5, {0x0, 0x25}}, {0x8000, 0x7, {0x3, 0x1}}, {0x3fb2, 0x5, {0x0, 0x5}}, {0x2, 0x81, {0x1, 0x5}}, {0x8, 0xa0, {0x3, 0xffffffff}}, {0x1, 0x1, {0x3, 0x7}}, {0x400, 0x30, {0x0, 0x6}}, {0x9, 0xdd, {0x1, 0xffff8000}}, {0x20, 0x5, {0x3, 0xa57}}, {0x2, 0x3, {0x3, 0x401}}, {0x80, 0x3, {0x3, 0x1}}, {0x3f, 0x4, {0x1, 0x4}}, {0x3, 0x20, {0x3, 0x2}}, {0x400, 0xcbd5, {0x5, 0x3}}, {0x9, 0x6, {0x2, 0x3f}}, {0x7d, 0x8, {0x0, 0xf94f}}, {0xcdb, 0x3f, {0x2, 0x1}}, {0x1000, 0x7ff, {0x2, 0x401}}, {0x8000, 0x9, {0x2}}, {0x0, 0x1, {0x2, 0x3}}, {0x9, 0x3, {0x0, 0x8}}, {0x200c, 0x3ff, {0x0, 0x80}}, {0x8, 0x8, {0x0, 0xa67}}, {0x3ff, 0x5, {0x58e450c52348ce1d, 0x3}}, {0x5, 0x3, {0x2, 0x2}}, {0xbae, 0x4, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0xa9c}, 0xfd, 0x6, 0x0, 0x8000, 0xa, 'syz1\x00', "445987cfc8c90782df4c23a1756278e27c4710096f2c943f1aa6bab4eb6acc8e", "9714126ebcf8dda7bda6ef7293656992f45b655be2db2312129009e4a6666f21", [{0x6eb, 0xaf29, {0x2, 0x58b}}, {0x81, 0x400, {0x0, 0x10000}}, {0xffff, 0x101, {0x1, 0x5}}, {0x1000, 0x0, {0x3, 0x3}}, {0x100, 0xe640, {0x0, 0x9}}, {0x3, 0xf7, {0x1, 0xfff}}, {0x5, 0x78d6, {0x3, 0x9}}, {0x3, 0x62, {0x0, 0x2}}, {0x1ff, 0x8000, {0x3, 0x8000}}, {0xfffe, 0x4, {0x0, 0xf4}}, {0x5, 0x40, {0x2, 0xffff}}, {0x5, 0x3, {0x3}}, {0x5, 0x0, {0x0, 0xff}}, {0x5, 0xfff8, {0x5171dbdb7b563d9b, 0x4}}, {0x7ff, 0x1, {0x2, 0xff}}, {0x4, 0x401, {0x0, 0x5}}, {0x5, 0x5, {0x0, 0x1fe}}, {0x6, 0x5d, {0x3, 0xfff}}, {0x8, 0x0, {0x2, 0x7}}, {0xb26c, 0x9, {0x0, 0x1}}, {0x8000, 0x2, {0x0, 0x5}}, {0xfffb, 0x8, {0x1, 0x401}}, {0x893, 0x8000, {0x1, 0x1}}, {0x0, 0x3, {0x1, 0xf034}}, {0x0, 0xfff, {0x1, 0x1ff}}, {0x485b, 0x2, {0x1}}, {0x1000, 0x7, {0x1, 0x80000000}}, {0x9, 0x1, {0x3, 0xfb3}}, {0x7, 0x80, {0x3, 0x6}}, {0x8, 0x9, {0x1, 0x9}}, {0xf801, 0x5, {0x2, 0x6}}, {0x1, 0x7, {0x2}}, {0x2, 0x3, {0x3, 0x9}}, {0x4, 0x20, {0x1, 0x8}}, {0x8, 0x22, {0x1, 0x3}}, {0x3, 0xa79, {0x2, 0xffffffff}}, {0xc6bb, 0x0, {0x0, 0x1ad5}}, {0xe8, 0x7, {0x1, 0x7}}, {0x1ff, 0x5, {0x1, 0x5}}, {0x0, 0x7f, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x88}, 0x7, 0x37, 0x5, 0x6, 0x7, 'syz1\x00', "57b6117dae51a1b4988db47bb8bd0326c6ad15ec8d058b6ffbab5f58e65cc703", "4edc177c24befddf18b055b19979966d46d21f0c69efdbff9c16017ffbdf0818", [{0x6, 0x3ff, {0x0, 0xa}}, {0xf45f, 0x1ff, {0x3, 0xfffffffb}}, {0xec6, 0x2, {0x3, 0x6}}, {0x7, 0xd98, {0x2, 0x401}}, {0x7, 0x200, {0x1, 0x8}}, {0x1, 0x8, {0x2, 0xe}}, {0x0, 0xddd, {0x0, 0x3ff}}, {0x18, 0x2, {0x2, 0x7}}, {0x4, 0x7f, {0x0, 0x2d10}}, {0x9, 0x1, {0x3, 0x2}}, {0x6, 0x0, {0x0, 0x277}}, {0x5, 0x1f, {0x1, 0x2}}, {0x3, 0xfff9, {0x0, 0x4}}, {0x1, 0x6, {0x3, 0x9}}, {0x2, 0xffc0, {0x3, 0x652d}}, {0x4361, 0x8001, {0x1, 0x8}}, {0x3, 0x4, {0x3, 0xb1ef}}, {0x365, 0x40f, {0x3, 0x1}}, {0x8, 0x7f, {0x2, 0x8}}, {0x1, 0x1, {0x2, 0x3f}}, {0x2, 0x4, {0x3, 0x6}}, {0xfcea, 0x1, {0x0, 0x89b}}, {0xffff, 0x6, {0x3, 0xfed}}, {0x7, 0x2, {0x2, 0x81}}, {0x2, 0x0, {0x1, 0x25b}}, {0x9, 0x5, {0x0, 0x3}}, {0xd736, 0x4, {0x1, 0x3}}, {0x1, 0x4, {0x2, 0xffffff12}}, {0x2de, 0x0, {0x0, 0x9}}, {0x40, 0x1, {0x3, 0x5}}, {0x5b3, 0x5, {0x0, 0xc20c}}, {0x4, 0x401, {0x2, 0x4}}, {0x5, 0x5, {0x3, 0x5}}, {0x7, 0xfff, {0x0, 0xff}}, {0x57b1, 0x0, {0x3, 0x9}}, {0x3, 0x1, {0x3, 0x401}}, {0x1ff, 0x7, {0x0, 0x47a}}, {0x3, 0x7, {0x0, 0x80000001}}, {0x5ae, 0x0, {0x2, 0x9}}, {0xac, 0x9}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x7, 0x3, 0x3, 0x4, 0x7, 'syz1\x00', "e7cb61770db844cc9a0c14440f8dd7d9800c3247f4a57b1777916977710b4310", "cb6b3d73a860d00b36eb88a84468e65fa8201883da6630fdf92f4b95ee9362ad", [{0x7, 0x3, {0x0, 0x6}}, {0xc3d, 0x401, {0x0, 0x37}}, {0x0, 0x400, {0x2, 0x729}}, {0x59, 0x7, {0x2, 0x4}}, {0x8, 0x0, {0x3, 0x100}}, {0x20, 0x8, {0x2, 0x4}}, {0xbf, 0x3, {0x2, 0x2}}, {0x5, 0xfff, {0x2, 0x80010000}}, {0x9, 0x40, {0x0, 0xcdb}}, {0x1ff, 0x8000, {0x0, 0x5}}, {0x9, 0x208, {0x2, 0x57b8}}, {0x638, 0x6, {0x0, 0x29ad7590}}, {0x3, 0xc1, {0x1, 0x59ad4cdd}}, {0x1, 0x200, {0x1, 0x8}}, {0x9cb0, 0x1000, {0x0, 0x7}}, {0x0, 0x0, {0x1, 0x80000000}}, {0x3f, 0x2, {0x2, 0x4}}, {0x2, 0x7, {0x0, 0x7b740000}}, {0x40, 0x5, {0x0, 0x4}}, {0x2, 0x1ff, {0x2, 0xbef7}}, {0xce9d, 0x80, {0x2, 0x2891}}, {0x5, 0x1000, {0x1, 0x5238}}, {0x101, 0xff, {0x2, 0x800}}, {0x81, 0x50d, {0x3, 0xa955}}, {0x1000, 0x3, {0x0, 0x5}}, {0xae, 0x1, {0x0, 0x3}}, {0x1, 0x9, {0x2, 0xbb}}, {0x9, 0x5, {0x1, 0x5}}, {0x42fb, 0x4, {0x0, 0x613}}, {0x0, 0xfffe, {0x1, 0x6}}, {0xfff, 0x2, {0x2, 0x4}}, {0x8001, 0x7, {0x3, 0xeea}}, {0x5, 0x4, {0x3, 0x2}}, {0x2, 0x7, {0x0, 0x6}}, {0xc07f, 0x3, {0x3, 0x92dd}}, {0x3ff, 0x0, {0x3, 0x4}}, {0x9, 0xd4, {0x3, 0xfffffffa}}, {0x3b1, 0x5, {0x3, 0x1}}, {0xe4, 0xff, {0x2, 0xdcbb}}, {0x0, 0x7, {0x2, 0x8}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x10}, 0x4000045) 06:03:12 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3000) 06:03:12 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x321, 0x0, 0x0, 0x0) 06:03:12 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6000000, 0x0, 0x0, 0x0) 06:03:12 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/clients\x00', 0x0, 0x0) io_uring_enter(r4, 0x4db2, 0x3883, 0x3, &(0x7f0000000280)={[0x4]}, 0x8) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:13 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 92) 06:03:13 executing program 4: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x4c, r0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4a4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000845}, 0x84) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {0x0, 0x0, 0x200000000540}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ede9bec1f8b9ecf37d90f17fb054531d01666a4ad9cf9fa03f5278ce96d736528f2bb5499eb830a955a3d207f75c12e8a62626198a041f7cb25f8e104a60de2eb7abde67ca263679a2ae5d674d7b1188ade397bbab148c1f286cf2df1db95361d4bc23da98d6f843983a2ac60f08414699657c3a82db01871a4b3366683f49c20915f996091aa3d42e5bc60135abfd7da306aafa8cdb7ca5054f51acd4894c0ea6d43464"]) 06:03:13 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000ffdbdf254c0000000c00580064000000000000000c0058001a000000000000000c0058006d000000000000000c0058002600eeffffffffff0b00580043000000000000000c0058002a000000000000000c0058003f00000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x20008000) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) readahead(r5, 0x3a, 0x800) io_uring_enter(r1, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r6 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xc, 0x0, r7) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffc000000000002, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0xb00) [ 2853.970982] FAULT_INJECTION: forcing a failure. [ 2853.970982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2853.972608] CPU: 1 PID: 13913 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2853.973468] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2853.974496] Call Trace: [ 2853.974829] dump_stack+0x107/0x167 [ 2853.975284] should_fail.cold+0x5/0xa [ 2853.975772] copy_page_to_iter+0x41e/0xf80 [ 2853.976303] generic_file_buffered_read+0xab2/0x2920 [ 2853.976942] ? pagecache_get_page+0xc80/0xc80 [ 2853.977504] generic_file_read_iter+0x33f/0x490 [ 2853.978087] ext4_file_read_iter+0x184/0x4c0 [ 2853.978673] ? ext4_release_file+0x380/0x380 [ 2853.979218] io_read+0x2dc/0x11e0 [ 2853.979654] ? ext4_release_file+0x380/0x380 [ 2853.980199] ? kiocb_done+0xc90/0xc90 [ 2853.980667] ? mark_lock+0xf5/0x2df0 [ 2853.981127] ? lock_chain_count+0x20/0x20 [ 2853.981662] ? stack_trace_consume_entry+0x160/0x160 [ 2853.982292] ? lock_acquire+0x197/0x470 [ 2853.982785] ? __lock_acquire+0xbb1/0x5b00 [ 2853.983307] io_issue_sqe+0x2e8a/0x77b0 [ 2853.983810] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2853.984496] ? lock_chain_count+0x20/0x20 [ 2853.985006] ? __is_insn_slot_addr+0x14c/0x290 [ 2853.985606] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2853.986261] ? io_connect+0x610/0x610 [ 2853.986730] ? lock_acquire+0x197/0x470 [ 2853.987217] ? find_held_lock+0x2c/0x110 [ 2853.987727] ? __fget_files+0x2cf/0x520 [ 2853.988223] ? lock_downgrade+0x6d0/0x6d0 [ 2853.988732] __io_queue_sqe+0x90/0x9d0 [ 2853.989225] ? io_issue_sqe+0x77b0/0x77b0 [ 2853.989739] ? __fget_files+0x2f8/0x520 [ 2853.990240] ? io_prep_rw+0x7f5/0x1050 [ 2853.990725] io_submit_sqes+0x44aa/0x8610 [ 2853.991262] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2853.991882] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2853.992474] ? find_held_lock+0x2c/0x110 [ 2853.992972] ? io_submit_sqes+0x8610/0x8610 [ 2853.993503] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2853.994100] ? wait_for_completion_io+0x270/0x270 [ 2853.994702] ? rcu_read_lock_any_held+0x75/0xa0 [ 2853.995273] ? vfs_write+0x354/0xb10 [ 2853.995740] ? fput_many+0x2f/0x1a0 [ 2853.996184] ? ksys_write+0x1a9/0x260 [ 2853.996654] ? __ia32_sys_read+0xb0/0xb0 [ 2853.997151] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2853.997791] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2853.998439] do_syscall_64+0x33/0x40 [ 2853.998898] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2853.999528] RIP: 0033:0x7f989282fb19 [ 2853.999993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2854.002270] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2854.003208] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2854.004095] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2854.004974] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2854.005849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2854.006735] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:03:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0xc00) 06:03:13 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r1 = syz_io_uring_setup(0x4d52, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r1, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r5 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000c4f6de23a2eefd10dac01aaa5dc0d20001000000180000000fd2792e62495cc4780924190f698ab664ac1b6345f091074e9aa60e5a19b5bd393eb433ca91f55b4c7cc67f95ea26521c0c91654b8414f650707b3201029e2ad3906d5320fe6c4439c53332d1cf9b28273b0dcabe59ba2fcc42d3a0add9c8ea34e337dcb9159ceef9604da48ad2e4135d33b3a90e24c025191da29ebb00bf1de092a7c69271eae0ba00000000", @ANYRES32=r0, @ANYBLOB="02000000000000002e2f66696c653000"]) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xc, 0x0, r7) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:13 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4faedc8}, 0x0, 0x0, 0x98, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="0000000000000000fe73000000000000000000000000000aac1414080000000000589cf18ec728c400"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x1bc}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000100)=0xfffffffffffffc60) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000300)=0xfffffffd, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="2f3ef32f00b247aee82f507c02d95920", 0x10) io_setup(0x5, &(0x7f0000000700)=0x0) signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x40) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) io_cancel(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x2, r4, &(0x7f0000000340)="973718d000416d0e113ace690a98f1619484e4960056aa777fed63e5d28907e5dc658359736aa2b3be6a054ff61d0d0a1704feb3dcb95ee5a9cff583a4c2fe2b47dfbb4b82095e76228691e017e710f5527b9185295cf3d3a3e16d4d705f339c596fb9ddcd0bbc9eb440a4102813cb2df3f63c3d37f8ed50d3a4270ad215d9176a280cd1e1d5", 0x86, 0x7, 0x0, 0x3, r5}, &(0x7f0000000280)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000400)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) fchmod(r0, 0x6) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) [ 2854.157964] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 06:03:13 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 93) [ 2854.264386] FAULT_INJECTION: forcing a failure. [ 2854.264386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2854.265893] CPU: 1 PID: 13950 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2854.266682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2854.267638] Call Trace: [ 2854.267951] dump_stack+0x107/0x167 [ 2854.268368] should_fail.cold+0x5/0xa [ 2854.268812] ? copyout.part.0+0x112/0x140 [ 2854.269284] copy_page_to_iter+0x878/0xf80 [ 2854.269772] generic_file_buffered_read+0xab2/0x2920 [ 2854.270368] ? pagecache_get_page+0xc80/0xc80 [ 2854.270897] generic_file_read_iter+0x33f/0x490 [ 2854.271432] ext4_file_read_iter+0x184/0x4c0 [ 2854.271949] ? ext4_release_file+0x380/0x380 [ 2854.272457] io_read+0x2dc/0x11e0 [ 2854.272849] ? ext4_release_file+0x380/0x380 [ 2854.273353] ? kiocb_done+0xc90/0xc90 [ 2854.273784] ? mark_lock+0xf5/0x2df0 [ 2854.274211] ? lock_chain_count+0x20/0x20 [ 2854.274689] ? stack_trace_consume_entry+0x160/0x160 [ 2854.275270] ? lock_acquire+0x197/0x470 [ 2854.275731] ? __lock_acquire+0xbb1/0x5b00 [ 2854.276215] io_issue_sqe+0x2e8a/0x77b0 [ 2854.276674] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2854.277271] ? lock_chain_count+0x20/0x20 [ 2854.277742] ? __is_insn_slot_addr+0x14c/0x290 [ 2854.278264] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2854.278858] ? io_connect+0x610/0x610 [ 2854.279297] ? lock_acquire+0x197/0x470 [ 2854.279754] ? find_held_lock+0x2c/0x110 [ 2854.280222] ? __fget_files+0x2cf/0x520 [ 2854.280676] ? lock_downgrade+0x6d0/0x6d0 [ 2854.281151] __io_queue_sqe+0x90/0x9d0 [ 2854.281596] ? io_issue_sqe+0x77b0/0x77b0 [ 2854.282066] ? __fget_files+0x2f8/0x520 [ 2854.282520] ? io_prep_rw+0x7f5/0x1050 [ 2854.282966] io_submit_sqes+0x44aa/0x8610 [ 2854.283453] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2854.284027] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2854.284576] ? find_held_lock+0x2c/0x110 [ 2854.285039] ? io_submit_sqes+0x8610/0x8610 [ 2854.285533] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2854.286080] ? wait_for_completion_io+0x270/0x270 [ 2854.286630] ? rcu_read_lock_any_held+0x75/0xa0 [ 2854.287158] ? vfs_write+0x354/0xb10 [ 2854.287583] ? fput_many+0x2f/0x1a0 [ 2854.288008] ? ksys_write+0x1a9/0x260 [ 2854.288441] ? __ia32_sys_read+0xb0/0xb0 [ 2854.288907] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2854.289507] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2854.290097] do_syscall_64+0x33/0x40 [ 2854.290521] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2854.291107] RIP: 0033:0x7f989282fb19 [ 2854.291534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2854.293629] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2854.294497] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2854.295306] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2854.296184] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2854.296989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2854.297796] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:03:26 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8000000, 0x0, 0x0, 0x0) 06:03:26 executing program 4: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/clients\x00', 0x0, 0x0) io_uring_enter(r4, 0x4db2, 0x3883, 0x3, &(0x7f0000000280)={[0x4]}, 0x8) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:26 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)=ANY=[@ANYBLOB="720000000100000018000000", @ANYRES16, @ANYBLOB="ffff0000000000002e2f66696c653000"]) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000280)={0x3, 0x6, 0xffff}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getsockname(r3, &(0x7f0000000540)=@qipcrtr, &(0x7f0000000340)=0x80) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000002e2f66696c653000341bf19a900878d74771bfd21f7fa5d036cc844af8a11059030bb30d93fa35985b2f61042de9c94452ab9fa9fdc126bf74f94977bc94dc520acefa207902a80e9f78d9a4"]) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/189}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0xd00) 06:03:26 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x90, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10000000}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe6}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x40000) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r5 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xc, 0x0, r6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:26 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3600) 06:03:26 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 94) [ 2867.275131] FAULT_INJECTION: forcing a failure. [ 2867.275131] name failslab, interval 1, probability 0, space 0, times 0 [ 2867.276510] CPU: 1 PID: 13975 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2867.277356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2867.278297] Call Trace: [ 2867.278603] dump_stack+0x107/0x167 [ 2867.279019] should_fail.cold+0x5/0xa [ 2867.279452] ? io_setup_async_rw+0x180/0x580 [ 2867.279966] should_failslab+0x5/0x20 [ 2867.280405] __kmalloc+0x72/0x390 [ 2867.280803] io_setup_async_rw+0x180/0x580 [ 2867.281282] ? iov_iter_restore+0x195/0x3a0 [ 2867.281769] io_read+0x775/0x11e0 [ 2867.282162] ? ext4_release_file+0x380/0x380 [ 2867.282664] ? kiocb_done+0xc90/0xc90 [ 2867.283093] ? mark_lock+0xf5/0x2df0 06:03:26 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x600, 0x0, 0x0, 0x0) [ 2867.283635] ? lock_chain_count+0x20/0x20 [ 2867.284204] ? stack_trace_consume_entry+0x160/0x160 [ 2867.284782] ? mark_lock+0xf5/0x2df0 [ 2867.285208] ? lock_acquire+0x197/0x470 [ 2867.285667] ? __lock_acquire+0xbb1/0x5b00 [ 2867.286148] io_issue_sqe+0x2e8a/0x77b0 [ 2867.286609] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2867.287208] ? lock_chain_count+0x20/0x20 [ 2867.287680] ? __is_insn_slot_addr+0x14c/0x290 [ 2867.288210] ? io_connect+0x610/0x610 [ 2867.288644] ? mark_held_locks+0x9e/0xe0 [ 2867.289108] ? lock_acquire+0x197/0x470 [ 2867.289559] ? find_held_lock+0x2c/0x110 [ 2867.290028] ? __fget_files+0x2cf/0x520 [ 2867.290485] ? lock_downgrade+0x6d0/0x6d0 [ 2867.290957] __io_queue_sqe+0x90/0x9d0 [ 2867.291404] ? io_issue_sqe+0x77b0/0x77b0 [ 2867.291880] ? __fget_files+0x2f8/0x520 [ 2867.292338] ? io_prep_rw+0x7f5/0x1050 [ 2867.292785] io_submit_sqes+0x44aa/0x8610 [ 2867.293269] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2867.293846] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2867.294397] ? find_held_lock+0x2c/0x110 [ 2867.294863] ? io_submit_sqes+0x8610/0x8610 [ 2867.295359] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2867.295916] ? wait_for_completion_io+0x270/0x270 [ 2867.296464] ? rcu_read_lock_any_held+0x75/0xa0 [ 2867.296997] ? vfs_write+0x354/0xb10 [ 2867.297420] ? fput_many+0x2f/0x1a0 [ 2867.297834] ? ksys_write+0x1a9/0x260 [ 2867.298269] ? __ia32_sys_read+0xb0/0xb0 [ 2867.298734] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2867.299336] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2867.299930] do_syscall_64+0x33/0x40 [ 2867.300355] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2867.300940] RIP: 0033:0x7f989282fb19 [ 2867.301364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2867.303475] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2867.304349] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2867.305159] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2867.305972] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2867.306787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2867.307594] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:03:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0xe00) 06:03:26 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffff, 0x4}}, './file0\x00'}) creat(&(0x7f0000000200)='./file0\x00', 0x100) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xab, 0x3, 0x0, 0x9, 0x0, 0x100000000, 0x40000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xf0, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x10, 0x9, 0x6, 0x2, 0x4, 0x101, 0x7f, 0x0, 0x8, 0x0, 0xfffffffffffffff9}, r1, 0xf, r4, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r6, 0x301, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 06:03:26 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3c00) 06:03:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x7, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r3, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7fffffff}) fcntl$lock(r3, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) 06:03:26 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x0, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000340)={0xbdf, 0x4, 0x5, 0x1, 0x4, "abb64c76f69fa5441260f7b2e23baf9fb5dad6", 0x1, 0x80000001}) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000480)={{r3}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001680)=ANY=[@ANYBLOB="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"]}, @name="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"}) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:26 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000240)) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r1, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r5 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xc, 0x0, r6) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0xf00) [ 2867.621859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 06:03:26 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2867.640939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2867.641812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2867.642742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2867.662436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 06:03:26 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xfffffffc, 0x0, &(0x7f0000001700)=[0xffffffffffffffff, r0]}, 0x2) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = fcntl$dupfd(r1, 0x406, r5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) copy_file_range(r6, 0x0, r7, &(0x7f0000000280)=0x9, 0x8, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r1, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f0000000380)='./file0\x00', 0x9, 0x5, &(0x7f0000001680)=[{&(0x7f00000003c0)="bd66f8ca9f21552488430c40bf7f4abc1aee36a4b6969a781012f1c101e12578f22eb11dc3ce77f3ad5cd1523092cd7a6220408a219bd11bf913e9c6c8ba67572c73b24de20716672d23c543d6cd182e063a96088751df3736768defb17c14d0", 0x60}, {&(0x7f0000000440)="5e5fb8d5d7a437505d4d167540de5b25e6a6aba866d17b1831979b2bb8c44d806e6fa523e461dcb9f49c74f52a6e013dd71b6bc74e1152e43d6b5fb3eb190d20ff8acb0889e719ace781ed960d14d0a7aaed08bb2b2fc310fe41c2e2a1e0466e99e450b374ce0552d548bcc2eb2f24ff75210f8b20499c2a1be7255ae3c218d13c786fb015ee3c22e86b7f2ae4af66100e311c024ed84dcca63d9ddc81ba4d31b23a3c36832c74a859c159be4ad3f07712e00cd8c0fd018ae689c30d8ebc84b706c4962cad8b9e7f35103515812715daef711ff71d3737", 0xd7, 0x3f}, {&(0x7f0000000540)="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", 0x1000, 0x27a97fd8}, {&(0x7f0000001540)="7a28875d933aa27de63d5ca5", 0xc, 0x80000000}, {&(0x7f0000001580)="ac40c8cd6f3e9657661ae27ea915f8935b651c16adc563c180d355ea5c9bab1bd2be10b0ef077cedde5773332b9262ea22f457dc0151e4fab5567348493646059e831cf6a6c11041564960fc81fabc62dd6aadf199172d61949b56e8a15918fbeaf301b81a37eba20ee1a048c12c39b02a53cfb35f4861d13fcb362cd9db3f2407846078cd30b442d74985bd0381a7a6532cc2249682841c1e8ddd346570da961da81c12fc5a4cdbba90f0a9e0c73114e117bee14d767253f6b6f220908b58c9e98b61777e0af05b80ed7fc6483569d2080bf91cb860315a70a27a7f6135eb4510d2fc362fe3", 0xe6, 0xe75c}], 0x110000, &(0x7f0000001800)=ANY=[@ANYBLOB='journal_dev=0xffffffffffff0000,acl,fscontext=user_u,dont_measure,fowner<', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC=0xee01, @ANYBLOB="2c6f626a5f757320723d2f6465762f68070b3ad07065"]) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r8, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:26 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc000000, 0x0, 0x0, 0x0) [ 2867.724956] loop7: detected capacity change from 0 to 135266304 06:03:26 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x5919, &(0x7f0000000240)={0x0, 0x75c0, 0x10, 0x3, 0x221}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r4, r2, &(0x7f00000003c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x2, 0x3, &(0x7f0000000380)="6cffb5abc8f761fbdf8093b39eee20d501358b96cfc0", 0x84a2, 0x0, 0x0, {0x2}}, 0xbe27) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r5 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xc, 0x0, r6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2867.797732] loop7: detected capacity change from 0 to 135266304 06:03:39 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x10000000, 0x0, 0x0, 0x0) 06:03:39 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x1100) 06:03:39 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x8000, 0x217}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0x9903, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x2) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd=r4, 0x13, &(0x7f00000003c0)="1e5a6ba1ee1436fa97e7004d7dad3df5490194eed8c38dcd95e86f8f3b870dd2cbf5f54da8aafa53b08e95c10d015710833df5ffee73ec70fe8ea15f684eb58b11526002a14ee8e7fee6160ab745556d2d5fd6b234e207f5cd67f9070af69eb8ac441605af5a183a299b885f8c525a26a00ab19983a5577127edacc081bb3480daa66b95a46f53d1195ae24b5d784eda7f7e8c8fd97fd631bc6b1bc686ae5b1ec3d0600f4cc33c374cdab6", 0xab, 0x10, 0x1}, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r5 = syz_io_uring_setup(0xc65, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x2, 0xfffffffc}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000340)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xc, 0x0, r6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:39 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 95) 06:03:39 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffff0000000000002e2f66696c653000"]) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0xbe0}, 0xe) accept(0xffffffffffffffff, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xc3, 0x0, 0x0, 0x7f, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x3f, 0x3}, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8902, 0x0) ioctl$SG_IO(r1, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000819a2b774d30b7e3183c43ef553653e5c2276dd508f9c244b253c802e8ec6668ffd29b57977dcb81631a7df3c940644168b73d7ccfd2a357db4b4fe980b16ff5b56535b5c09f62d2323d0994330670c40765cbeacf836789ec9fd0622800d77053d0b4025876c62a1cd30c733ea120f9d4675b518d61f33402c12357331141ff60"], 0x2d8}, 0x1, 0x0, 0x0, 0x800}, 0x801) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDGETLED(0xffffffffffffffff, 0x4b44, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x20008111}, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) 06:03:39 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x2813, 0x710a, 0x1, &(0x7f0000000080)={[0x10000000000001]}, 0x30) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x13, r3, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000240), 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000000280)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r6, &(0x7f0000000380)="dfeedaae4a89d54c6a16f9b981fadf9af4d9f63714ae5dfe19ff3057a67407ad25146bc7f6b0f5b2260c8fda1942b0cf414413e6cf8076e228ea751ca6681d63d2f8b9fd0528a0df3a75641123810c876ab63944c5bf8a64306b113aa429620a5b07da525e48b7c863696cf723b785e2e08f77574fe63a37e7dc0b1d98203c5dc477daf5f35717f55dda8e2d549ec66377eed2fc84258c0219a68cee0a8cf70b9dfa713cdaf12516d023c77da200c4195c55077a851ef0fff110c1f64a299c69fb21d194d20ed97c141c595f67f4493c170d55a98d9a64b1ac4ee2de6f", 0xdd, 0x40, &(0x7f0000000480)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r7, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000340)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xfffc000000000003, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:39 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xde00) 06:03:39 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc00, 0x0, 0x0, 0x0) [ 2880.780256] FAULT_INJECTION: forcing a failure. [ 2880.780256] name failslab, interval 1, probability 0, space 0, times 0 [ 2880.781809] CPU: 0 PID: 14055 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2880.782633] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2880.783634] Call Trace: [ 2880.783967] dump_stack+0x107/0x167 [ 2880.784404] should_fail.cold+0x5/0xa [ 2880.784871] ? create_object.isra.0+0x3a/0xa20 [ 2880.785424] should_failslab+0x5/0x20 [ 2880.785889] kmem_cache_alloc+0x5b/0x310 [ 2880.786380] create_object.isra.0+0x3a/0xa20 [ 2880.786908] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2880.787517] __kmalloc+0x16e/0x390 [ 2880.787962] io_setup_async_rw+0x180/0x580 [ 2880.788471] ? iov_iter_restore+0x195/0x3a0 [ 2880.788990] io_read+0x775/0x11e0 [ 2880.789408] ? ext4_release_file+0x380/0x380 [ 2880.789940] ? kiocb_done+0xc90/0xc90 [ 2880.790400] ? mark_lock+0xf5/0x2df0 [ 2880.790858] ? lock_chain_count+0x20/0x20 [ 2880.791360] ? stack_trace_consume_entry+0x160/0x160 [ 2880.791977] ? lock_acquire+0x197/0x470 [ 2880.792458] ? __lock_acquire+0xbb1/0x5b00 [ 2880.792975] io_issue_sqe+0x2e8a/0x77b0 [ 2880.793457] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2880.794085] ? lock_chain_count+0x20/0x20 [ 2880.794580] ? __is_insn_slot_addr+0x14c/0x290 [ 2880.795127] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2880.795752] ? io_connect+0x610/0x610 [ 2880.796257] ? lock_acquire+0x197/0x470 [ 2880.796739] ? find_held_lock+0x2c/0x110 [ 2880.797233] ? __fget_files+0x2cf/0x520 [ 2880.797716] ? lock_downgrade+0x6d0/0x6d0 [ 2880.798214] __io_queue_sqe+0x90/0x9d0 [ 2880.798683] ? io_issue_sqe+0x77b0/0x77b0 [ 2880.799177] ? __fget_files+0x2f8/0x520 [ 2880.799652] ? io_prep_rw+0x7f5/0x1050 [ 2880.800129] io_submit_sqes+0x44aa/0x8610 [ 2880.800639] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2880.801237] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2880.801812] ? find_held_lock+0x2c/0x110 [ 2880.802304] ? io_submit_sqes+0x8610/0x8610 [ 2880.802828] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2880.803411] ? wait_for_completion_io+0x270/0x270 [ 2880.803999] ? rcu_read_lock_any_held+0x75/0xa0 [ 2880.804554] ? vfs_write+0x354/0xb10 [ 2880.805001] ? fput_many+0x2f/0x1a0 [ 2880.805435] ? ksys_write+0x1a9/0x260 [ 2880.805890] ? __ia32_sys_read+0xb0/0xb0 [ 2880.806376] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2880.807004] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2880.807622] do_syscall_64+0x33/0x40 [ 2880.808080] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2880.808694] RIP: 0033:0x7f989282fb19 [ 2880.809142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2880.811339] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2880.812261] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2880.813111] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2880.813975] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2880.814824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2880.815669] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:03:39 executing program 4: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, [@multicast2, @private=0xa010101, @empty, @private=0xa010101, @empty, @multicast2, @multicast2, @multicast1]}, 0x30) r0 = syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)=""/58, 0x3a}, {&(0x7f00000001c0)=""/202, 0xca}, {&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000000380)=""/71, 0x47}, {&(0x7f0000000400)=""/59, 0x3b}, {&(0x7f0000000440)=""/131, 0x83}], 0x6, &(0x7f0000000580)=""/174, 0xae}, 0x0, 0x40002161, 0x1, {0x3}}, 0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x48020200) 06:03:39 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x1200) 06:03:39 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) io_uring_enter(r3, 0x1407, 0xe587, 0x2, &(0x7f0000000240)={[0x8]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:40 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000340)={0x5, "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"}) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x1}, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x2000) 06:03:40 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffd) 06:03:40 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x4012, r0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x2000000000000}, 0xffffffffffffffff, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:40 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 96) [ 2881.195588] FAULT_INJECTION: forcing a failure. [ 2881.195588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2881.197049] CPU: 0 PID: 14094 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2881.197833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2881.198795] Call Trace: [ 2881.199104] dump_stack+0x107/0x167 [ 2881.199527] should_fail.cold+0x5/0xa [ 2881.199974] _copy_from_user+0x2e/0x1b0 [ 2881.200429] iovec_from_user+0x141/0x400 [ 2881.200894] __import_iovec+0x67/0x590 [ 2881.201343] io_import_iovec+0x581/0x1120 [ 2881.201824] ? io_complete_rw+0x230/0x230 [ 2881.202297] ? kiocb_done+0x16b/0xc90 [ 2881.202736] io_read+0xe14/0x11e0 [ 2881.203130] ? ext4_release_file+0x380/0x380 [ 2881.203634] ? kiocb_done+0xc90/0xc90 [ 2881.204079] ? mark_lock+0xf5/0x2df0 [ 2881.204503] ? lock_chain_count+0x20/0x20 [ 2881.204981] ? stack_trace_consume_entry+0x160/0x160 [ 2881.205556] ? lock_acquire+0x197/0x470 [ 2881.206010] ? lock_acquire+0x197/0x470 [ 2881.206464] ? __lock_acquire+0xbb1/0x5b00 [ 2881.206948] io_issue_sqe+0x2e8a/0x77b0 [ 2881.207402] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2881.208004] ? lock_chain_count+0x20/0x20 [ 2881.208473] ? __is_insn_slot_addr+0x14c/0x290 [ 2881.208993] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2881.209589] ? io_connect+0x610/0x610 [ 2881.210025] ? lock_acquire+0x197/0x470 [ 2881.210478] ? find_held_lock+0x2c/0x110 [ 2881.210940] ? __fget_files+0x2cf/0x520 [ 2881.211393] ? lock_downgrade+0x6d0/0x6d0 [ 2881.211866] __io_queue_sqe+0x90/0x9d0 [ 2881.212400] ? io_issue_sqe+0x77b0/0x77b0 [ 2881.212872] ? __fget_files+0x2f8/0x520 [ 2881.213328] ? io_prep_rw+0x7f5/0x1050 [ 2881.213772] io_submit_sqes+0x44aa/0x8610 [ 2881.214256] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2881.214822] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2881.215369] ? find_held_lock+0x2c/0x110 [ 2881.215832] ? io_submit_sqes+0x8610/0x8610 [ 2881.216334] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2881.216884] ? wait_for_completion_io+0x270/0x270 [ 2881.217428] ? rcu_read_lock_any_held+0x75/0xa0 [ 2881.217959] ? vfs_write+0x354/0xb10 [ 2881.218383] ? fput_many+0x2f/0x1a0 [ 2881.218802] ? ksys_write+0x1a9/0x260 [ 2881.219237] ? __ia32_sys_read+0xb0/0xb0 [ 2881.219700] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2881.220303] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2881.220903] do_syscall_64+0x33/0x40 [ 2881.221325] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2881.221907] RIP: 0033:0x7f989282fb19 [ 2881.222329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2881.224430] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2881.225293] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2881.226104] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2881.226912] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2881.227726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2881.228548] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:03:55 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 97) 06:03:55 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12000000, 0x0, 0x0, 0x0) 06:03:55 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1200, 0x0, 0x0, 0x0) 06:03:55 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xba) write$binfmt_elf64(r3, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0xba, 0x7, 0x99, 0x0, 0x3, 0x6, 0x2, 0x363, 0x40, 0x200, 0x0, 0x80, 0x38, 0x1, 0x7fff, 0x59a, 0x100}, [{0x70000000, 0x7, 0x2, 0xfff, 0x9, 0x1000, 0x6}], "01da43351cbc9c2d540446166ae6c1c92df1ceaad2872d634a594bdab4ed7035dbdcb7c821bdd622bee24e9bd73b455c2c13b064b033ff8f5c76b80c6dd764250eb653478947874a603355f3fe54df17e42c38e54acdb10726b5711a7587b598c9212e3a081a5fad0803c2e0b6e3ac9f32c1aa08d3fd5ea48f0d14d8899bbe886052059564962925a0723c918ca887055aaf6beb979b2f39919285a58f1729614b11f3ea1b24f516f80091ae99927a2710760902898900853e", ['\x00']}, 0x231) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x3, 0x4) io_uring_enter(r0, 0x538b, 0x12bb, 0x2, &(0x7f00000000c0)={[0x80000001]}, 0x8) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@mcast1, 0x56}) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000002c0)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@multicast1}, @in=@remote}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}]}, 0x13c}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000700)={0x0, @xdp={0x2c, 0x8, 0x0, 0xc}, @hci={0x1f, 0x1, 0x4}, @vsock={0x28, 0x0, 0xffffffff, @host}, 0x20, 0x0, 0x0, 0x0, 0x101, &(0x7f00000006c0)='batadv_slave_1\x00', 0x8, 0x6, 0x5}) dup3(r4, r5, 0x80000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca4b1d49", 0x1d}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x140, 0x4201, 0x23456}, 0xffffffff) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x2103) 06:03:55 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x5) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r1, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd_index=0x1, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7904d1d3f0d94e70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x3913, 0xc287, 0x0, &(0x7f0000000280)={[0x8]}, 0x8) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:55 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ff) 06:03:55 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x1d4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) pwrite64(0xffffffffffffffff, &(0x7f0000000240)="4e55e1a73cdd88dd44f8378711fc91a8abee6674640896eb2e48e54204b18b3b80d582cd27ac7e9f840c572ab587730fe0ad628215435d82c6628bbbd045851dc98fef9e90fe7183e0c764f88a791a5b389067f0f36e93b4e2ad85dc857ef62936", 0x61, 0xcc) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r5 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x13a}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xc, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r0, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x3) unlinkat(r4, &(0x7f00000000c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x58ab, 0xfffffffd, 0x0, 0x0, 0x0) [ 2896.868323] FAULT_INJECTION: forcing a failure. [ 2896.868323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2896.871262] CPU: 1 PID: 14125 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2896.872649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2896.874295] Call Trace: [ 2896.874815] dump_stack+0x107/0x167 [ 2896.875531] should_fail.cold+0x5/0xa [ 2896.876298] copy_page_to_iter+0x41e/0xf80 [ 2896.877142] generic_file_buffered_read+0xab2/0x2920 [ 2896.878157] ? pagecache_get_page+0xc80/0xc80 [ 2896.879059] generic_file_read_iter+0x33f/0x490 [ 2896.879984] ext4_file_read_iter+0x184/0x4c0 [ 2896.880852] ? ext4_release_file+0x380/0x380 [ 2896.881714] io_read+0x2dc/0x11e0 [ 2896.882393] ? ext4_release_file+0x380/0x380 [ 2896.883266] ? kiocb_done+0xc90/0xc90 [ 2896.884016] ? mark_lock+0xf5/0x2df0 [ 2896.884751] ? lock_chain_count+0x20/0x20 [ 2896.885564] ? stack_trace_consume_entry+0x160/0x160 [ 2896.886556] ? lock_acquire+0x197/0x470 [ 2896.887333] ? __lock_acquire+0xbb1/0x5b00 [ 2896.888175] io_issue_sqe+0x2e8a/0x77b0 [ 2896.888966] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2896.889979] ? lock_chain_count+0x20/0x20 [ 2896.890789] ? __is_insn_slot_addr+0x14c/0x290 [ 2896.891678] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2896.892693] ? io_connect+0x610/0x610 [ 2896.893436] ? lock_acquire+0x197/0x470 [ 2896.894209] ? find_held_lock+0x2c/0x110 [ 2896.895002] ? __fget_files+0x2cf/0x520 [ 2896.895774] ? lock_downgrade+0x6d0/0x6d0 [ 2896.896587] __io_queue_sqe+0x90/0x9d0 [ 2896.897354] ? io_issue_sqe+0x77b0/0x77b0 [ 2896.898165] ? __fget_files+0x2f8/0x520 [ 2896.898941] ? io_prep_rw+0x7f5/0x1050 [ 2896.899702] io_submit_sqes+0x44aa/0x8610 [ 2896.900552] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2896.901524] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2896.902469] ? find_held_lock+0x2c/0x110 [ 2896.903265] ? io_submit_sqes+0x8610/0x8610 [ 2896.904128] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2896.905072] ? wait_for_completion_io+0x270/0x270 [ 2896.906007] ? rcu_read_lock_any_held+0x75/0xa0 [ 2896.906907] ? vfs_write+0x354/0xb10 [ 2896.907624] ? fput_many+0x2f/0x1a0 [ 2896.908339] ? ksys_write+0x1a9/0x260 [ 2896.909076] ? __ia32_sys_read+0xb0/0xb0 [ 2896.909865] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2896.910886] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2896.911887] do_syscall_64+0x33/0x40 [ 2896.912621] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2896.913612] RIP: 0033:0x7f989282fb19 [ 2896.914340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2896.917935] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2896.919415] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2896.920805] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2896.922178] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2896.923560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2896.924942] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:03:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x2300) 06:03:56 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d53, &(0x7f00000002c0)={0x0, 0x8000000, 0x10, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x20}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@empty}}, &(0x7f00000005c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x8000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="00001500c4c30028d1f7c372207db00559e9febd07933043570a62045cf32c0653f1535b9683572260bc6018815728977283c1", @ANYRESHEX=r0, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',loose,cache=fscache,obj_user=&,dont_hash,measure,audit,defcontext=system_u,euid>', @ANYRESDEC=r4, @ANYBLOB=',dont_apuid=\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r4, @ANYBLOB=',uid<', @ANYRESDEC=r5, @ANYBLOB=',mask=^MAY_APPEND,\x00']) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:56 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x30200, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r5 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xc, 0x0, r6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xfffffffffffffff9) fstat(r4, &(0x7f0000000240)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:56 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xbe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x0, 0x8000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x48d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r4, r3, 0x0) fcntl$addseals(r4, 0x409, 0x8) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x434, 0x3f4, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x1, 0x28, [0xffff, 0x3, 0x8, 0x1, 0x80000001, 0x40, 0x36, 0x5, 0xffffffff, 0x5, 0x4, 0x4, 0x1e7, 0x3932c4cc, 0xffffffff, 0x1, 0x5, 0x9, 0x800, 0x1, 0x4, 0x0, 0x80, 0x9, 0x0, 0x5, 0xe76b, 0xffffffc0, 0x1, 0x3, 0xfffffffd, 0x2, 0x2, 0x0, 0x7, 0x9, 0x0, 0x9cf, 0x5, 0xfffffd50, 0x0, 0x4f, 0x87d, 0x8001, 0x100, 0x0, 0x2, 0x9, 0x1, 0xeb, 0x10001, 0x9, 0x7fff, 0x5, 0xffff5507, 0x1f, 0x80, 0x7, 0x8001, 0x9b, 0x80000, 0x0, 0xfffffffa, 0x80000000], [0x34, 0x0, 0x80, 0xfffffffe, 0x3, 0x54, 0x4, 0x7, 0x0, 0xfa, 0x9, 0x9, 0x2, 0x0, 0x2, 0x0, 0x3, 0x3, 0x1, 0x0, 0x5, 0x6, 0x231, 0x5, 0x3, 0x9, 0x0, 0xe1, 0x20, 0x80000001, 0x5, 0x9, 0x0, 0x7, 0xdb, 0x20, 0x9, 0x80000000, 0x197d77e1, 0x9, 0x6, 0x2, 0x1f, 0xc510, 0x6, 0x2, 0x0, 0x8, 0x4a14828e, 0xc85, 0x4, 0x2, 0x800, 0x9, 0x3f, 0x1ff, 0x7e9, 0x1, 0x8, 0x9, 0xffffffff, 0x4, 0xfff, 0x5], [0x8, 0x9, 0x1000, 0x9, 0x2, 0xea, 0x4fb2, 0x7fffffff, 0x9, 0x101, 0x4a, 0x1ff, 0x200, 0x200, 0x100, 0xff, 0x1, 0x8, 0xbc, 0x8, 0x4, 0x7, 0x101, 0x5, 0x3, 0x3, 0x0, 0x6b, 0x8000, 0x1, 0x6, 0x6, 0x6, 0x6, 0x7, 0x3, 0x0, 0x9, 0x7, 0x7f, 0x3c636f98, 0x5, 0x9, 0x4, 0x0, 0x7, 0x16, 0x1, 0x2, 0x1f, 0x2, 0x7, 0x401, 0x1, 0x7, 0x8, 0x40000000, 0x40, 0x10000, 0x8000, 0x8, 0x2, 0x9, 0x81], [0x8, 0x101, 0xc0c6422, 0x7, 0x1, 0xfffff33d, 0x3, 0x1, 0x1, 0x0, 0x1, 0x4, 0x4, 0x3f, 0x2, 0x5, 0xff, 0x3, 0x2, 0x10001, 0x3, 0x5, 0x323, 0x0, 0x80000000, 0xe2b0, 0x1, 0x80, 0x10001, 0x5, 0xffff, 0x92, 0x9, 0x8, 0x5, 0x7ff, 0x8, 0x80000000, 0xe35c, 0x2, 0x80, 0xfffffffe, 0x6, 0x1, 0x6, 0x0, 0xe86, 0x3ff, 0x10000, 0x7, 0x6, 0x2, 0x6, 0x5, 0x67, 0x7fffffff, 0x3ff, 0x8, 0xfff, 0x4, 0x7f, 0x1, 0x2c14931a, 0x2], 0x11, ['\x00', ')\x00', '#%\'/\\\xfd\x00', '(\x00', '!!#\x00', '\x00']}, [""]}, 0x434}}, 0x40000) close_range(r2, r1, 0x0) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x0, 0x1) 06:03:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x3f00) 06:03:56 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = getuid() mount$cgroup2(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x80008, &(0x7f0000000340)={[{@memory_localevents}, {@memory_recursiveprot}, {@memory_localevents}, {@subsystem='devices'}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x35, 0x39, 0x38, 0x38, 0x63, 0x37, 0x61], 0x2d, [0x33, 0x32, 0x0, 0x32], 0x2d, [0x38, 0x38, 0x64, 0x36], 0x2d, [0x63, 0x66, 0x34, 0x32], 0x2d, [0x31, 0x31, 0x65, 0x38, 0x37, 0x61, 0x33, 0x53]}}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/hpet\x00'}}, {@audit}, {@fowner_gt={'fowner>', r4}}]}) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2897.253245] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2897.269401] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2897.284899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=14149 comm=syz-executor.4 06:03:56 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r5 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x6, 0x1, 0x1, 0x0, 0x2, 0x0, {0x1}}, 0x9) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x40}}, 0x960) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xc, 0x0, r6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2897.349338] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. 06:03:56 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfdef) [ 2897.378194] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2897.389935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=14159 comm=syz-executor.4 06:03:56 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 98) [ 2897.496395] FAULT_INJECTION: forcing a failure. [ 2897.496395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2897.498026] CPU: 1 PID: 14170 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2897.498951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2897.500035] Call Trace: [ 2897.500408] dump_stack+0x107/0x167 [ 2897.500899] should_fail.cold+0x5/0xa [ 2897.501411] ? copyout.part.0+0x112/0x140 [ 2897.501975] copy_page_to_iter+0x878/0xf80 [ 2897.502551] generic_file_buffered_read+0xab2/0x2920 [ 2897.503244] ? pagecache_get_page+0xc80/0xc80 [ 2897.503865] generic_file_read_iter+0x33f/0x490 [ 2897.504503] ext4_file_read_iter+0x184/0x4c0 [ 2897.505099] ? ext4_release_file+0x380/0x380 [ 2897.505687] io_read+0x2dc/0x11e0 [ 2897.506150] ? ext4_release_file+0x380/0x380 [ 2897.506747] ? kiocb_done+0xc90/0xc90 [ 2897.507256] ? mark_lock+0xf5/0x2df0 [ 2897.507763] ? lock_chain_count+0x20/0x20 [ 2897.508338] ? stack_trace_consume_entry+0x160/0x160 [ 2897.509019] ? lock_acquire+0x197/0x470 [ 2897.509550] ? __lock_acquire+0xbb1/0x5b00 [ 2897.510119] io_issue_sqe+0x2e8a/0x77b0 [ 2897.510659] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2897.511356] ? lock_chain_count+0x20/0x20 [ 2897.511919] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2897.512621] ? io_connect+0x610/0x610 [ 2897.513134] ? lock_acquire+0x197/0x470 [ 2897.513662] ? find_held_lock+0x2c/0x110 [ 2897.514207] ? __fget_files+0x2cf/0x520 [ 2897.514741] ? lock_downgrade+0x6d0/0x6d0 [ 2897.515290] __io_queue_sqe+0x90/0x9d0 [ 2897.515814] ? io_issue_sqe+0x77b0/0x77b0 [ 2897.516372] ? __fget_files+0x2f8/0x520 [ 2897.516906] ? io_prep_rw+0x7f5/0x1050 [ 2897.517428] io_submit_sqes+0x44aa/0x8610 [ 2897.518002] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2897.518666] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2897.519308] ? find_held_lock+0x2c/0x110 [ 2897.519854] ? io_submit_sqes+0x8610/0x8610 [ 2897.520439] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2897.521078] ? wait_for_completion_io+0x270/0x270 [ 2897.521719] ? rcu_read_lock_any_held+0x75/0xa0 [ 2897.522333] ? vfs_write+0x354/0xb10 [ 2897.522825] ? fput_many+0x2f/0x1a0 [ 2897.523312] ? ksys_write+0x1a9/0x260 [ 2897.523815] ? __ia32_sys_read+0xb0/0xb0 [ 2897.524358] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2897.525050] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2897.525731] do_syscall_64+0x33/0x40 [ 2897.526220] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2897.526885] RIP: 0033:0x7f989282fb19 [ 2897.527368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2897.529754] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2897.530724] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2897.531632] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2897.532545] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2897.533451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2897.534353] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:04:11 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 99) 06:04:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000480)=ANY=[@ANYBLOB="feff00822db87c3d1ea8d9599eafdb49b36aca6ba79b96f004bd6d0886a18278e6d9821c9f", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c6530002c87af821976942a5ffe872c5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cfba9e02ef30e546553ce5"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[r0, 0xffffffffffffffff, r0], 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="34010000170001000000000000000000fe88000000000000000000004190da000000010000000000000000e000000100000000000000000000000000000000000000000000000000000000fc00"/108, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200100000000000000000000000000027f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7ba67cb7d38793daf5bb8e"], 0x134}}, 0x0) close(r3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="abc094ad16a9bdbd200000000000000007e898c97a8ab8ce717d754ebb5c30fd8dbaa7a33d021f063155233b6692bffc66f2eea2a650b3cdb9720273ef9e8c120d123893e41637732bfae3d23134f04e3df6f72c01d9d1270f2265da51771957ac363ec97b21601adb5f1e52b3bff29e8e6274f5c40119dc0fa5b503b8c93b3245f013d071386d2a62dfc471229aba32dede4399867e1131d61ec77435a742a2b8a2091e6399636ff1bcb89bf4c256ba358b6022daebda966937a5fa99bf0373cbc1387d090000de61ea0cb46bdea77c0240b55d753c947709fcc3893354bc2f1905e05f0699c5576d431fddf367e0f56d0854212eff642ba3cdf29832a400a77ef8a8dd258509d5d686ac9dc510983bf4a24d8916db193511c5a63c2f98f6007fba9ad517d62fd6f5690ee4734f6f73f9d1013ec11d9b0ed5815d59b82c63a400e9af9128ae217ee10d4f549d834aff44ef0475b8a3f76ccfc151c3bc1e312e98f8bc81b973b45a364714465182077c9c02ddda9f7b438567ba45019bc348ab97ed9298a085dc5e8b80"], 0x1c}, 0x1, 0x0, 0x0, 0xb31505c58d61db6b}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000000c0)={0x6200, 0x1f, 0x1}) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000180)) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xd5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) 06:04:11 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r4, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x488280, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18000000, 0x0, 0x0, 0x0) 06:04:11 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x4000) 06:04:11 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000240)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r4 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0xc4bb, 0x0, 0x3, 0x2eb}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000280)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x800, 0x4, 0x8001, 0x5, 0x11, "65ee507703231944"}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:04:11 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280), 0xc, &(0x7f0000000600)={&(0x7f00000008c0)={0x44c, 0x18, 0x10, 0x70bd26, 0x25dfdbfb, {0x15}, [@typed={0x8, 0x62, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="2cd01031fd36064fae16fd", @nested={0x257, 0x0, 0x0, 0x1, [@generic="7f6434f4662aa67889f6dea92aca5a665dd5201c8453bd7ac34049181a814be9aec650e0d62a18e0bf92869997a973690ec435069d62baf7cfa16a246723ea18e72c3d7b032e2d49faf6d71aad567b79646aa451b1cc55457db171145348f6180c5569b4d81b3f02935505d708eff1fef4d11f2a3cf1d1efcba7dc84746f86568296f021daf4c06288c71f3ad0a31ee74f5e", @generic="3673e65f7cd43b1031a43798652c4acbd9fdb12acc48b020cb7f07730b21f592a96460711ea61a1b3214aeaa374de6dfc5cf402703ce2f7a83117847f1d322996af880d7ba7b22ec3861df9e2f5f6df0b200a73fb718744fc830aeeae31cf69ce44d6469931a43581ff9362292d286c40065a1d0c5ac8abaa545a54f4d48252072100565927cbbc15f7511a827d3d5bd7ad77271", @typed={0x6, 0x32, 0x0, 0x0, @str='&\x00'}, @generic="08a10454a13d53e2cf4caddfb4fdf1059ffacfe66ab2c372763a5bb87088ce043e967b435eb06c400c32eed0e03204af36c66ce0d25f6bb18e6ef1b9ca740a2f488fac47dc26aeb3048900332a979210ea74fd02a3c3", @typed={0x8, 0x71, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="e688591c09052cbad0aa0b78e4bf0d38cd2dc19569e5b5a78353e9c5973ffcb43f0c346efc7f84930cf676076db909763571a900d6633740d80630ceeefd72a074594023afb4090ed8d16845658a6ce3e04aaeae62703ee810dbbf92a4e059b35073177269014680f023d773d9f396c41b8d929ee2614e749af2c4b435dcf02af1e42de843362356c66e9712fecf67122e5c88b1aa02f359c158c0928bda5e66e23ae2eec41cb7e77ac3d71701bfbb2060fa56a3548485032ec44d95593cfb6c1905e33ae23461"]}, @typed={0x8, 0x76, 0x0, 0x0, @fd}, @nested={0x1c1, 0x7b, 0x0, 0x1, [@generic="6f3782d4fdcc1e586cdf61613fe1afab36b8ac7c5df3d4b32cf8417ba47b779900441b8a8f687e5df27f70b034c98792039c53271a06fc92c8172a20e6d6ff32b7c67c4bce311768782ba4f984b3fa18897f0104dae318c05a5b5777b102f1f28e8a95b001edb87ec9a9cd56f9d90620c5f8c2b3b5855cb799c2ebf8bd3237bb8a2c86d447", @generic="4845bbc1e9a6fae269d3a6efbfac9438f58f6b37b67f1555dd3d49d98ae1b4e2e7ba2d36c04348f161c2986d20aec31d17d9ba5eba73b6ec701e6e1db0663fae5f8a69ab93964e6c5e63c59d01405691b776bdfc72c2329a348b4d121da0641d7a6bb2a2c22965d370e22d768b2a5cc70ca1b0ec635669e0870b85e0f9d388833744de2d18e50f87a36078e44919359f1048c7cf05969754ceed8d54e04c70e562bf28218df339350e6edad15ce025c890155cab54927a209d9ec501c37ca82e39a208d774d86c3ca193963913a70e3a25f8a39c08fb0b4fe6dffc2e11e24c49cd9005ec15f230224ac8e51428bb08cf", @generic="535cf869a4b6d8535b4307fe027ca348e8cbcc5727fb4019a439e999e0d05c3027ecbc5d", @typed={0x8, 0x94, 0x0, 0x0, @fd}, @typed={0x8, 0x3d, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x4, 0x3c}, @typed={0x8, 0xf, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x26, 0x0, 0x0, @fd}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x2004000}, 0x4) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x0, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000240)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:04:11 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfff5) 06:04:11 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1800, 0x0, 0x0, 0x0) [ 2912.032595] FAULT_INJECTION: forcing a failure. [ 2912.032595] name failslab, interval 1, probability 0, space 0, times 0 [ 2912.035250] CPU: 0 PID: 14182 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2912.036703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2912.038405] Call Trace: [ 2912.038948] dump_stack+0x107/0x167 [ 2912.039700] should_fail.cold+0x5/0xa [ 2912.040522] ? io_setup_async_rw+0x180/0x580 [ 2912.041446] should_failslab+0x5/0x20 [ 2912.042226] __kmalloc+0x72/0x390 [ 2912.042947] io_setup_async_rw+0x180/0x580 [ 2912.043813] ? iov_iter_restore+0x195/0x3a0 [ 2912.044729] io_read+0x775/0x11e0 [ 2912.045439] ? ext4_release_file+0x380/0x380 [ 2912.046343] ? kiocb_done+0xc90/0xc90 [ 2912.047118] ? mark_lock+0xf5/0x2df0 [ 2912.047889] ? lock_chain_count+0x20/0x20 [ 2912.048908] ? stack_trace_consume_entry+0x160/0x160 [ 2912.050081] ? lock_acquire+0x197/0x470 [ 2912.050914] ? __lock_acquire+0xbb1/0x5b00 [ 2912.051792] io_issue_sqe+0x2e8a/0x77b0 [ 2912.052648] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2912.053718] ? lock_chain_count+0x20/0x20 [ 2912.054581] ? __is_insn_slot_addr+0x14c/0x290 [ 2912.055517] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2912.056622] ? io_connect+0x610/0x610 [ 2912.057410] ? lock_acquire+0x197/0x470 [ 2912.058224] ? find_held_lock+0x2c/0x110 [ 2912.059081] ? __fget_files+0x2cf/0x520 [ 2912.059904] ? lock_downgrade+0x6d0/0x6d0 [ 2912.060794] __io_queue_sqe+0x90/0x9d0 [ 2912.061596] ? io_issue_sqe+0x77b0/0x77b0 [ 2912.062449] ? __fget_files+0x2f8/0x520 [ 2912.063271] ? io_prep_rw+0x7f5/0x1050 [ 2912.064075] io_submit_sqes+0x44aa/0x8610 [ 2912.064985] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2912.065998] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2912.066992] ? find_held_lock+0x2c/0x110 [ 2912.067843] ? io_submit_sqes+0x8610/0x8610 [ 2912.068758] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2912.069742] ? wait_for_completion_io+0x270/0x270 [ 2912.070733] ? rcu_read_lock_any_held+0x75/0xa0 [ 2912.071687] ? vfs_write+0x354/0xb10 [ 2912.072482] ? fput_many+0x2f/0x1a0 [ 2912.073254] ? ksys_write+0x1a9/0x260 [ 2912.074038] ? __ia32_sys_read+0xb0/0xb0 [ 2912.074869] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2912.075944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2912.077030] do_syscall_64+0x33/0x40 [ 2912.077783] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2912.078841] RIP: 0033:0x7f989282fb19 [ 2912.079611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2912.083468] RSP: 002b:00007f988fda5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2912.085043] RAX: ffffffffffffffda RBX: 00007f9892942f60 RCX: 00007f989282fb19 [ 2912.086494] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2912.087941] RBP: 00007f988fda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2912.089427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2912.090887] R13: 00007ffcdac60adf R14: 00007f988fda5300 R15: 0000000000022000 06:04:11 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x45d4) 06:04:11 executing program 4: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) splice(r1, &(0x7f0000000040), r0, &(0x7f0000000080)=0x10001, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './file0\x00'}) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r4, r3, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000100)=0x7) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) [ 2912.257681] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2912.288110] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. 06:04:11 executing program 1: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) r5 = syz_io_uring_setup(0xc65, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xc, 0x0, r6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x4, 0x1f, 0x2, 0x0, 0x0, 0x7, 0x8800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r7, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:04:11 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66e96c6530ce000000000000005ffe870400000095824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cf9c9e02ef30e546553c"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x7fffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x77, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000001e0011cd2cbd7003000000000000c7000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x46d4) 06:04:11 executing program 7: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7578, 0xf051, 0x2, &(0x7f0000000080)={[0x10000000000001]}, 0x8) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8842, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r6}, &(0x7f00000002c0)) statx(r3, &(0x7f00000032c0)='./file0\x00', 0x6000, 0x8, &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000003500)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000340)={0x1214, 0x21, 0x100, 0x70bd27, 0x25dfdbfb, "", [@generic="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", @generic="53dbbff20e29718160f9475fd3d6d0", @generic="387c004be3b582e020b55100b1b1d7b3ba7a4dd4b624dff17153b7fd0bbed1a0c29eecd76ade80dc5a6afcd084cef13339b9b07fddbacfc96dbfde31e5b5147c00375d449ec5f696025bab62362e5e82078085ce5b780f6b844aad34872e83df2ed4318a805abaee8f5ff115c42831b8b7a851653e097d1008f1631a5ff9b1f449b001297596967116ce861402d1f5b6bd0f8ee728cbdab7418ca9e0b5008cdee4715be058d1b0eb72eb8241fb4e280b3c7016c7bc743c9bbc22f6c9fbbb0cc63350404df92650719a921bf40982179142137c1822c2d6", @typed={0x8, 0x11, 0x0, 0x0, @fd}, @nested={0x4e, 0x9, 0x0, 0x1, [@typed={0x8, 0x3e, 0x0, 0x0, @fd}, @generic="1fa1454edd0241570d4a55da009b", @typed={0x8, 0x4, 0x0, 0x0, @uid}, @typed={0x8, 0x63, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x4, 0x0, 0x0, @pid}, @typed={0x14, 0x5d, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x7, 0x0, 0x0, @fd}, @generic]}, @nested={0xc2, 0x1c, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @fd}, @typed={0x8, 0x74, 0x0, 0x0, @fd}, @generic="ad26ce805919074d67aecbb824916dfc5d02ca04739c624f0ce05e75870b0eadcfd7bbdd0c55f2c254d08d096fee0b1d3949ba16b1fb413478d9f986e156d30903e3834ef5f1d5256a7ac6d975090aa0fd11231cf234f0e9dfd5641323a96803a5733009c4c0b8d101b0413ea268387c7374d8580824d86e33443012f69e45e75ad378819ab32696d6aacbf7e54c7fdeb9338ed4c7c16733ed5e8ae0b531e2a674339166d96c0e05b734cdb3db64"]}]}, 0x1214}, {&(0x7f0000001640)={0x34, 0x31, 0x10, 0x70bd27, 0x25dfdbfe, "", [@typed={0x8, 0x20, 0x0, 0x0, @u32=0x3}, @typed={0x4, 0x70}, @nested={0x18, 0x3a, 0x0, 0x1, [@typed={0x14, 0x41, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}]}, 0x34}], 0x2, &(0x7f0000003400)=[@rights={{0x24, 0x1, 0x1, [r3, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, r7}}}], 0xe0, 0x4}, 0x50) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0xaea8, 0x0, 0x0, 0x0) 06:04:11 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e00, 0x0, 0x0, 0x0) 06:04:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="ff02000000d2000000000600000008000300", @ANYRES32=r1, @ANYBLOB="080005000b000000"], 0x24}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') getdents64(r3, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(0x0, r3) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x18}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4840}, 0x80) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000380)=@random='y', 0x1, 0x0) 06:04:11 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1517f) [ 2912.561265] ------------[ cut here ]------------ [ 2912.562638] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 2912.564290] WARNING: CPU: 1 PID: 14231 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x554/0x5f0 [ 2912.566320] Modules linked in: [ 2912.567049] CPU: 1 PID: 14231 Comm: syz-executor.4 Not tainted 5.10.239 #1 [ 2912.568536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2912.570328] RIP: 0010:drv_bss_info_changed+0x554/0x5f0 [ 2912.571488] Code: 49 8b ac 24 a8 03 00 00 48 85 ed 74 3e e8 84 43 8b fd e8 7f 43 8b fd 8b 54 24 04 48 89 ee 48 c7 c7 60 e5 95 84 e8 95 fe 24 00 <0f> 0b e9 c7 fd ff ff 4c 89 ff e8 dd 51 b7 fd e9 97 fb ff ff 4c 89 [ 2912.575385] RSP: 0018:ffff888048f175d0 EFLAGS: 00010282 [ 2912.576564] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 2912.578945] RDX: 0000000000040000 RSI: ffffffff8129f9b3 RDI: ffffed10091e2eac [ 2912.582507] RBP: ffff888048a94000 R08: 0000000000000001 R09: ffff88806cf37b0f [ 2912.586614] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888048a94bc0 [ 2912.588747] R13: 0000000000400000 R14: ffff888048a95da0 R15: ffff888048a95d98 [ 2912.591460] FS: 00007fafae01e700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 2912.593351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2912.594640] CR2: 00007fafae01ccc0 CR3: 000000001b202000 CR4: 0000000000350ee0 [ 2912.596190] Call Trace: [ 2912.596810] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 2912.597982] ieee80211_ocb_leave+0x1ed/0x340 [ 2912.598945] ? nl80211_parse_mon_options+0x477/0x6d0 [ 2912.600078] __cfg80211_leave_ocb+0x1d6/0x570 [ 2912.601082] cfg80211_leave_ocb+0x4e/0x70 [ 2912.602012] cfg80211_change_iface+0x843/0xf90 [ 2912.603027] nl80211_set_interface+0x67c/0x8f0 [ 2912.604038] ? nl80211_notify_iface+0x180/0x180 [ 2912.605077] ? nl80211_pre_doit+0xa2/0x640 [ 2912.606026] genl_family_rcv_msg_doit+0x22d/0x330 [ 2912.607091] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2912.608528] ? cap_capable+0x1cd/0x230 [ 2912.609402] ? ns_capable+0xe2/0x110 [ 2912.610234] genl_rcv_msg+0x36a/0x5a0 [ 2912.611076] ? genl_get_cmd+0x480/0x480 [ 2912.611965] ? nl80211_notify_iface+0x180/0x180 [ 2912.613016] ? lock_release+0x680/0x680 [ 2912.613895] ? netlink_deliver_tap+0xf4/0xcc0 [ 2912.614876] netlink_rcv_skb+0x14b/0x430 [ 2912.615761] ? genl_get_cmd+0x480/0x480 [ 2912.616618] ? netlink_ack+0xab0/0xab0 [ 2912.617485] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2912.618497] ? is_vmalloc_addr+0x7b/0xb0 [ 2912.619401] genl_rcv+0x24/0x40 [ 2912.620130] netlink_unicast+0x54e/0x800 [ 2912.621038] ? netlink_attachskb+0x870/0x870 [ 2912.622020] netlink_sendmsg+0x90f/0xe00 [ 2912.622916] ? netlink_unicast+0x800/0x800 [ 2912.623858] ? netlink_unicast+0x800/0x800 [ 2912.624814] __sock_sendmsg+0x154/0x190 [ 2912.625694] __sys_sendto+0x21c/0x320 [ 2912.626512] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2912.627530] ? kmem_cache_free+0xa7/0x2d0 [ 2912.628473] ? _cond_resched+0x10/0x30 [ 2912.629337] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2912.630476] ? call_rcu+0x435/0x9c0 [ 2912.631276] ? trace_hardirqs_on+0x5b/0x180 [ 2912.632254] __x64_sys_sendto+0xdd/0x1b0 [ 2912.633156] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2912.634287] do_syscall_64+0x33/0x40 [ 2912.635111] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2912.636247] RIP: 0033:0x7fafb0a5b8ac [ 2912.637080] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 2912.641027] RSP: 002b:00007fafae01cf80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2912.642673] RAX: ffffffffffffffda RBX: 00007fafae01d0f0 RCX: 00007fafb0a5b8ac [ 2912.644243] RDX: 0000000000000024 RSI: 00007fafae01d140 RDI: 0000000000000005 [ 2912.645791] RBP: 0000000000000000 R08: 00007fafae01cfd4 R09: 000000000000000c [ 2912.647326] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2912.648877] R13: 00007fafae01d140 R14: 0000000000000005 R15: 0000000000000000 [ 2912.650437] irq event stamp: 2767 [ 2912.651209] hardirqs last enabled at (2777): [] console_unlock+0x92d/0xb40 [ 2912.653073] hardirqs last disabled at (2786): [] console_unlock+0x839/0xb40 [ 2912.654922] softirqs last enabled at (2240): [] asm_call_irq_on_stack+0x12/0x20 [ 2912.656852] softirqs last disabled at (2175): [] asm_call_irq_on_stack+0x12/0x20 [ 2912.658760] ---[ end trace 1975bad302deeebb ]--- [ 2912.862514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2912.864487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2912.867314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready VM DIAGNOSIS: 06:04:11 Registers: info registers vcpu 0 RAX=0000076852553934 RBX=0000000000000000 RCX=00000000000006e0 RDX=0000000000000768 RSI=ffff88806ce27980 RDI=000000000002178a RBP=ffff88806ce27980 RSP=ffff88806ce09ec8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=000000000002178a R13=0000000000000000 R14=ffff88806ce2eab8 R15=0000000000000000 RIP=ffffffff810e0591 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0d65bb6700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2db24000 CR3=0000000048356000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff822e27c1 RDI=ffffffff879f5140 RBP=ffffffff879f5100 RSP=ffff888048f17028 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffffff879f5158 R14=0000000000000001 R15=ffffffff879f5150 RIP=ffffffff822e2818 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fafae01e700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fafae01ccc0 CR3=000000001b202000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=ffffffffffffffffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=ffffffffffffffffffffff0000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000