tl+0x19a/0x210 [ 1908.526676] do_syscall_64+0x33/0x40 [ 1908.526983] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1908.527406] RIP: 0033:0x7f430e1be8d7 [ 1908.527707] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1908.529191] RSP: 002b:00007f430b733f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1908.529827] RAX: ffffffffffffffda RBX: 00007f430e208970 RCX: 00007f430e1be8d7 [ 1908.530413] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1908.530992] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1908.531572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1908.532142] R13: 0000000000000004 R14: 0000000020000058 R15: 0000000000000001 03:17:10 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) (fail_nth: 24) 03:17:10 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x8d030000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 1908.639209] FAULT_INJECTION: forcing a failure. [ 1908.639209] name failslab, interval 1, probability 0, space 0, times 0 [ 1908.640288] CPU: 0 PID: 44060 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1908.640911] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1908.641665] Call Trace: [ 1908.641910] dump_stack+0x107/0x167 [ 1908.642241] should_fail.cold+0x5/0xa [ 1908.642591] ? create_object.isra.0+0x3a/0xa20 [ 1908.643004] should_failslab+0x5/0x20 [ 1908.643357] kmem_cache_alloc+0x5b/0x310 [ 1908.643726] create_object.isra.0+0x3a/0xa20 [ 1908.644124] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1908.644580] kmem_cache_alloc_trace+0x151/0x320 [ 1908.645005] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1908.645446] __kthread_create_on_node+0xd1/0x400 [ 1908.645876] ? __kthread_parkme+0x1d0/0x1d0 [ 1908.646269] ? __mutex_lock+0x4fe/0x10b0 [ 1908.646636] ? loop_configure+0xcb5/0x1480 [ 1908.647022] ? do_raw_spin_unlock+0x4f/0x220 [ 1908.647419] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1908.647841] kthread_create_on_node+0xbb/0x100 [ 1908.648255] ? __kthread_create_on_node+0x400/0x400 [ 1908.648711] ? lockdep_init_map_type+0x2c7/0x780 [ 1908.649146] ? lockdep_init_map_type+0x2c7/0x780 [ 1908.649587] loop_configure+0x3e3/0x1480 [ 1908.649955] lo_ioctl+0xa72/0x1760 [ 1908.650284] ? avc_has_extended_perms+0x7f1/0xf40 [ 1908.650718] ? loop_set_status_old+0x250/0x250 [ 1908.651131] ? avc_ss_reset+0x180/0x180 [ 1908.651494] ? lock_acquire+0x197/0x470 [ 1908.651850] ? find_held_lock+0x2c/0x110 [ 1908.652222] ? __lock_acquire+0xbb1/0x5b00 [ 1908.652630] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1908.653099] ? generic_block_fiemap+0x60/0x60 [ 1908.653528] ? loop_set_status_old+0x250/0x250 [ 1908.654071] blkdev_ioctl+0x291/0x710 [ 1908.654420] ? blkdev_common_ioctl+0x1870/0x1870 [ 1908.654842] ? selinux_file_ioctl+0xb6/0x270 [ 1908.655234] block_ioctl+0xf9/0x140 [ 1908.655561] ? blkdev_read_iter+0x1c0/0x1c0 [ 1908.655944] __x64_sys_ioctl+0x19a/0x210 [ 1908.656313] do_syscall_64+0x33/0x40 [ 1908.656645] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1908.657100] RIP: 0033:0x7f430e1be8d7 [ 1908.657450] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1908.659076] RSP: 002b:00007f430b733f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1908.659744] RAX: ffffffffffffffda RBX: 00007f430e208970 RCX: 00007f430e1be8d7 [ 1908.660374] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1908.661006] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1908.661646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1908.662278] R13: 0000000000000004 R14: 0000000020000058 R15: 0000000000000001 03:17:10 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:17:10 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:17:10 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) (fail_nth: 25) 03:17:10 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xad020000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 1908.909365] FAULT_INJECTION: forcing a failure. [ 1908.909365] name failslab, interval 1, probability 0, space 0, times 0 [ 1908.910527] CPU: 0 PID: 44170 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1908.911140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1908.911893] Call Trace: [ 1908.912141] dump_stack+0x107/0x167 [ 1908.912523] should_fail.cold+0x5/0xa [ 1908.912914] ? __kernfs_new_node+0xd4/0x860 [ 1908.913321] should_failslab+0x5/0x20 [ 1908.913661] kmem_cache_alloc+0x5b/0x310 [ 1908.914025] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1908.914500] __kernfs_new_node+0xd4/0x860 [ 1908.914872] ? lock_chain_count+0x20/0x20 [ 1908.915243] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1908.915674] ? update_load_avg+0x162/0x1870 [ 1908.916060] ? find_held_lock+0x2c/0x110 [ 1908.916432] ? set_user_nice.part.0+0x2fd/0x760 [ 1908.916850] kernfs_create_dir_ns+0x9c/0x230 [ 1908.917242] internal_create_group+0x793/0xb30 [ 1908.917674] ? set_user_nice.part.0+0x2fd/0x760 [ 1908.918088] ? sysfs_remove_group+0x170/0x170 [ 1908.918498] ? lockdep_init_map_type+0x2c7/0x780 [ 1908.918930] ? blk_queue_flag_set+0x22/0x30 [ 1908.919321] ? __loop_update_dio+0x2d2/0x690 [ 1908.919720] loop_configure+0x954/0x1480 [ 1908.920093] lo_ioctl+0xa72/0x1760 [ 1908.920417] ? avc_has_extended_perms+0x7f1/0xf40 [ 1908.920863] ? loop_set_status_old+0x250/0x250 [ 1908.921284] ? avc_ss_reset+0x180/0x180 [ 1908.921644] ? lock_acquire+0x197/0x470 [ 1908.922001] ? find_held_lock+0x2c/0x110 [ 1908.922363] ? __lock_acquire+0xbb1/0x5b00 [ 1908.922770] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1908.923240] ? generic_block_fiemap+0x60/0x60 [ 1908.923649] ? loop_set_status_old+0x250/0x250 [ 1908.924065] blkdev_ioctl+0x291/0x710 [ 1908.924410] ? blkdev_common_ioctl+0x1870/0x1870 [ 1908.924834] ? selinux_file_ioctl+0xb6/0x270 [ 1908.925238] block_ioctl+0xf9/0x140 [ 1908.925575] ? blkdev_read_iter+0x1c0/0x1c0 [ 1908.925959] __x64_sys_ioctl+0x19a/0x210 [ 1908.926340] do_syscall_64+0x33/0x40 [ 1908.926679] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1908.927141] RIP: 0033:0x7f430e1be8d7 [ 1908.927479] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1908.929118] RSP: 002b:00007f430b733f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1908.929818] RAX: ffffffffffffffda RBX: 00007f430e208970 RCX: 00007f430e1be8d7 [ 1908.930458] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1908.931093] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1908.931733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1908.932374] R13: 0000000000000004 R14: 0000000020000058 R15: 0000000000000001 03:17:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 11) 03:17:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:17:11 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:17:11 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:17:11 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xc0ed0000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:17:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) (fail_nth: 26) [ 1909.129757] FAULT_INJECTION: forcing a failure. [ 1909.129757] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.130873] CPU: 0 PID: 44294 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1909.131491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.132238] Call Trace: [ 1909.132486] dump_stack+0x107/0x167 [ 1909.132818] should_fail.cold+0x5/0xa [ 1909.133165] ? create_object.isra.0+0x3a/0xa20 [ 1909.133597] should_failslab+0x5/0x20 [ 1909.133942] kmem_cache_alloc+0x5b/0x310 [ 1909.134320] create_object.isra.0+0x3a/0xa20 [ 1909.134713] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1909.135173] kmem_cache_alloc+0x159/0x310 [ 1909.135550] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1909.136024] __kernfs_new_node+0xd4/0x860 [ 1909.136399] ? lock_chain_count+0x20/0x20 [ 1909.136769] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1909.137202] ? update_load_avg+0x162/0x1870 [ 1909.137594] ? find_held_lock+0x2c/0x110 [ 1909.137960] ? set_user_nice.part.0+0x2fd/0x760 [ 1909.138384] kernfs_create_dir_ns+0x9c/0x230 [ 1909.138780] internal_create_group+0x793/0xb30 [ 1909.139194] ? set_user_nice.part.0+0x2fd/0x760 [ 1909.139617] ? sysfs_remove_group+0x170/0x170 [ 1909.140019] ? lockdep_init_map_type+0x2c7/0x780 [ 1909.140455] ? blk_queue_flag_set+0x22/0x30 [ 1909.140841] ? __loop_update_dio+0x2d2/0x690 [ 1909.141245] loop_configure+0x954/0x1480 [ 1909.141632] lo_ioctl+0xa72/0x1760 [ 1909.141951] ? avc_has_extended_perms+0x7f1/0xf40 [ 1909.142393] ? loop_set_status_old+0x250/0x250 [ 1909.142809] ? avc_ss_reset+0x180/0x180 [ 1909.143165] ? lock_acquire+0x197/0x470 [ 1909.143527] ? find_held_lock+0x2c/0x110 [ 1909.143899] ? __lock_acquire+0xbb1/0x5b00 [ 1909.144307] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1909.144782] ? generic_block_fiemap+0x60/0x60 [ 1909.145187] ? loop_set_status_old+0x250/0x250 [ 1909.145612] blkdev_ioctl+0x291/0x710 [ 1909.145956] ? blkdev_common_ioctl+0x1870/0x1870 [ 1909.146384] ? selinux_file_ioctl+0xb6/0x270 [ 1909.146783] block_ioctl+0xf9/0x140 [ 1909.147109] ? blkdev_read_iter+0x1c0/0x1c0 [ 1909.147496] __x64_sys_ioctl+0x19a/0x210 [ 1909.147870] do_syscall_64+0x33/0x40 [ 1909.148206] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1909.148662] RIP: 0033:0x7f430e1be8d7 [ 1909.149001] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1909.150649] RSP: 002b:00007f430b733f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1909.151331] RAX: ffffffffffffffda RBX: 00007f430e208970 RCX: 00007f430e1be8d7 [ 1909.151965] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1909.152602] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1909.153259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1909.153886] R13: 0000000000000004 R14: 0000000020000058 R15: 0000000000000001 [ 1909.315493] FAULT_INJECTION: forcing a failure. [ 1909.315493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1909.316953] CPU: 1 PID: 44291 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 1909.317679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.318530] Call Trace: [ 1909.318813] dump_stack+0x107/0x167 [ 1909.319189] should_fail.cold+0x5/0xa [ 1909.319589] _copy_to_iter+0x264/0x12d0 [ 1909.320030] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1909.320576] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1909.321130] ? trace_hardirqs_on+0x5b/0x180 [ 1909.321580] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1909.322143] ? _copy_from_iter_nocache+0xd60/0xd60 [ 1909.322669] simple_copy_to_iter+0x4c/0x70 [ 1909.323110] __skb_datagram_iter+0x122/0x880 [ 1909.323557] ? sock_set_mark+0x130/0x130 [ 1909.323987] ? zerocopy_sg_from_iter+0x110/0x110 [ 1909.324487] skb_copy_datagram_iter+0x88/0x190 [ 1909.324959] tcp_recvmsg+0x13b5/0x2930 [ 1909.325395] ? tcp_splice_read+0x8c0/0x8c0 [ 1909.325831] ? sock_has_perm+0x1ea/0x280 [ 1909.326253] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1909.326781] ? lock_downgrade+0x6d0/0x6d0 [ 1909.327213] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1909.327761] ? tcp_splice_read+0x8c0/0x8c0 [ 1909.328202] inet6_recvmsg+0x13b/0x6e0 [ 1909.328611] ? inet6_bind+0x120/0x120 [ 1909.328924] ? security_socket_recvmsg+0x95/0xc0 [ 1909.329346] ? inet6_bind+0x120/0x120 [ 1909.329677] sock_recvmsg+0xff/0x180 [ 1909.329981] __sys_recvfrom+0x1be/0x2f0 [ 1909.330307] ? __ia32_sys_send+0x100/0x100 [ 1909.330681] ? lock_downgrade+0x6d0/0x6d0 [ 1909.331029] ? wait_for_completion_io+0x270/0x270 [ 1909.331427] ? rcu_read_lock_any_held+0x75/0xa0 [ 1909.331828] ? vfs_write+0x354/0xa70 [ 1909.332128] ? fput_many+0x2f/0x1a0 [ 1909.332424] ? ksys_write+0x1a9/0x260 [ 1909.332756] ? __ia32_sys_read+0xb0/0xb0 [ 1909.333098] __x64_sys_recvfrom+0xdd/0x1b0 [ 1909.333450] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1909.333884] do_syscall_64+0x33/0x40 [ 1909.334183] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1909.334598] RIP: 0033:0x7f2e54dfeb19 [ 1909.334913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1909.336407] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1909.337026] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 1909.337630] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 1909.338217] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 1909.338801] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 1909.339402] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:17:24 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:17:24 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xc0ffffff, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:17:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) (fail_nth: 27) 03:17:24 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:17:24 executing program 6: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:17:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 12) 03:17:24 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:17:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 1922.756879] FAULT_INJECTION: forcing a failure. [ 1922.756879] name failslab, interval 1, probability 0, space 0, times 0 [ 1922.758158] CPU: 1 PID: 44409 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1922.758750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1922.759478] Call Trace: [ 1922.759719] dump_stack+0x107/0x167 [ 1922.760036] should_fail.cold+0x5/0xa [ 1922.760381] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1922.760879] should_failslab+0x5/0x20 [ 1922.761208] kmem_cache_alloc+0x5b/0x310 [ 1922.761579] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1922.762059] idr_get_free+0x4b5/0x8f0 [ 1922.762394] idr_alloc_u32+0x170/0x2d0 [ 1922.762740] ? __fprop_inc_percpu_max+0x130/0x130 [ 1922.763155] ? lock_acquire+0x197/0x470 [ 1922.763507] ? __kernfs_new_node+0xff/0x860 [ 1922.763880] idr_alloc_cyclic+0x102/0x230 [ 1922.764235] ? idr_alloc+0x130/0x130 [ 1922.764559] ? rwlock_bug.part.0+0x90/0x90 [ 1922.764944] __kernfs_new_node+0x117/0x860 [ 1922.765307] ? lock_acquire+0x197/0x470 [ 1922.765651] ? lock_chain_count+0x20/0x20 [ 1922.766014] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1922.766416] ? lock_acquire+0x197/0x470 [ 1922.766768] ? task_rq_lock+0xab/0x270 [ 1922.767103] ? lock_release+0x680/0x680 [ 1922.767446] ? find_held_lock+0x2c/0x110 [ 1922.767796] ? set_user_nice.part.0+0x2fd/0x760 [ 1922.768203] kernfs_create_dir_ns+0x9c/0x230 [ 1922.768584] internal_create_group+0x793/0xb30 [ 1922.768981] ? set_user_nice.part.0+0x2fd/0x760 [ 1922.769378] ? sysfs_remove_group+0x170/0x170 [ 1922.769774] ? lockdep_init_map_type+0x2c7/0x780 [ 1922.770188] ? blk_queue_flag_set+0x22/0x30 [ 1922.770555] ? __loop_update_dio+0x2d2/0x690 [ 1922.770944] loop_configure+0x954/0x1480 [ 1922.771299] lo_ioctl+0xa72/0x1760 [ 1922.771601] ? avc_has_extended_perms+0x7f1/0xf40 [ 1922.772016] ? loop_set_status_old+0x250/0x250 [ 1922.772398] ? avc_ss_reset+0x180/0x180 [ 1922.772726] ? lock_acquire+0x197/0x470 [ 1922.773053] ? find_held_lock+0x2c/0x110 [ 1922.773394] ? __lock_acquire+0xbb1/0x5b00 [ 1922.773785] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1922.774209] ? generic_block_fiemap+0x60/0x60 [ 1922.774586] ? loop_set_status_old+0x250/0x250 [ 1922.774952] blkdev_ioctl+0x291/0x710 [ 1922.775267] ? blkdev_common_ioctl+0x1870/0x1870 [ 1922.775654] ? selinux_file_ioctl+0xb6/0x270 [ 1922.776022] block_ioctl+0xf9/0x140 [ 1922.776332] ? blkdev_read_iter+0x1c0/0x1c0 [ 1922.776685] __x64_sys_ioctl+0x19a/0x210 [ 1922.777023] do_syscall_64+0x33/0x40 [ 1922.777333] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1922.777792] RIP: 0033:0x7f430e1be8d7 [ 1922.778111] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1922.779665] RSP: 002b:00007f430b733f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1922.780319] RAX: ffffffffffffffda RBX: 00007f430e208970 RCX: 00007f430e1be8d7 [ 1922.780921] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1922.781532] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1922.782135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1922.782741] R13: 0000000000000004 R14: 0000000020000058 R15: 0000000000000001 03:17:24 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xd4790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 1923.055314] FAULT_INJECTION: forcing a failure. [ 1923.055314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1923.056371] CPU: 1 PID: 44519 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 1923.056938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1923.057625] Call Trace: [ 1923.057856] dump_stack+0x107/0x167 [ 1923.058162] should_fail.cold+0x5/0xa [ 1923.058480] _copy_to_iter+0x264/0x12d0 [ 1923.058815] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1923.059258] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1923.059711] ? _copy_from_iter_nocache+0xd60/0xd60 [ 1923.060118] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1923.060588] ? __virt_addr_valid+0x128/0x350 [ 1923.060953] ? __check_object_size+0x319/0x440 [ 1923.061348] simple_copy_to_iter+0x4c/0x70 [ 1923.061718] __skb_datagram_iter+0x4f7/0x880 [ 1923.062091] ? zerocopy_sg_from_iter+0x110/0x110 [ 1923.062495] skb_copy_datagram_iter+0x88/0x190 [ 1923.062874] tcp_recvmsg+0x13b5/0x2930 [ 1923.063206] ? tcp_splice_read+0x8c0/0x8c0 [ 1923.063568] ? sock_has_perm+0x1ea/0x280 [ 1923.063908] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1923.064356] ? mark_lock+0xf5/0x2df0 [ 1923.064665] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1923.065095] ? tcp_splice_read+0x8c0/0x8c0 [ 1923.065456] inet6_recvmsg+0x13b/0x6e0 [ 1923.065778] ? inet6_bind+0x120/0x120 [ 1923.066096] ? security_socket_recvmsg+0x95/0xc0 [ 1923.066497] ? inet6_bind+0x120/0x120 [ 1923.066826] sock_recvmsg+0xff/0x180 [ 1923.067141] __sys_recvfrom+0x1be/0x2f0 [ 1923.067504] ? __ia32_sys_send+0x100/0x100 [ 1923.067875] ? lock_downgrade+0x6d0/0x6d0 [ 1923.068239] ? vfs_write+0x354/0xa70 [ 1923.068548] ? wait_for_completion_io+0x270/0x270 [ 1923.068961] ? rcu_read_lock_any_held+0x75/0xa0 [ 1923.069355] ? vfs_write+0x354/0xa70 [ 1923.069689] ? fput_many+0x2f/0x1a0 [ 1923.069998] ? ksys_write+0x1a9/0x260 [ 1923.070325] ? __ia32_sys_read+0xb0/0xb0 [ 1923.070667] __x64_sys_recvfrom+0xdd/0x1b0 [ 1923.071023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1923.071463] do_syscall_64+0x33/0x40 [ 1923.071778] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1923.072199] RIP: 0033:0x7f2e54dfeb19 [ 1923.072527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1923.074058] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1923.074692] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 1923.075272] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 1923.075853] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 1923.076431] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 1923.077017] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:17:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:17:37 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:17:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 13) 03:17:37 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_msfilter(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000000c0)=""/31, 0x1f}], 0x2, 0x0, 0x9) 03:17:37 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) (fail_nth: 28) 03:17:37 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xd5790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:17:37 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:17:37 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 1935.784958] FAULT_INJECTION: forcing a failure. [ 1935.784958] name failslab, interval 1, probability 0, space 0, times 0 [ 1935.786179] CPU: 1 PID: 44641 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1935.786895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1935.787746] Call Trace: [ 1935.788022] dump_stack+0x107/0x167 [ 1935.788405] should_fail.cold+0x5/0xa [ 1935.788803] ? create_object.isra.0+0x3a/0xa20 [ 1935.789281] should_failslab+0x5/0x20 [ 1935.789687] kmem_cache_alloc+0x5b/0x310 [ 1935.790107] create_object.isra.0+0x3a/0xa20 [ 1935.790557] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1935.791106] kmem_cache_alloc+0x159/0x310 [ 1935.791553] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1935.792129] idr_get_free+0x4b5/0x8f0 [ 1935.792535] idr_alloc_u32+0x170/0x2d0 [ 1935.792935] ? __fprop_inc_percpu_max+0x130/0x130 [ 1935.793433] ? lock_acquire+0x197/0x470 [ 1935.793849] ? __kernfs_new_node+0xff/0x860 [ 1935.794298] idr_alloc_cyclic+0x102/0x230 [ 1935.794721] ? idr_alloc+0x130/0x130 [ 1935.795104] ? rwlock_bug.part.0+0x90/0x90 [ 1935.795548] __kernfs_new_node+0x117/0x860 [ 1935.795982] ? lock_chain_count+0x20/0x20 [ 1935.796412] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1935.796895] ? update_load_avg+0x162/0x1870 [ 1935.797336] ? find_held_lock+0x2c/0x110 [ 1935.797761] ? set_user_nice.part.0+0x2fd/0x760 [ 1935.798241] kernfs_create_dir_ns+0x9c/0x230 [ 1935.798698] internal_create_group+0x793/0xb30 [ 1935.799169] ? set_user_nice.part.0+0x2fd/0x760 [ 1935.799648] ? sysfs_remove_group+0x170/0x170 [ 1935.800106] ? lockdep_init_map_type+0x2c7/0x780 [ 1935.800600] ? blk_queue_flag_set+0x22/0x30 [ 1935.801042] ? __loop_update_dio+0x2d2/0x690 [ 1935.801501] loop_configure+0x954/0x1480 03:17:37 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 1935.801940] lo_ioctl+0xa72/0x1760 [ 1935.802497] ? avc_has_extended_perms+0x7f1/0xf40 [ 1935.802989] ? loop_set_status_old+0x250/0x250 [ 1935.803458] ? avc_ss_reset+0x180/0x180 [ 1935.803886] ? lock_acquire+0x197/0x470 [ 1935.804296] ? find_held_lock+0x2c/0x110 [ 1935.804714] ? __lock_acquire+0xbb1/0x5b00 [ 1935.805185] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1935.805735] ? generic_block_fiemap+0x60/0x60 [ 1935.806197] ? loop_set_status_old+0x250/0x250 [ 1935.806667] blkdev_ioctl+0x291/0x710 [ 1935.807058] ? blkdev_common_ioctl+0x1870/0x1870 [ 1935.807543] ? selinux_file_ioctl+0xb6/0x270 [ 1935.807994] block_ioctl+0xf9/0x140 [ 1935.808371] ? blkdev_read_iter+0x1c0/0x1c0 [ 1935.808805] __x64_sys_ioctl+0x19a/0x210 [ 1935.809236] do_syscall_64+0x33/0x40 [ 1935.809633] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1935.810163] RIP: 0033:0x7f430e1be8d7 [ 1935.810552] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1935.812428] RSP: 002b:00007f430b733f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1935.813211] RAX: ffffffffffffffda RBX: 00007f430e208970 RCX: 00007f430e1be8d7 [ 1935.813947] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1935.814675] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1935.815404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1935.816135] R13: 0000000000000004 R14: 0000000020000058 R15: 0000000000000001 03:17:37 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f00000007c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x70, 0x0]}}]}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/94, 0x5e}], 0x1, 0xfffffffd, 0x0) getdents(0xffffffffffffff9c, &(0x7f0000000040)=""/74, 0x4a) pipe(&(0x7f0000000180)) 03:17:38 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:17:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) (fail_nth: 29) 03:17:38 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xd6790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:17:38 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 1936.076663] FAULT_INJECTION: forcing a failure. [ 1936.076663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1936.077711] CPU: 1 PID: 44680 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 1936.078298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1936.078984] Call Trace: [ 1936.079213] dump_stack+0x107/0x167 [ 1936.079527] should_fail.cold+0x5/0xa [ 1936.079847] _copy_to_iter+0x264/0x12d0 [ 1936.080181] ? sk_wait_data+0x353/0x4d0 [ 1936.080515] ? _copy_from_iter_nocache+0xd60/0xd60 [ 1936.080920] ? mark_held_locks+0x9e/0xe0 [ 1936.081257] ? __virt_addr_valid+0x128/0x350 [ 1936.081630] ? __check_object_size+0x319/0x440 [ 1936.082011] simple_copy_to_iter+0x4c/0x70 [ 1936.082361] __skb_datagram_iter+0x4f7/0x880 [ 1936.082732] ? zerocopy_sg_from_iter+0x110/0x110 [ 1936.083126] skb_copy_datagram_iter+0x88/0x190 [ 1936.083510] tcp_recvmsg+0x13b5/0x2930 [ 1936.083844] ? tcp_splice_read+0x8c0/0x8c0 [ 1936.084196] ? sock_has_perm+0x1ea/0x280 [ 1936.084537] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1936.084962] ? lock_downgrade+0x6d0/0x6d0 [ 1936.085309] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1936.085759] ? tcp_splice_read+0x8c0/0x8c0 [ 1936.086113] inet6_recvmsg+0x13b/0x6e0 [ 1936.086437] ? inet6_bind+0x120/0x120 [ 1936.086749] ? security_socket_recvmsg+0x95/0xc0 [ 1936.087138] ? inet6_bind+0x120/0x120 [ 1936.087455] sock_recvmsg+0xff/0x180 [ 1936.087762] __sys_recvfrom+0x1be/0x2f0 [ 1936.088089] ? __ia32_sys_send+0x100/0x100 [ 1936.088441] ? lock_downgrade+0x6d0/0x6d0 [ 1936.088800] ? wait_for_completion_io+0x270/0x270 [ 1936.089203] ? rcu_read_lock_any_held+0x75/0xa0 [ 1936.089585] ? vfs_write+0x354/0xa70 [ 1936.089920] ? fput_many+0x2f/0x1a0 [ 1936.090220] ? ksys_write+0x1a9/0x260 [ 1936.090540] ? __ia32_sys_read+0xb0/0xb0 [ 1936.090878] __x64_sys_recvfrom+0xdd/0x1b0 [ 1936.091226] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1936.091658] do_syscall_64+0x33/0x40 [ 1936.091968] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1936.092395] RIP: 0033:0x7f2e54dfeb19 [ 1936.092706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1936.094232] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1936.094851] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 1936.095448] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 1936.096163] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 1936.096866] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 1936.097455] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:17:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:17:38 executing program 6: r0 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) mq_timedsend(r0, &(0x7f0000001e00)="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", 0x1000, 0x5, &(0x7f0000000000)={0x0, 0x3938700}) mq_timedsend(r0, &(0x7f0000001200), 0x0, 0x3, &(0x7f00000012c0)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000100)={r5, 0x1000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {r13}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000047340)={0x1f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r15}], 0x52, "716c5fee927457"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000040)={{r5, 0x7fffffff, 0x8, 0x0, 0x81, 0x80, 0x9, 0x7, 0x3f, 0x1, 0xbde, 0x7fffffff, 0xeab, 0xe9b}}) r16 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fallocate(r16, 0x61, 0x4, 0x7c2) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r16, 0x10000000) 03:17:55 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:17:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:17:55 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:17:55 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xd7790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:17:55 executing program 6: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) sendfile(r0, r1, &(0x7f0000000180)=0x81, 0xe559) 03:17:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:17:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 14) 03:17:55 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:17:55 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xd8790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:17:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:17:55 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000001c0)=r0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000280)={{}, r0, 0x8, @unused=[0x7fff, 0x6, 0xb04, 0x72], @name="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"}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16=r2, @ANYBLOB="421930abd694b7b8652b0fe674d4652b63ae0c2441117f7e634560c9468180f91ed86f4a20c5133bd6913e000078c2c1d6f599e2b31a63d8b724abab023c6ae37bfddf8acd82e4722fe6dcffd0e4f85668c65a91", @ANYRESHEX=r1, @ANYBLOB=',debug=0x0000000000000000,\x00']) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) read(r4, &(0x7f0000000100)=""/101, 0x65) 03:17:55 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xd9790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 1953.175508] 9pnet: Insufficient options for proto=fd 03:17:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000004, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:17:55 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffd) chdir(&(0x7f0000000040)='./file0\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x4000, 0x0) sendfile(r2, r3, 0x0, 0x100000001) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r4, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, 0xffffffffffffffff) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000300)) copy_file_range(0xffffffffffffffff, &(0x7f0000000200)=0x7, r0, &(0x7f0000000240)=0x2, 0x40, 0x0) [ 1953.278073] FAULT_INJECTION: forcing a failure. [ 1953.278073] name failslab, interval 1, probability 0, space 0, times 0 [ 1953.279870] CPU: 0 PID: 45006 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 1953.280762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1953.281980] Call Trace: [ 1953.282343] dump_stack+0x107/0x167 [ 1953.282849] should_fail.cold+0x5/0xa [ 1953.283366] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1953.284078] ? __alloc_skb+0x6d/0x5b0 [ 1953.284598] should_failslab+0x5/0x20 [ 1953.285117] kmem_cache_alloc_node+0x55/0x330 [ 1953.285725] ? kmem_cache_free+0xa7/0x2d0 [ 1953.286311] __alloc_skb+0x6d/0x5b0 [ 1953.286815] __tcp_send_ack.part.0+0x67/0x650 [ 1953.287429] ? kmem_cache_free+0x249/0x2d0 [ 1953.288011] tcp_send_ack+0x7d/0xa0 [ 1953.288511] tcp_cleanup_rbuf+0x468/0x5a0 [ 1953.289072] tcp_recvmsg+0xb85/0x2930 [ 1953.289601] ? tcp_splice_read+0x8c0/0x8c0 [ 1953.290202] ? sock_has_perm+0x1ea/0x280 [ 1953.290785] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1953.291499] ? lock_downgrade+0x6d0/0x6d0 [ 1953.292064] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1953.292776] ? tcp_splice_read+0x8c0/0x8c0 [ 1953.293351] inet6_recvmsg+0x13b/0x6e0 [ 1953.293880] ? inet6_bind+0x120/0x120 [ 1953.294399] ? security_socket_recvmsg+0x95/0xc0 [ 1953.295050] ? inet6_bind+0x120/0x120 [ 1953.295564] sock_recvmsg+0xff/0x180 [ 1953.296067] __sys_recvfrom+0x1be/0x2f0 [ 1953.296606] ? __ia32_sys_send+0x100/0x100 [ 1953.297183] ? lock_downgrade+0x6d0/0x6d0 [ 1953.297767] ? wait_for_completion_io+0x270/0x270 [ 1953.298432] ? rcu_read_lock_any_held+0x75/0xa0 [ 1953.299070] ? vfs_write+0x354/0xa70 [ 1953.299578] ? fput_many+0x2f/0x1a0 [ 1953.300073] ? ksys_write+0x1a9/0x260 [ 1953.300598] ? __ia32_sys_read+0xb0/0xb0 [ 1953.301165] __x64_sys_recvfrom+0xdd/0x1b0 [ 1953.301746] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1953.302448] do_syscall_64+0x33/0x40 [ 1953.302955] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1953.303649] RIP: 0033:0x7f2e54dfeb19 [ 1953.304158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1953.306624] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1953.307658] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 1953.308622] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 1953.309593] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 1953.310569] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 1953.311523] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:17:55 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xda790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:17:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000005, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:17:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000006, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:17:55 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xdb790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:17:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:17:55 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffd) chdir(&(0x7f0000000040)='./file0\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x4000, 0x0) sendfile(r2, r3, 0x0, 0x100000001) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r4, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, 0xffffffffffffffff) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000300)) copy_file_range(0xffffffffffffffff, &(0x7f0000000200)=0x7, r0, &(0x7f0000000240)=0x2, 0x40, 0x0) 03:17:55 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:17:55 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:17:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 15) [ 1954.224424] FAULT_INJECTION: forcing a failure. [ 1954.224424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1954.225599] CPU: 0 PID: 45464 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 1954.226223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1954.226978] Call Trace: [ 1954.227218] dump_stack+0x107/0x167 [ 1954.227572] should_fail.cold+0x5/0xa [ 1954.227913] _copy_to_iter+0x264/0x12d0 [ 1954.228273] ? _copy_from_iter_nocache+0xd60/0xd60 [ 1954.228729] ? __check_object_size+0x25a/0x440 [ 1954.229156] ? __virt_addr_valid+0x128/0x350 [ 1954.229579] ? __check_object_size+0x319/0x440 [ 1954.229998] simple_copy_to_iter+0x4c/0x70 [ 1954.230403] __skb_datagram_iter+0x4f7/0x880 [ 1954.230822] ? zerocopy_sg_from_iter+0x110/0x110 [ 1954.231257] skb_copy_datagram_iter+0x88/0x190 [ 1954.231720] tcp_recvmsg+0x13b5/0x2930 [ 1954.232077] ? tcp_splice_read+0x8c0/0x8c0 [ 1954.232457] ? sock_has_perm+0x7f/0x280 [ 1954.232813] ? sock_has_perm+0xcb/0x280 [ 1954.233173] ? sock_has_perm+0x1ea/0x280 [ 1954.233542] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1954.234039] ? tcp_splice_read+0x8c0/0x8c0 [ 1954.234418] inet6_recvmsg+0x13b/0x6e0 [ 1954.234782] ? inet6_bind+0x120/0x120 [ 1954.235134] ? security_socket_recvmsg+0x95/0xc0 [ 1954.235558] ? inet6_bind+0x120/0x120 [ 1954.235893] sock_recvmsg+0xff/0x180 [ 1954.236227] __sys_recvfrom+0x1be/0x2f0 [ 1954.236580] ? __ia32_sys_send+0x100/0x100 [ 1954.236972] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1954.237359] ? clockevents_program_event+0x131/0x360 [ 1954.237816] ? tick_program_event+0xa8/0x140 [ 1954.238213] ? hrtimer_interrupt+0x771/0x9b0 [ 1954.238617] __x64_sys_recvfrom+0xdd/0x1b0 [ 1954.239015] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1954.239483] do_syscall_64+0x33/0x40 [ 1954.239811] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1954.240273] RIP: 0033:0x7f2e54dfeb19 [ 1954.240606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1954.242237] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1954.242913] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 1954.243550] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 1954.244180] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 1954.244811] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 1954.245451] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:18:09 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xdc790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:18:09 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:18:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 16) 03:18:09 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:18:09 executing program 6: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1b) syncfs(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x2082, 0x61) lseek(r3, 0x4b, 0x2) r4 = syz_open_dev$hidraw(&(0x7f0000000280), 0x80000001, 0x2cc101) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="400000000000000002000000000000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00"/28, @ANYRES32, @ANYBLOB="000000000000008000"/28, @ANYRES32, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="0000000000010000000000000000000000000000000000000000000034f437fa83ed932132209b782166e2067e14514684f3eb13d8f9bbad75b51732a0948a334839ad6808f2b15779e623134f049546ef9f754e39813caa7a82d49e4aafdae0283617191f2b22a4cb11a3d0ee46575982c545138daddefe200a90448d038a22e6a2ff002b6c339e37b8149e00822faf0b27b1634826da3ab8dcd7fd22d0c133a143ac2586217cb1a6bda8f9e0f3306a9e63918eeca05fc0d5a3a7ddfd41fb75d0c5d18cd9c74b109b81d47d05c3c327e726316fe8ad63f7704cd894686ca24146", @ANYRES32=r0, @ANYBLOB="000000000400"/28, @ANYRES32=r4, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32=r2, @ANYBLOB='\x00'/28]) fallocate(r2, 0x8, 0x0, 0x8000) write$9p(r2, &(0x7f00000000c0)="0fb865562069ab2f32beb83e263962827b00d7d8b791e504b65c5ed26e6688d67a9796c1aedca0de65d21b4796fd1b3df0ccedf9739e29f6b965de85433255da7945b7a842ba5fa3dbe88cd26fc9b1b807bc2d59e5a9f2c2bdaccdb839190141ba0151232669cb02b3b076251c024d73f501a54d959dac7cdb3fc324ab47f2a3e1ef12691eac5cab96860e948e", 0x8d) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x60800) fallocate(r5, 0x28, 0x6, 0x400) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {0x1c4}}, './file0\x00'}) ioctl$HIDIOCGPHYS(r7, 0x80404812, &(0x7f0000000200)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r6) 03:18:09 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:18:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:18:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000007, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:18:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000008, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 1967.683877] FAULT_INJECTION: forcing a failure. [ 1967.683877] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.685114] CPU: 1 PID: 45525 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 1967.685806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1967.686642] Call Trace: [ 1967.686918] dump_stack+0x107/0x167 [ 1967.687293] should_fail.cold+0x5/0xa [ 1967.687683] ? __alloc_skb+0x6d/0x5b0 [ 1967.688066] should_failslab+0x5/0x20 [ 1967.688457] kmem_cache_alloc_node+0x55/0x330 [ 1967.688908] ? tcp_trim_head+0x470/0x470 [ 1967.689314] __alloc_skb+0x6d/0x5b0 [ 1967.689697] tcp_collapse+0x42c/0xf20 [ 1967.690100] ? tcp_queue_rcv+0x7c0/0x7c0 [ 1967.690513] ? tcp_xmit_retransmit_queue+0x57/0x70 [ 1967.691002] ? tcp_xmit_recovery+0x86/0x180 [ 1967.691435] ? tcp_ack+0xeef/0x5690 [ 1967.691816] tcp_try_rmem_schedule+0xa6c/0x1690 [ 1967.692298] tcp_data_queue+0x16ba/0x47f0 [ 1967.692732] ? tcp_data_ready+0x500/0x500 [ 1967.693142] ? tcp_urg.part.0+0x157/0x2e0 [ 1967.693562] ? tcp_try_keep_open+0x2f0/0x2f0 [ 1967.694023] ? tcp_validate_incoming+0x431/0x16a0 [ 1967.694506] ? tcp_check_urg.isra.0+0x1db/0x720 [ 1967.694983] tcp_rcv_established+0x868/0x1e30 [ 1967.695441] ? tcp_check_space+0x6c0/0x6c0 [ 1967.695873] tcp_v6_do_rcv+0x7b3/0x1520 [ 1967.696287] __release_sock+0x139/0x3b0 [ 1967.696699] release_sock+0x54/0x1b0 [ 1967.697077] sk_wait_data+0x1a7/0x4d0 [ 1967.697468] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1967.698018] ? sock_set_mark+0x130/0x130 [ 1967.698442] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 1967.698949] ? kfree_skbmem+0x8b/0x1b0 [ 1967.699343] ? kfree_skbmem+0x91/0x1b0 [ 1967.699737] tcp_recvmsg+0x17b2/0x2930 [ 1967.700143] ? tcp_splice_read+0x8c0/0x8c0 [ 1967.700588] ? sock_has_perm+0x1ea/0x280 [ 1967.700993] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1967.701517] ? lock_downgrade+0x6d0/0x6d0 [ 1967.701942] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1967.702483] ? tcp_splice_read+0x8c0/0x8c0 [ 1967.702918] inet6_recvmsg+0x13b/0x6e0 [ 1967.703314] ? inet6_bind+0x120/0x120 [ 1967.703706] ? security_socket_recvmsg+0x95/0xc0 [ 1967.704181] ? inet6_bind+0x120/0x120 [ 1967.704569] sock_recvmsg+0xff/0x180 [ 1967.704948] __sys_recvfrom+0x1be/0x2f0 [ 1967.705352] ? __ia32_sys_send+0x100/0x100 [ 1967.705779] ? lock_downgrade+0x6d0/0x6d0 [ 1967.706232] ? wait_for_completion_io+0x270/0x270 [ 1967.706723] ? rcu_read_lock_any_held+0x75/0xa0 [ 1967.707199] ? vfs_write+0x354/0xa70 [ 1967.707581] ? fput_many+0x2f/0x1a0 [ 1967.707955] ? ksys_write+0x1a9/0x260 [ 1967.708346] ? __ia32_sys_read+0xb0/0xb0 [ 1967.708761] __x64_sys_recvfrom+0xdd/0x1b0 [ 1967.709189] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1967.709705] do_syscall_64+0x33/0x40 [ 1967.710095] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1967.710620] RIP: 0033:0x7f2e54dfeb19 [ 1967.711004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1967.712843] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1967.713619] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 1967.714350] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 1967.715074] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 1967.715794] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 1967.716502] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:18:24 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0/file0\x00'}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x5}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x911802, 0x140) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) r3 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) mq_timedsend(r3, &(0x7f0000001e00)="3cd52ed97c9e213909d730166b17123f3294a3353d43c2bda33f8b46124feb3e574cb78ff55dae93c1d80f8b1b571caa5d0f953fdc20af7c2907f40c853111e5a4a6405dfd6510e2573f0cd5a14f722a746315bf5955d6443a167b62e37e70e67059a451add17b0ba3a4967e37a184c25fd56c25f32d2c08713830771e190d3e72e360fbae6eb7f69da7ae1b7575584eb3aad405c2e0cecf7c57c725e35199b38412b21fb229249cb5214590ea9c200b689ed99433fbbb389404f04d726fe19ef657f8896380c769f15ede2ebc816773d5730db7acb1828fbcdffc4da713e0944bca7028c47238c1aace7879fca945a836e4ff365b155de4a6b5e69df15c57c8c84a27359b026401b2d2ebb22fc4727115b803cbed672e1c10421e53aecb9848432f39231a6fe45af05a49d7f66593d188b01763da10fbe076c0103b005492008157072857ecefae4dfd561229bd8ecf19e938d25a4315e343c5ffc67c1810af17fff3e930e390dc021b8a020e9ad5750cbdb6ac2406d580f35c6776feba23704f457eb3c9e481a38ae02519b5561493b3a5a22682f0622f55b91bf3fe3b6eeb0b411767b39cf41b6ea7f7606bbbf59f038ed99313e9185bafa0f1fb0d7f8f854025afe6eb498d49d00f869ed3d4abccfb90d70f1dd88a92a1f6c2a1f62238ff8733e3b25225fe919598664429606c6ba859544fe0de3a9f18ed8fdd5e9ce15ab80c870a454b550e5fe805396bf4ed72b627314fad05b74a500135c9bb1b297b170356d42c9983c3275dc8c95a5a198f3b896c712d4c44d66ee10f29d4d71df5484c473cdcd107d66ded8e5219a066b00f45faca7ccbde009031f583819cffcba547c3b5707c7c1eba73dc6ade8f584244ba35302df2a0341c8e629d52fad82cc1c34dac09d39a975902e883ce1b648080e5855ad37961abaa7eecab4ac63cb839f4039f8b93d2ba6e618ebc437166e24e210171bc8ae12f31e90adadfdba265f9a8df86648ff4bcff451f289c9142ef5bac4ba3131852ff820087a5b7e1131eb05c8c857dd4cf2839501138174f70eca95c39a59220f47be95cbe4996c214f17e5a790679057bf0c05e7d79797fa74af891a0bb050183e9124f3677a94c92e3caaeb095d0746fa8a82e30f14b228fffee24ba0385ae2940a223aa6fdd3bee655aabb131e4660eefa4e65a0cd2197f54d94783a2513ab6ae8c548b7fae70692ffa367a95cde0cd90d37be42547f30d1583a913b11c9f998d60d8c78a3677d79c717dde50a0124d918e66655902e6cb60ddd82727bc05b31057693ee9d7601be6d8870edc47c328afa800911568d99655a271c65de3a07616806e280bd453217ee2420b32544c67e34bbcec1874b450af23af54048d3a10e71967bc1ee3c0029235d95f158895bbdddfa81a3cfbcc74c7c352820f75e00324e154441074853b7c2dc1c3ed42873c6323e0bd29058b62187f57ee8def92612a91b1598af90904e770a8788c05934b54f998ed0a4b54198e74a1bdcd6e5a07109f6bd0271384211633d2d70c28843fbed80968d3cf49a697bfaffb92101e0626dc34c4b9a8b47438606152c9eea6481597918ef7739be21f562c86289b842b1d9208459f41716f2518da7d3f4ba062c0ea28a221e44f071325deef0c9ce5e8bb729e8f393020db13ad241503f9c4dc21fee5bc58893e112a2bd2528aa825c3b8e19d8312b268a43c9c662737da60bf318a5cd9069a2d96653818733825f5808371ad593f124ce11272705b5dd827d269ea01ea8a3948418278ba34338fea40665bcb5365033785adbbc7f20ea2489a728670108781da688a9d2f327f7723b76e4d2dba9c05a8f15bc05fdd521ce44e606fb0daf61c3cf96094bc4c8ca55892cd55803da5ec5f72c9ea01273ba23d834061b1a4e7778470cb726d78692d1d00291b9753fe96e43b24f239b575978b0fc6855aae3e384fff6dca011d58ca718f5a64ce083744057fadce07c1569c0a2dd34cc2f990c2d0705d4ad2dd03ed74e005e495987f5dd3b561bfd610d372abd48da2cdaa6253b074b55a30c7663daf7268768a656ac8f36d0c61a6671f6b75b69634c5c3cb06bf7d28e5b01743d673ed200a51e70f7d72c908e21769144a72870fead7075c25ddadbfeb9a9818638c3829d329eac2eb542f190986977bf6b79ae967ede1bc3e998d271f8225d5ae195e1be0ae7be5dba2584bcda86187ccde07022a3a462f505557140b14646b8d2ccb67c82bcfbeb71ece2f3af3d2d522613571766fbc39716026361c6d109d1ca6616495a5c1186cb2009e8d365abaf16a81230ad8c05889f9fcbb7ce0c6a507f9b5a078dfe5a7483d376f16428d23eb15c688f252d8548b5d94f34f8cd430b1a31bcc3e1ce90d14e3e7a33021df06882d32b90e4c6968c8046a7410bb6920f278d1b1c166875217c8e8d417adf9b50c85c509fa0581d906ab12c339e7ce03a49693489e7965043c75e5950363f062e43933d848ac73cb5f8585eee7d22305f9332df9ad7a11377c01f15ae3009d92dc3fae370f8f817400fd7f5aeb5b103fa1ba707b86ebff9324e2d52a8d46baff356e4be977bab515127107916440e1867c4d6279b08479597b3268c98566723c935f96b569b2b60807f8a046ea6e2761c062c7913dc9d4bf71f60ee2fd0e7bb3e5b718e8d4a62c43f2d53d9ecdbfb6d1dea8d8ce51c574c5007a55bd1a5933e3895659255153d501e3419ecb2c63cf337b7de31b0830f7c5b4fe267ef576c7776d34e47c7ee204609284af5a10a88b0d2488574d50614b004c04285cadc63001ac023f570b6fa4c0a21635b2d53405c4279ce02ad7033cc5df8559e1cafb3e6b0dd169df0a980a27d5acd32f68e166ddd6c43e186de12bd09f14e644c5f7a696b1cec0cfc757dc64e8f0b64c8bab66db414fa724c175fa49676d0ae100537b7cb55751a54149b60653a20bbbdaa58a9172228e553a5ec93387db79eaa9cd542cf8035d4c50b7e09e3728f153641e7fd5c9cb8969df5374a25d3611aacc81ea1d195a4b2f7e1f861259fe1d2d6422e32acd44d2f996508c07e54b200a472e4782b0e5aa030898f4c51b578f60d17fc5c01055be225120118c20b171d8bffe38f194b0ef598ac5696825da3442eb0513e31dcf997a213ffb711392223c906b637c77a5ac612611b9d4f949bfa43d746b38fa61a2b736f116edfeda864cf56357f0d9ed25d27cb057c8227379a86d9f2bf00f289ea8fcf4a61f0bbc50045047e7ef0b097e4c65d749f4d40a89f6ff2e17990e837f81364faaf32cd0c5cdf9846173610759a22a424e00f57a3143c8cf561f12489ff01fa64ef27c39370e1eca076ecaa6fbd701ad2a29b80cca60bdccd34e5f26fd0ac661ef5da02883d55401b05b15770399f960c8749fdc90fc06ddc18bd88ad6d21a7db3aaf52e28ab741f211898192d4ab34b659e79eddd844a28b5c3d0125f5b8781f270f7832114c744bc5820a60b28d408291884c0f85b47e660f8545c412c235e85da5e33bd315067b9f89a36b76e204e82ee465031f0fc463d42254f73fe269bd7ba4f4f06dafe7057f58f5387f40b0bf3fa2e9ca6b2afc496d26ebd092e0373750cc649f16e1e35179825f3a51d8b015539a4ba1661addc540c776257ceadb0d795f8fd6737bc302fc39b4dda8bf0db0f4d0a62839b02ff488810413131a566082d864e5bfc3e073a63f17b28aa8929cd239f50689fef85a8de3308be69b82d7eca3d9e5190586362841d1ff6c562a3c6d74e57750e80baddf2aabd9cc40ff3aa30e2a9be9150815977e3292f171cd184074d00e90251ffb0943b276e67a87d7eed7af3d886519f54aec72d5eb01268202999e8d78532461a8524aa0fea7c49aa864f956bc4dd31047a529f8bbf4ba971ded87c6121533491863d6d2f4dbeac566839675a781f43c9ed27d0527c961a60f212deafd75ac331674b4e76d9151c9813aca07565b1e8b52a835d1693f36cdb9be6fa8cdd7431183467be6dc75c867268cbc7f7a6cd1059ccb123c47de06785d1deb8a2a4ab286929253e05107d07c80d2790af78fe59f022763514ade2fd2f2aa0fff6c99c6af7498c9024259f2f49d8e0f054b9e7d774b4e7b1552340012153d4c79451be6ffc71079da12c140d97f3a813256e93e22e3ff9045fc6075df39fab13ed8661a6a06bc083194ebe6bc40040840f08cd586d7a3a36fe7015d3a636f94553955325eeb3d5c538251202c6c1521cbe2b87e3a22ffd2744094a44be4a63e09271a29fbddc042872a53dfe54670d0028d640754c2aa06ab7e299244bcf5517eca5a0d50799ff872bdafe888a587633f3771c161c520e56764ae13e351dd4a4fbbc4c12e00986c58a3af279473acfa42cdd442d2ab36a1f2c8e15df74b9b9fdb7f4ed0a527e1b2522ea18b822d420e493a114031ef87dad32101c7002f7aacd435e3c952c5edf7f6317215709f673926e15feb3021c3d31adaf27f468ed93f65201963ce3ec173f8003d417961a503bfe5181ed3397bfe1299107235aa1562baf276ddc6b3e802a35042d0f8a79ee06102c8e9b0a92e7e92da2788c8e6450a924fe8d7637a183f9a0b69e949ee3d54bd5abf9b6a90bd3cb8a9bc9d8d91418c72b3fe665d54dec99eb53fcf474a0f42171e2f3fb16a00633408f77c205a168f70379d5f10988510ed2605f1811c5c22d9e3e44f483cfc65e373e431eb224414db926be369c40fd1e40f2938cc484b33f69d8ee518c33a91284d6e3635720b731c68011d6b467219a6deb3b6c47ae211375d738b6f77a4f6ea2b80579aa34b3d0bced65466b6946f386482db484af971f33f546f2c0b0bcf6135784fcf3f0f1006fe34617e86adbabf80935995d34b48b9d1f12ef089510dbbd616a59e875d3f3e0aa7aea1758d6c5f2a699d031823205a4ad815efee17395d817015c392a79e4d0ac9686e596220b0ecdd2c1646e54a5630cd6022b1f52d81de0b7c0e772ab6a9c931bf527b0a874f79fa860cc82283d36be2114a4ce514b60f2b1ef941fb4e1a8d2899467d6231f82fefa3bc2462677ffd1d2436b44bf4f7fe734064f0a0b16c3f16332a85895ff84494009e00440ff7940096065996741278b3652d6286545b10c77ab2e905c1bb8c2d538ca6521df0707f55e0054d2d87d060f863c9cc50db915ac404ff6017a48a04190d12168a647d803819879c0bc3e688663d1585493dc800727fb4775473005d0cc37c3941dddb31071cb5389083a0ee8aa5317326c7f8a29646e24bb32c6d6198d2e095a6694f5ad98e3940608d60e169cc7dc507564e043aebdde61d7adf96f0a52adbde8f9ce5f99a323c8cfbb35c23baef865a6a6f949b9ee425ed2dbf1f74eda38aea9bb1e814f8de792d106ffc2030223aed765a49a8c5225f986508d023b698226c40e366e93264fbf51c2fa8a889f13ef4b768c480ae4ef3d5f061d7cd2ea2456e0c2bca80c3e7b23209a4d221a1df8cc6b3e5fa6dead523253952380abf2ca49d628a4078e4c34c49caa2f84dbd9325c2459dcf8ffe65163a438dc1f204cfeca634cfd0a2f0f165539b88bbff3b4136f21cd050ea0c2959701aed2f44be88498bd6ccad2935aa459f91e146928eceef45a9dee8ac5d9ecedf6f3757a3058742aa743b74020dfbd925deacc4fc4c1e1d91653f93b190229888c5103c29a4b5ffc836babd2035e79d5742e32f663fa44ad2ccb40e547037ecfc1d8f1cf1f70638302c6b8e8524ffe1e1b33464ae0c4ad2b8f53350998a864ac84789fd0f48534295285e6", 0x1000, 0x5, &(0x7f0000000000)={0x0, 0x3938700}) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x10041, 0x14) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x7f, "9656c75f04ba4d"}) lseek(r1, 0x0, 0x2) r8 = timerfd_create(0x7, 0x80800) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000002e00)={r7, 0x0, "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", "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"}) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r9, 0x0, r1, 0x0, 0x200f5ef, 0x0) 03:18:24 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xdd790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:18:24 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:18:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 17) 03:18:24 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:18:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 03:18:24 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:18:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000009, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 1983.161010] FAULT_INJECTION: forcing a failure. [ 1983.161010] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.162150] CPU: 1 PID: 45690 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 1983.162829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1983.163617] Call Trace: [ 1983.163879] dump_stack+0x107/0x167 [ 1983.164237] should_fail.cold+0x5/0xa [ 1983.164607] ? create_object.isra.0+0x3a/0xa20 [ 1983.165051] should_failslab+0x5/0x20 [ 1983.165421] kmem_cache_alloc+0x5b/0x310 [ 1983.165816] create_object.isra.0+0x3a/0xa20 [ 1983.166251] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1983.166744] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1983.167238] ? __tcp_send_ack.part.0+0x67/0x650 [ 1983.167690] __alloc_skb+0xb1/0x5b0 [ 1983.168052] __tcp_send_ack.part.0+0x67/0x650 [ 1983.168485] ? kmem_cache_free+0x249/0x2d0 [ 1983.168895] tcp_send_ack+0x7d/0xa0 [ 1983.169254] tcp_cleanup_rbuf+0x468/0x5a0 [ 1983.169658] tcp_recvmsg+0xb85/0x2930 [ 1983.170048] ? tcp_splice_read+0x8c0/0x8c0 [ 1983.170482] ? sock_has_perm+0x1ea/0x280 [ 1983.170876] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1983.171381] ? lock_downgrade+0x6d0/0x6d0 [ 1983.171790] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1983.172300] ? tcp_splice_read+0x8c0/0x8c0 [ 1983.172712] inet6_recvmsg+0x13b/0x6e0 [ 1983.173091] ? inet6_bind+0x120/0x120 [ 1983.173468] ? security_socket_recvmsg+0x95/0xc0 [ 1983.173928] ? inet6_bind+0x120/0x120 [ 1983.174321] sock_recvmsg+0xff/0x180 [ 1983.174685] __sys_recvfrom+0x1be/0x2f0 [ 1983.175079] ? __ia32_sys_send+0x100/0x100 [ 1983.175488] ? lock_downgrade+0x6d0/0x6d0 [ 1983.175914] ? wait_for_completion_io+0x270/0x270 [ 1983.176388] ? rcu_read_lock_any_held+0x75/0xa0 [ 1983.176840] ? vfs_write+0x354/0xa70 [ 1983.177212] ? fput_many+0x2f/0x1a0 [ 1983.177572] ? ksys_write+0x1a9/0x260 [ 1983.177948] ? __ia32_sys_read+0xb0/0xb0 [ 1983.178360] __x64_sys_recvfrom+0xdd/0x1b0 [ 1983.178775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1983.179284] do_syscall_64+0x33/0x40 [ 1983.179649] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1983.180146] RIP: 0033:0x7f2e54dfeb19 [ 1983.180513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1983.182291] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1983.183032] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 1983.183720] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 1983.184412] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 1983.185099] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 1983.185788] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:18:37 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000000a, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:18:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r1, &(0x7f00000000c0)=0x56cb, r3, &(0x7f0000000100)=0x6aa, 0x2, 0x0) fcntl$setown(r2, 0x8, 0x0) close(r2) perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x5, 0x0, 0x4, 0x0, 0x10001, 0xa2050, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x240, 0x7, 0x0, 0x7, 0x0, 0x7, 0x9, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000004c0)) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000140)={0x7, 'veth0\x00', {0x4}}) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)="5afd9f303f1af27d7c727489148e9448b568a740018a6799fb420f5627ca4c48e48982413b096cc04619d2a5b78364ed6d0a2245df1b28fdfe189a6dad630b100d1b081ee27179623260ca01ea0fdd0d5a4e83d0d7aee75295101db285e955a763ab8bcbb0f243d2f27a25b1736893b989993f21367d86a6d5b21e0d86fb95be5d4f06ed301213fe5909b637156712a25f5dc432abacf083fc3e89c456a526ef1bf182a0b30dbca6440b9268a149034ae3fa22fdd2373d6ffb83fc048633", 0xbe, r3}, 0x68) 03:18:37 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xde790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:18:37 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:18:37 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:18:37 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:18:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 18) 03:18:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 03:18:37 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000000b, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:18:37 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000000a, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:18:37 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xdf790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:18:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000000d, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:18:38 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe0790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:18:38 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x141080, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20044000) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@nr_blocks={'nr_blocks', 0x3d, [0x70, 0x67]}}]}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) fstat(r2, &(0x7f0000000280)) openat(r1, &(0x7f0000000200)='./file0/file0\x00', 0x2000, 0x1) [ 1996.053854] FAULT_INJECTION: forcing a failure. [ 1996.053854] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.056109] CPU: 0 PID: 45826 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 1996.057254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1996.058577] Call Trace: [ 1996.058988] dump_stack+0x107/0x167 [ 1996.059562] should_fail.cold+0x5/0xa [ 1996.060159] ? create_object.isra.0+0x3a/0xa20 [ 1996.060875] should_failslab+0x5/0x20 [ 1996.061467] kmem_cache_alloc+0x5b/0x310 [ 1996.062100] create_object.isra.0+0x3a/0xa20 [ 1996.062789] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1996.063580] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1996.064364] ? __tcp_send_ack.part.0+0x67/0x650 [ 1996.065088] __alloc_skb+0xb1/0x5b0 [ 1996.065659] __tcp_send_ack.part.0+0x67/0x650 [ 1996.066363] ? kmem_cache_free+0x249/0x2d0 [ 1996.067022] tcp_send_ack+0x7d/0xa0 [ 1996.067586] tcp_cleanup_rbuf+0x468/0x5a0 [ 1996.068229] tcp_recvmsg+0xb85/0x2930 [ 1996.068833] ? tcp_splice_read+0x8c0/0x8c0 [ 1996.069495] ? sock_has_perm+0x1ea/0x280 [ 1996.070128] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1996.070934] ? lock_downgrade+0x6d0/0x6d0 [ 1996.071588] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1996.072405] ? tcp_splice_read+0x8c0/0x8c0 [ 1996.073061] inet6_recvmsg+0x13b/0x6e0 [ 1996.073669] ? inet6_bind+0x120/0x120 [ 1996.074268] ? security_socket_recvmsg+0x95/0xc0 [ 1996.075011] ? inet6_bind+0x120/0x120 [ 1996.075609] sock_recvmsg+0xff/0x180 [ 1996.076192] __sys_recvfrom+0x1be/0x2f0 [ 1996.076814] ? __ia32_sys_send+0x100/0x100 [ 1996.077466] ? lock_downgrade+0x6d0/0x6d0 [ 1996.078132] ? wait_for_completion_io+0x270/0x270 [ 1996.078895] ? rcu_read_lock_any_held+0x75/0xa0 [ 1996.079612] ? vfs_write+0x354/0xa70 [ 1996.080362] ? fput_many+0x2f/0x1a0 [ 1996.080927] ? ksys_write+0x1a9/0x260 [ 1996.081520] ? __ia32_sys_read+0xb0/0xb0 [ 1996.082148] __x64_sys_recvfrom+0xdd/0x1b0 [ 1996.082812] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1996.083607] do_syscall_64+0x33/0x40 [ 1996.084177] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1996.084966] RIP: 0033:0x7f2e54dfeb19 [ 1996.085539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1996.088436] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1996.089605] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 1996.090709] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 1996.091804] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 1996.092898] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 1996.093988] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:18:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000000e, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 1996.228821] tmpfs: Bad value for 'nr_blocks' [ 1996.301039] tmpfs: Bad value for 'nr_blocks' 03:18:38 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x0, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001f0020002cbd00000080000000010049803d88c5902850005ec72ab9e00000000000000000030000000000000000000062"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x240400c5) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in6=@private0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, {}, {}, 0xfffffffc, 0x0, 0xa, 0x4}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}, @extra_flags={0x8, 0x18, 0xfd}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in=@remote, 0xa, 0x8, 0x80}}, @lastused={0xc}]}, 0x184}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="425b52ee81368fcbc5ba1c2285c55336e616917a96d4720a0a9add5c971dbdc94c4560931e89a14e8f9447b2b4ae73f0f94058ec45d6ef7242dd345c0ddd2ba5f4f908db0aae86c3391a0091737b41f03b8a4259372118576143ad9f0ce7abbf1aefd60c20211ddbf3e3540a3b412e005fa59afb877794f5b6a6a68bea62621a741fdfb9679aa0dc03dbf13493e7d77519271703444e06a25eaa5af129649b31055497422391f0c97aa73c92725ee8e58e3a51dd33ec9db4813536607fad76ef924b8128e588113b45c84179eab0f5a2b2fe5d8db4342ba92cf532a6", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf250b000000080001007063690011000200303030303a30303a31302e300000000008000b000100696d0000000f0002006e6574646576736d6d30000008000b008000e2ff070001007063690011000200303030303a30303a31302e3000000071668aa461a6c4d154bf030d3a53cf0008000b00aeffffff"], 0x84}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x20, 0x12}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x23456}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x1, 0x4, 0x1}, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/94, 0x5e}], 0x1, 0xfffffffd, 0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x10000, 0x2) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:18:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000000f, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:18:38 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe1790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:18:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000010, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:18:38 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:18:38 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:18:38 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:18:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 19) 03:18:52 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:18:52 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:18:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000011, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:18:52 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe2790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:18:52 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:18:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 03:18:52 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000031c0)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 03:18:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000016, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:18:52 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe3790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:18:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x181081, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0xa, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000030c0)='net/udp6\x00') preadv(r3, &(0x7f0000002400)=[{&(0x7f0000000140)=""/203, 0xcb}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffff7f000000006967c6cac9d4576aa21c3d9775", @ANYRES32=r1, @ANYBLOB="04d5643100"]) readahead(r2, 0x9, 0x3) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fchmod(r4, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x8000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 03:18:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000018, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:18:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x2) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 03:18:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000002e, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2010.463779] FAULT_INJECTION: forcing a failure. [ 2010.463779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2010.464797] CPU: 1 PID: 46274 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 2010.465377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2010.466072] Call Trace: [ 2010.466308] dump_stack+0x107/0x167 [ 2010.466645] should_fail.cold+0x5/0xa [ 2010.466974] _copy_to_iter+0x264/0x12d0 [ 2010.467324] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2010.467739] ? __check_object_size+0xbb/0x440 [ 2010.468128] ? __virt_addr_valid+0x128/0x350 [ 2010.468517] ? __check_object_size+0x319/0x440 [ 2010.468905] simple_copy_to_iter+0x4c/0x70 [ 2010.469263] __skb_datagram_iter+0x4f7/0x880 [ 2010.469645] ? zerocopy_sg_from_iter+0x110/0x110 [ 2010.470057] skb_copy_datagram_iter+0x88/0x190 [ 2010.470455] tcp_recvmsg+0x13b5/0x2930 [ 2010.470802] ? tcp_splice_read+0x8c0/0x8c0 [ 2010.471158] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2010.471606] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2010.472171] ? trace_hardirqs_on+0x5b/0x180 [ 2010.472562] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2010.473012] ? tcp_splice_read+0x8c0/0x8c0 [ 2010.473372] inet6_recvmsg+0x13b/0x6e0 [ 2010.473713] ? inet6_bind+0x120/0x120 [ 2010.474090] ? security_socket_recvmsg+0x95/0xc0 [ 2010.474492] ? inet6_bind+0x120/0x120 [ 2010.474837] sock_recvmsg+0xff/0x180 [ 2010.475153] __sys_recvfrom+0x1be/0x2f0 [ 2010.475479] ? __ia32_sys_send+0x100/0x100 [ 2010.475880] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2010.476294] ? clockevents_program_event+0x131/0x360 [ 2010.476745] ? tick_program_event+0xa8/0x140 [ 2010.477121] ? hrtimer_interrupt+0x771/0x9b0 [ 2010.477502] __x64_sys_recvfrom+0xdd/0x1b0 [ 2010.477847] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2010.478281] do_syscall_64+0x33/0x40 [ 2010.478619] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2010.479054] RIP: 0033:0x7f2e54dfeb19 [ 2010.479365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2010.481040] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2010.481764] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 2010.482383] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2010.482988] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2010.483603] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2010.484176] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:19:04 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000002f, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:19:04 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe4790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:19:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 03:19:04 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:19:04 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:19:04 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:19:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 20) 03:19:04 executing program 6: pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="85ac7b310e63365ee9c41960ed6f1b84e9ade9f4ce8fde4398c8406249ff029336eb7e4b2ff729cf641b11877afc564e2d69732388f53a8b67d3e0fbff8d630b73f98a92b00e59515a35f7a69b2faef4661afa4e7b5b90b8c013300b242bd4879317db63084ba69c1e0494e8fa1bacb39f2a3da28c672573e856fe9e4ff3fbffd9cee987c269bf579d4e4c0d56578f3bb2", 0x91}], 0x1, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8401, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6bb8b0602e825d", 0xffffff3f}, {&(0x7f00000001c0)="03", 0x1}, {&(0x7f0000000200)="a4541332f923fcc8c5bab7", 0xb}], 0x3) 03:19:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf7e49a1d95947318303ae70299e26a0010040", 0x1f, 0x4e0}, {&(0x7f0000011900)="20000000000000000000000000000000e0f4655f00000000", 0x18, 0x401}], 0x0, &(0x7f0000014100)=ANY=[@ANYBLOB="19"]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@private0, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="02018f1400aedc717c7ec2abb6602f2a012ed635e54c282d45dafadea1ad5c608235994a06f0bd9ab2ce5e1b32f41c632f98781fd08a86b4bb1186873fe49f275b7c26a51d65d93d2490e16cbd15a98509b1d8163e645b047982afa64e3f5453ecac422d0c09b71a629f8b4ec1c064416e460e8ec3e05afa8b002ae361", 0x7d, 0x1}], 0x1002004, &(0x7f0000000380)={[{@uid={'uid', 0x3d, r0}}, {@mode={'mode', 0x3d, 0xa0000000000}}], [{@pcr={'pcr', 0x3d, 0x25}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '--}}:.'}}]}) 03:19:04 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000030, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:19:04 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe4ffffff, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 2022.539488] EXT4-fs (loop6): Unrecognized mount option "" or missing value [ 2022.564909] EXT4-fs (loop6): Unrecognized mount option "" or missing value 03:19:04 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000048, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:19:04 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) fcntl$dupfd(r1, 0x406, r2) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="b900000000000000272f5f696c653000"]) r5 = clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r6, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x0) lseek(r7, 0x6e238000000, 0x4) syz_open_procfs(r5, &(0x7f0000000200)='net/nfsfs\x00') getpriority(0x1, r5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4, 0x20, 0x5, 0x9, 0x0, 0x2, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5db, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x41001, 0xb6d, 0x7, 0x7, 0x4, 0xbd5, 0x3, 0x0, 0xfaf, 0x0, 0x7ff}, r5, 0x2, 0xffffffffffffffff, 0xe) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) sync() 03:19:04 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe5790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 2022.736861] FAULT_INJECTION: forcing a failure. [ 2022.736861] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.737865] CPU: 1 PID: 46580 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 2022.738433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.739130] Call Trace: [ 2022.739354] dump_stack+0x107/0x167 [ 2022.739667] should_fail.cold+0x5/0xa [ 2022.739992] should_failslab+0x5/0x20 [ 2022.740311] __kmalloc_node_track_caller+0x74/0x3b0 [ 2022.740733] ? tcp_collapse+0x42c/0xf20 [ 2022.741068] __alloc_skb+0xb1/0x5b0 [ 2022.741376] tcp_collapse+0x42c/0xf20 [ 2022.741703] ? tcp_queue_rcv+0x7c0/0x7c0 [ 2022.742044] ? tcp_xmit_retransmit_queue+0x57/0x70 [ 2022.742444] ? tcp_xmit_recovery+0x86/0x180 [ 2022.742803] ? tcp_ack+0xeef/0x5690 [ 2022.743119] tcp_try_rmem_schedule+0xb8a/0x1690 [ 2022.743521] tcp_data_queue+0x16ba/0x47f0 [ 2022.743879] ? tcp_data_ready+0x500/0x500 [ 2022.744220] ? tcp_urg.part.0+0x157/0x2e0 [ 2022.744558] ? tcp_try_keep_open+0x2f0/0x2f0 [ 2022.744920] ? tcp_validate_incoming+0x431/0x16a0 [ 2022.745322] ? tcp_check_urg.isra.0+0x1db/0x720 [ 2022.745713] tcp_rcv_established+0x868/0x1e30 [ 2022.746087] ? tcp_check_space+0x6c0/0x6c0 [ 2022.746453] tcp_v6_do_rcv+0x7b3/0x1520 [ 2022.746791] __release_sock+0x139/0x3b0 [ 2022.747127] release_sock+0x54/0x1b0 [ 2022.747442] sk_wait_data+0x1a7/0x4d0 [ 2022.747756] ? sock_set_mark+0x130/0x130 [ 2022.748106] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2022.748536] tcp_recvmsg+0x17b2/0x2930 [ 2022.748870] ? tcp_splice_read+0x8c0/0x8c0 [ 2022.749229] ? sock_has_perm+0x1ea/0x280 [ 2022.749565] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2022.749987] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.750412] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2022.750860] ? trace_hardirqs_on+0x5b/0x180 [ 2022.751212] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2022.751665] ? tcp_splice_read+0x8c0/0x8c0 [ 2022.752019] inet6_recvmsg+0x13b/0x6e0 [ 2022.752342] ? inet6_bind+0x120/0x120 [ 2022.752664] ? security_socket_recvmsg+0x95/0xc0 [ 2022.753054] ? inet6_bind+0x120/0x120 [ 2022.753370] sock_recvmsg+0xff/0x180 [ 2022.753680] __sys_recvfrom+0x1be/0x2f0 [ 2022.754013] ? __ia32_sys_send+0x100/0x100 [ 2022.754360] ? lock_downgrade+0x6d0/0x6d0 [ 2022.754713] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2022.755167] ? vfs_write+0x871/0xa70 [ 2022.755482] ? wait_for_completion_io+0x270/0x270 [ 2022.755885] ? rcu_read_lock_any_held+0x75/0xa0 [ 2022.756260] ? vfs_write+0x354/0xa70 [ 2022.756572] ? fput_many+0x2f/0x1a0 [ 2022.756870] ? ksys_write+0x1a9/0x260 [ 2022.757192] ? __ia32_sys_read+0xb0/0xb0 [ 2022.757540] __x64_sys_recvfrom+0xdd/0x1b0 [ 2022.757884] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.758309] do_syscall_64+0x33/0x40 [ 2022.758622] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2022.759053] RIP: 0033:0x7f2e54dfeb19 [ 2022.759358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.760840] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2022.761461] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 2022.762035] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2022.762618] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.763204] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2022.763780] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:19:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = signalfd(r1, &(0x7f0000000480), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000004c0)={0x9000000a}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x240, 0x204, 0x0, 0x3, 0x0, 0x9, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') mknodat$loop(r3, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}, 0x1c) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000300)={0x401, 0x0, 0x0, 0x9}) [ 2022.956683] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1025 (only 16 groups) 03:19:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = signalfd(r1, &(0x7f0000000480), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000004c0)={0x9000000a}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x240, 0x204, 0x0, 0x3, 0x0, 0x9, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') mknodat$loop(r3, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}, 0x1c) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000300)={0x401, 0x0, 0x0, 0x9}) 03:19:17 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000004c, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:19:17 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 03:19:17 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:19:17 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:19:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 03:19:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 21) 03:19:17 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe6790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 2035.447735] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1025 (only 16 groups) 03:19:17 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000068, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:19:17 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe7790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:19:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = signalfd(r1, &(0x7f0000000480), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000004c0)={0x9000000a}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x240, 0x204, 0x0, 0x3, 0x0, 0x9, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') mknodat$loop(r3, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}, 0x1c) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000300)={0x401, 0x0, 0x0, 0x9}) 03:19:17 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000006c, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2035.723075] FAULT_INJECTION: forcing a failure. [ 2035.723075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2035.725085] CPU: 0 PID: 46883 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 2035.726185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2035.727520] Call Trace: [ 2035.727938] dump_stack+0x107/0x167 [ 2035.728522] should_fail.cold+0x5/0xa [ 2035.729121] _copy_to_iter+0x264/0x12d0 [ 2035.729765] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2035.730600] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2035.731465] ? trace_hardirqs_on+0x5b/0x180 [ 2035.732136] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2035.732990] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2035.733767] ? __virt_addr_valid+0x128/0x350 [ 2035.734470] ? __check_object_size+0x319/0x440 [ 2035.735208] simple_copy_to_iter+0x4c/0x70 [ 2035.735866] __skb_datagram_iter+0x4f7/0x880 [ 2035.736563] ? zerocopy_sg_from_iter+0x110/0x110 [ 2035.737314] skb_copy_datagram_iter+0x88/0x190 [ 2035.738022] tcp_recvmsg+0x13b5/0x2930 [ 2035.738657] ? tcp_splice_read+0x8c0/0x8c0 [ 2035.739350] ? sock_has_perm+0x1ea/0x280 [ 2035.739974] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2035.740784] ? lock_downgrade+0x6d0/0x6d0 [ 2035.741432] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2035.742262] ? tcp_splice_read+0x8c0/0x8c0 [ 2035.742917] inet6_recvmsg+0x13b/0x6e0 [ 2035.743535] ? inet6_bind+0x120/0x120 [ 2035.744284] ? security_socket_recvmsg+0x95/0xc0 [ 2035.745079] ? inet6_bind+0x120/0x120 [ 2035.745676] sock_recvmsg+0xff/0x180 [ 2035.746275] __sys_recvfrom+0x1be/0x2f0 [ 2035.746892] ? __ia32_sys_send+0x100/0x100 [ 2035.747557] ? lock_downgrade+0x6d0/0x6d0 [ 2035.748308] ? wait_for_completion_io+0x270/0x270 [ 2035.749251] ? rcu_read_lock_any_held+0x75/0xa0 [ 2035.750148] ? vfs_write+0x354/0xa70 [ 2035.750894] ? fput_many+0x2f/0x1a0 [ 2035.751621] ? ksys_write+0x1a9/0x260 [ 2035.752381] ? __ia32_sys_read+0xb0/0xb0 [ 2035.753125] __x64_sys_recvfrom+0xdd/0x1b0 [ 2035.753807] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2035.754623] do_syscall_64+0x33/0x40 [ 2035.755233] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2035.756034] RIP: 0033:0x7f2e54dfeb19 [ 2035.756640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2035.759538] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2035.760739] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 2035.761869] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2035.763008] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2035.764129] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2035.765275] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 [ 2035.805042] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1025 (only 16 groups) 03:19:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = signalfd(r1, &(0x7f0000000480), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000004c0)={0x9000000a}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x240, 0x204, 0x0, 0x3, 0x0, 0x9, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') mknodat$loop(r3, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}, 0x1c) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000300)={0x401, 0x0, 0x0, 0x9}) 03:19:17 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe8790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:19:18 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000074, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2036.015840] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1025 (only 16 groups) 03:19:30 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000078, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:19:30 executing program 6: syz_open_dev$vcsa(0x0, 0x61, 0x30103) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1ca746d6ce73930068800000", @ANYBLOB="030700000000000000003200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x53}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r4, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) sendfile(r2, r5, &(0x7f0000000140), 0x22e3) fallocate(r3, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) write$rfkill(r3, &(0x7f0000000200)={0x8001, 0x0, 0x0, 0x1}, 0x8) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r3, 0x0) 03:19:30 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe9790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:19:30 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:19:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 22) 03:19:30 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 03:19:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 03:19:30 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:19:30 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000007a, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:19:30 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xea790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:19:30 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000112, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:19:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000300, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2048.967706] FAULT_INJECTION: forcing a failure. [ 2048.967706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2048.968880] CPU: 1 PID: 47271 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 2048.969491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2048.970205] Call Trace: [ 2048.970433] dump_stack+0x107/0x167 [ 2048.970739] should_fail.cold+0x5/0xa [ 2048.971069] _copy_to_iter+0x264/0x12d0 [ 2048.971430] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2048.971918] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2048.972411] ? trace_hardirqs_on+0x5b/0x180 [ 2048.972782] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2048.973274] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2048.973714] ? __virt_addr_valid+0x128/0x350 [ 2048.974096] ? __check_object_size+0x319/0x440 [ 2048.974514] simple_copy_to_iter+0x4c/0x70 [ 2048.974897] __skb_datagram_iter+0x122/0x880 [ 2048.975293] ? sock_set_mark+0x130/0x130 [ 2048.975679] ? zerocopy_sg_from_iter+0x110/0x110 [ 2048.976087] skb_copy_datagram_iter+0x88/0x190 [ 2048.976484] tcp_recvmsg+0x13b5/0x2930 [ 2048.976817] ? tcp_splice_read+0x8c0/0x8c0 [ 2048.977224] ? sock_has_perm+0x1ea/0x280 [ 2048.977599] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2048.978069] ? lock_downgrade+0x6d0/0x6d0 [ 2048.978465] ? perf_trace_lock+0xac/0x490 [ 2048.978835] ? tcp_splice_read+0x8c0/0x8c0 [ 2048.979213] inet6_recvmsg+0x13b/0x6e0 [ 2048.979560] ? inet6_bind+0x120/0x120 [ 2048.979888] ? security_socket_recvmsg+0x95/0xc0 [ 2048.980324] ? inet6_bind+0x120/0x120 [ 2048.980666] sock_recvmsg+0xff/0x180 [ 2048.980997] __sys_recvfrom+0x1be/0x2f0 [ 2048.981353] ? __ia32_sys_send+0x100/0x100 [ 2048.981732] ? lock_downgrade+0x6d0/0x6d0 [ 2048.982096] ? wait_for_completion_io+0x270/0x270 [ 2048.982527] ? rcu_read_lock_any_held+0x75/0xa0 [ 2048.982937] ? vfs_write+0x354/0xa70 [ 2048.983257] ? fput_many+0x2f/0x1a0 [ 2048.983594] ? ksys_write+0x1a9/0x260 [ 2048.983943] ? __ia32_sys_read+0xb0/0xb0 [ 2048.984325] __x64_sys_recvfrom+0xdd/0x1b0 [ 2048.984688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2048.985151] do_syscall_64+0x33/0x40 [ 2048.985491] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2048.985921] RIP: 0033:0x7f2e54dfeb19 [ 2048.986250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2048.987876] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2048.988577] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 2048.989211] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2048.989869] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2048.990476] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2048.991131] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:19:31 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xeb790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:19:31 executing program 6: syz_open_dev$vcsa(0x0, 0x61, 0x30103) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1ca746d6ce73930068800000", @ANYBLOB="030700000000000000003200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x53}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r4, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) sendfile(r2, r5, &(0x7f0000000140), 0x22e3) fallocate(r3, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) write$rfkill(r3, &(0x7f0000000200)={0x8001, 0x0, 0x0, 0x1}, 0x8) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r3, 0x0) 03:19:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000500, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:19:31 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xec790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:19:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000506, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:19:31 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xed790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:19:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000508, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:19:44 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:19:44 executing program 6: syz_open_dev$vcsa(0x0, 0x61, 0x30103) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1ca746d6ce73930068800000", @ANYBLOB="030700000000000000003200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x53}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r4, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) sendfile(r2, r5, &(0x7f0000000140), 0x22e3) fallocate(r3, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) write$rfkill(r3, &(0x7f0000000200)={0x8001, 0x0, 0x0, 0x1}, 0x8) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r3, 0x0) 03:19:44 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 03:19:44 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:19:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 23) 03:19:44 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000050d, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:19:44 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xee790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:19:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000300, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:19:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000300, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:19:44 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000050f, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:19:44 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xef790000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:19:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000300, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:19:44 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000600, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2062.669080] FAULT_INJECTION: forcing a failure. [ 2062.669080] name failslab, interval 1, probability 0, space 0, times 0 [ 2062.671027] CPU: 1 PID: 47833 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 2062.672045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2062.673253] Call Trace: [ 2062.673639] dump_stack+0x107/0x167 [ 2062.674183] should_fail.cold+0x5/0xa [ 2062.674742] ? create_object.isra.0+0x3a/0xa20 [ 2062.675413] should_failslab+0x5/0x20 [ 2062.675973] kmem_cache_alloc+0x5b/0x310 [ 2062.676602] create_object.isra.0+0x3a/0xa20 [ 2062.677246] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2062.677983] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2062.678715] ? __tcp_send_ack.part.0+0x67/0x650 [ 2062.679412] __alloc_skb+0xb1/0x5b0 [ 2062.679952] __tcp_send_ack.part.0+0x67/0x650 [ 2062.680602] tcp_send_ack+0x7d/0xa0 [ 2062.681125] __tcp_ack_snd_check+0x156/0x9f0 [ 2062.681768] tcp_rcv_established+0x955/0x1e30 [ 2062.682420] ? tcp_check_space+0x6c0/0x6c0 [ 2062.683065] tcp_v6_do_rcv+0x7b3/0x1520 [ 2062.683666] __release_sock+0x139/0x3b0 [ 2062.684254] release_sock+0x54/0x1b0 [ 2062.684790] sk_wait_data+0x1a7/0x4d0 [ 2062.685345] ? sock_set_mark+0x130/0x130 [ 2062.685928] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2062.686684] tcp_recvmsg+0x17b2/0x2930 [ 2062.687261] ? tcp_splice_read+0x8c0/0x8c0 [ 2062.687876] ? sock_has_perm+0x1ea/0x280 [ 2062.688457] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2062.689203] ? lock_downgrade+0x6d0/0x6d0 [ 2062.689798] ? perf_trace_lock+0xac/0x490 [ 2062.690398] ? tcp_splice_read+0x8c0/0x8c0 [ 2062.690994] inet6_recvmsg+0x13b/0x6e0 [ 2062.691561] ? inet6_bind+0x120/0x120 [ 2062.692103] ? security_socket_recvmsg+0x95/0xc0 [ 2062.692786] ? inet6_bind+0x120/0x120 [ 2062.693320] sock_recvmsg+0xff/0x180 [ 2062.693860] __sys_recvfrom+0x1be/0x2f0 [ 2062.694423] ? __ia32_sys_send+0x100/0x100 [ 2062.695027] ? lock_downgrade+0x6d0/0x6d0 [ 2062.695650] ? wait_for_completion_io+0x270/0x270 [ 2062.696334] ? rcu_read_lock_any_held+0x75/0xa0 [ 2062.697007] ? vfs_write+0x354/0xa70 [ 2062.697536] ? fput_many+0x2f/0x1a0 [ 2062.698063] ? ksys_write+0x1a9/0x260 [ 2062.698625] ? __ia32_sys_read+0xb0/0xb0 [ 2062.699230] __x64_sys_recvfrom+0xdd/0x1b0 [ 2062.699829] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2062.700566] do_syscall_64+0x33/0x40 [ 2062.701104] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2062.701840] RIP: 0033:0x7f2e54dfeb19 [ 2062.702363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2062.704993] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2062.706086] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 2062.707085] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2062.708093] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2062.709097] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2062.710130] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:19:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 1) 03:19:44 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000605, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2062.878532] FAULT_INJECTION: forcing a failure. [ 2062.878532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2062.879983] CPU: 0 PID: 47975 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2062.880643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2062.881448] Call Trace: [ 2062.881712] dump_stack+0x107/0x167 [ 2062.882056] should_fail.cold+0x5/0xa [ 2062.882424] _copy_to_iter+0x264/0x12d0 [ 2062.882795] ? mark_lock+0xf5/0x2df0 [ 2062.883142] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2062.883674] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2062.884134] ? lock_chain_count+0x20/0x20 [ 2062.884547] ? __virt_addr_valid+0x128/0x350 [ 2062.884980] ? __check_object_size+0x319/0x440 [ 2062.885435] simple_copy_to_iter+0x4c/0x70 [ 2062.885884] __skb_datagram_iter+0x122/0x880 [ 2062.886378] ? do_raw_spin_lock+0x121/0x260 [ 2062.886800] ? zerocopy_sg_from_iter+0x110/0x110 [ 2062.887274] ? mark_held_locks+0x9e/0xe0 [ 2062.887694] skb_copy_datagram_iter+0x88/0x190 [ 2062.888143] tcp_recvmsg+0x13b5/0x2930 [ 2062.888539] ? tcp_splice_read+0x8c0/0x8c0 [ 2062.888945] ? sock_has_perm+0x1ea/0x280 [ 2062.889321] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2062.889793] ? lock_downgrade+0x6d0/0x6d0 [ 2062.890177] ? perf_trace_lock+0xac/0x490 [ 2062.890590] ? tcp_splice_read+0x8c0/0x8c0 [ 2062.890992] inet6_recvmsg+0x13b/0x6e0 [ 2062.891384] ? inet6_bind+0x120/0x120 [ 2062.891762] ? security_socket_recvmsg+0x95/0xc0 [ 2062.892198] ? inet6_bind+0x120/0x120 [ 2062.892587] sock_recvmsg+0xff/0x180 [ 2062.892935] __sys_recvfrom+0x1be/0x2f0 [ 2062.893312] ? __ia32_sys_send+0x100/0x100 [ 2062.893704] ? lock_downgrade+0x6d0/0x6d0 [ 2062.894116] ? wait_for_completion_io+0x270/0x270 [ 2062.894600] ? rcu_read_lock_any_held+0x75/0xa0 [ 2062.895039] ? vfs_write+0x354/0xa70 [ 2062.895412] ? fput_many+0x2f/0x1a0 [ 2062.895766] ? ksys_write+0x1a9/0x260 [ 2062.896116] ? __ia32_sys_read+0xb0/0xb0 [ 2062.896496] __x64_sys_recvfrom+0xdd/0x1b0 [ 2062.896884] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2062.897357] do_syscall_64+0x33/0x40 [ 2062.897697] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2062.898164] RIP: 0033:0x7fcd1f4c0b19 [ 2062.898541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2062.900444] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2062.901160] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2062.901984] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2062.902647] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2062.903352] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2062.904016] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:19:58 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r3, @ANYRESDEC, @ANYBLOB="09000000000100000002878000", @ANYRES32=r4, @ANYRES64], 0x1c}}, 0x0) r5 = accept4(r0, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000000000)=0x80, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x66}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x1) r6 = dup(r3) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x90, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x2, 0x0, {0x59919516, 0x9, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x400, 0x100, 0xed}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x90}}, 0x0) 03:19:58 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xf1030000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:19:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 2) 03:19:58 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:19:58 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 03:19:58 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:19:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 24) 03:19:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000700, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2076.887095] FAULT_INJECTION: forcing a failure. [ 2076.887095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2076.889614] CPU: 1 PID: 48017 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2076.890761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2076.892136] Call Trace: [ 2076.892578] dump_stack+0x107/0x167 [ 2076.893189] should_fail.cold+0x5/0xa [ 2076.893830] _copy_to_iter+0x264/0x12d0 [ 2076.894486] ? mark_lock+0xf5/0x2df0 [ 2076.895124] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2076.896024] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2076.896836] ? lock_chain_count+0x20/0x20 [ 2076.897514] ? __virt_addr_valid+0x128/0x350 [ 2076.898247] ? __check_object_size+0x319/0x440 [ 2076.899028] simple_copy_to_iter+0x4c/0x70 [ 2076.899765] __skb_datagram_iter+0x4f7/0x880 [ 2076.900492] ? zerocopy_sg_from_iter+0x110/0x110 [ 2076.901281] skb_copy_datagram_iter+0x88/0x190 [ 2076.902040] tcp_recvmsg+0x13b5/0x2930 [ 2076.902712] ? tcp_splice_read+0x8c0/0x8c0 [ 2076.903428] ? sock_has_perm+0x1ea/0x280 [ 2076.904120] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2076.904976] ? lock_downgrade+0x6d0/0x6d0 [ 2076.905678] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2076.905758] ? tcp_splice_read+0x8c0/0x8c0 [ 2076.905779] inet6_recvmsg+0x13b/0x6e0 [ 2076.907242] ? inet6_bind+0x120/0x120 [ 2076.907267] ? security_socket_recvmsg+0x95/0xc0 [ 2076.909017] ? inet6_bind+0x120/0x120 [ 2076.909651] sock_recvmsg+0xff/0x180 [ 2076.910277] __sys_recvfrom+0x1be/0x2f0 [ 2076.910944] ? __ia32_sys_send+0x100/0x100 [ 2076.911653] ? lock_downgrade+0x6d0/0x6d0 [ 2076.912376] ? wait_for_completion_io+0x270/0x270 [ 2076.913380] ? rcu_read_lock_any_held+0x75/0xa0 [ 2076.914318] ? vfs_write+0x354/0xa70 [ 2076.914938] ? fput_many+0x2f/0x1a0 [ 2076.915622] ? ksys_write+0x1a9/0x260 [ 2076.916270] ? __ia32_sys_read+0xb0/0xb0 [ 2076.916945] __x64_sys_recvfrom+0xdd/0x1b0 [ 2076.917637] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2076.918523] do_syscall_64+0x33/0x40 [ 2076.919146] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2076.920017] RIP: 0033:0x7fcd1f4c0b19 [ 2076.920627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2076.923642] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2076.924939] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2076.926136] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2076.927375] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2076.928549] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2076.929711] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:19:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000805, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:19:59 executing program 6: syz_io_uring_setup(0x482d, &(0x7f0000000340)={0x0, 0x3145, 0x0, 0x2, 0x399}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000400)) 03:19:59 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xf6ffffff, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:19:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000900, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:19:59 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x141043, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001000000001c59994138a307ea0000000000", @ANYRES32, @ANYBLOB="0400001208001b"], 0x28}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 2077.189702] FAULT_INJECTION: forcing a failure. [ 2077.189702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2077.190947] CPU: 0 PID: 48020 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 2077.191591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2077.192360] Call Trace: [ 2077.192608] dump_stack+0x107/0x167 [ 2077.192937] should_fail.cold+0x5/0xa [ 2077.193287] _copy_to_iter+0x264/0x12d0 [ 2077.193667] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2077.194104] ? __virt_addr_valid+0x128/0x350 [ 2077.194494] ? __check_object_size+0x319/0x440 [ 2077.194924] simple_copy_to_iter+0x4c/0x70 [ 2077.195316] __skb_datagram_iter+0x4f7/0x880 [ 2077.195737] ? zerocopy_sg_from_iter+0x110/0x110 [ 2077.196165] skb_copy_datagram_iter+0x88/0x190 [ 2077.196577] tcp_recvmsg+0x13b5/0x2930 [ 2077.196930] ? tcp_splice_read+0x8c0/0x8c0 [ 2077.197314] ? sock_has_perm+0x1ea/0x280 [ 2077.197675] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2077.198133] ? lock_downgrade+0x6d0/0x6d0 [ 2077.198532] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2077.198998] ? tcp_splice_read+0x8c0/0x8c0 [ 2077.199396] inet6_recvmsg+0x13b/0x6e0 [ 2077.199744] ? inet6_bind+0x120/0x120 [ 2077.200081] ? security_socket_recvmsg+0x95/0xc0 [ 2077.200506] ? inet6_bind+0x120/0x120 [ 2077.200845] sock_recvmsg+0xff/0x180 [ 2077.201173] __sys_recvfrom+0x1be/0x2f0 [ 2077.201528] ? __ia32_sys_send+0x100/0x100 [ 2077.201899] ? lock_downgrade+0x6d0/0x6d0 [ 2077.202288] ? wait_for_completion_io+0x270/0x270 [ 2077.202723] ? rcu_read_lock_any_held+0x75/0xa0 [ 2077.203134] ? vfs_write+0x354/0xa70 [ 2077.203478] ? fput_many+0x2f/0x1a0 [ 2077.203799] ? ksys_write+0x1a9/0x260 [ 2077.204133] ? __ia32_sys_read+0xb0/0xb0 [ 2077.204499] __x64_sys_recvfrom+0xdd/0x1b0 [ 2077.204874] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2077.205333] do_syscall_64+0x33/0x40 [ 2077.205664] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2077.206119] RIP: 0033:0x7f2e54dfeb19 [ 2077.206452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2077.208121] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2077.208840] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 2077.209497] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2077.210128] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2077.210788] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2077.211440] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:20:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000a00, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:20:12 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xfa030000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:20:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 25) 03:20:12 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 03:20:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 3) 03:20:12 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:20:12 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:20:12 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000013b00)) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)={0x0, 0xfb, 0x28b, 0x0, 0x0, "dac992e0297c10bea38c2d348bf43cad", "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"}, 0x28b, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.origin\x00', &(0x7f0000000580)=""/245, 0xf5) recvmmsg(0xffffffffffffffff, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000680)=""/200, 0xc8}, {&(0x7f0000000780)=""/251, 0xfb}, {&(0x7f0000000880)=""/158, 0x9e}, {&(0x7f0000000940)=""/214, 0xd6}, {&(0x7f0000000140)=""/88, 0x58}, {&(0x7f0000000a40)=""/76, 0x4c}, {&(0x7f00000000c0)=""/25, 0x19}], 0x7, &(0x7f0000000b40)}, 0x200}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000b80)=""/95, 0x5f}, {&(0x7f0000000c00)=""/11, 0xb}, {&(0x7f0000000c40)=""/139, 0x8b}, {&(0x7f0000000d00)=""/220, 0xdc}, {&(0x7f0000000e00)=""/71, 0x47}, {&(0x7f0000000e80)=""/147, 0x93}, {&(0x7f0000000f40)=""/14, 0xe}, {&(0x7f0000000f80)=""/129, 0x81}], 0x8, &(0x7f00000010c0)=""/30, 0x1e}, 0x1f}, {{&(0x7f0000001100)=@rc={0x1f, @none}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, &(0x7f00000021c0)=""/105, 0x69}, 0x8}, {{&(0x7f0000002240)=@pppol2tpv3in6, 0x80, &(0x7f00000026c0)=[{&(0x7f00000022c0)=""/238, 0xee}, {&(0x7f00000023c0)=""/132, 0x84}, {&(0x7f0000002480)=""/150, 0x96}, {&(0x7f0000002540)=""/129, 0x81}, {&(0x7f0000002600)=""/188, 0xbc}], 0x5}, 0x1}, {{&(0x7f0000002740)=@hci, 0x80, &(0x7f0000002a80)=[{&(0x7f00000027c0)=""/121, 0x79}, {&(0x7f0000002840)}, {&(0x7f0000002880)=""/122, 0x7a}, {&(0x7f0000002900)=""/47, 0x2f}, {&(0x7f0000002940)}, {&(0x7f0000002980)=""/35, 0x23}, {&(0x7f00000029c0)=""/50, 0x32}, {&(0x7f0000002a00)=""/77, 0x4d}], 0x8, &(0x7f0000002b00)=""/24, 0x18}, 0x1}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b40)=""/206, 0xce}], 0x1, &(0x7f0000002c80)=""/127, 0x7f}, 0x3ff}, {{&(0x7f0000002d00)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002d80)=""/48, 0x30}, {&(0x7f0000002dc0)=""/15, 0xf}], 0x2, &(0x7f0000002e40)=""/94, 0x5e}, 0xabf5}, {{&(0x7f0000002ec0)=@nfc_llcp, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002f40)=""/62, 0x3e}], 0x1, &(0x7f0000002fc0)=""/4096, 0x1000}, 0x20}], 0x8, 0x20, &(0x7f00000041c0)={0x0, 0x3938700}) [ 2090.593249] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2090.603637] EXT4-fs error (device loop6): ext4_validate_block_bitmap:437: comm syz-executor.6: bg 0: block 32: padding at end of block bitmap is not set [ 2090.615644] FAULT_INJECTION: forcing a failure. [ 2090.615644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2090.616999] CPU: 1 PID: 48322 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2090.617713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2090.618567] Call Trace: [ 2090.618859] dump_stack+0x107/0x167 [ 2090.619255] should_fail.cold+0x5/0xa [ 2090.619677] _copy_to_iter+0x264/0x12d0 [ 2090.620095] ? mark_lock+0xf5/0x2df0 [ 2090.620479] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2090.621014] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2090.621520] ? lock_chain_count+0x20/0x20 [ 2090.621954] ? __virt_addr_valid+0x128/0x350 [ 2090.622427] ? __check_object_size+0x319/0x440 [ 2090.622897] simple_copy_to_iter+0x4c/0x70 [ 2090.623352] __skb_datagram_iter+0x4f7/0x880 [ 2090.623837] ? zerocopy_sg_from_iter+0x110/0x110 [ 2090.624329] skb_copy_datagram_iter+0x88/0x190 [ 2090.624815] tcp_recvmsg+0x13b5/0x2930 [ 2090.625229] ? tcp_splice_read+0x8c0/0x8c0 [ 2090.625688] ? sock_has_perm+0x1ea/0x280 [ 2090.626107] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2090.626627] ? lock_downgrade+0x6d0/0x6d0 [ 2090.627055] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2090.627620] ? tcp_splice_read+0x8c0/0x8c0 [ 2090.628049] inet6_recvmsg+0x13b/0x6e0 [ 2090.628461] ? inet6_bind+0x120/0x120 [ 2090.628861] ? security_socket_recvmsg+0x95/0xc0 [ 2090.629346] ? inet6_bind+0x120/0x120 [ 2090.629747] sock_recvmsg+0xff/0x180 [ 2090.630148] __sys_recvfrom+0x1be/0x2f0 [ 2090.630571] ? __ia32_sys_send+0x100/0x100 [ 2090.631012] ? lock_downgrade+0x6d0/0x6d0 [ 2090.631458] ? wait_for_completion_io+0x270/0x270 [ 2090.631973] ? rcu_read_lock_any_held+0x75/0xa0 [ 2090.632463] ? vfs_write+0x354/0xa70 [ 2090.632866] ? fput_many+0x2f/0x1a0 [ 2090.633254] ? ksys_write+0x1a9/0x260 [ 2090.633649] ? __ia32_sys_read+0xb0/0xb0 [ 2090.634068] __x64_sys_recvfrom+0xdd/0x1b0 [ 2090.634500] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2090.635048] do_syscall_64+0x33/0x40 [ 2090.635433] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2090.635991] RIP: 0033:0x7fcd1f4c0b19 [ 2090.636375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2090.638224] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2090.638995] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2090.639709] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2090.640400] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2090.641121] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2090.641843] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:20:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000b00, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:20:12 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xffff0000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:20:12 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000a00, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2090.802546] FAULT_INJECTION: forcing a failure. [ 2090.802546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2090.804639] CPU: 0 PID: 48298 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 2090.805398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2090.806290] Call Trace: [ 2090.806594] dump_stack+0x107/0x167 [ 2090.807007] should_fail.cold+0x5/0xa [ 2090.807420] _copy_to_iter+0x264/0x12d0 [ 2090.807880] ? __schedule+0x82c/0x1ea0 [ 2090.808331] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2090.808867] ? __virt_addr_valid+0x128/0x350 [ 2090.809354] ? __check_object_size+0x319/0x440 [ 2090.809862] simple_copy_to_iter+0x4c/0x70 [ 2090.810323] __skb_datagram_iter+0x4f7/0x880 [ 2090.810829] ? zerocopy_sg_from_iter+0x110/0x110 [ 2090.811357] skb_copy_datagram_iter+0x88/0x190 [ 2090.811884] tcp_recvmsg+0x13b5/0x2930 [ 2090.812341] ? tcp_splice_read+0x8c0/0x8c0 [ 2090.812833] ? sock_has_perm+0x1ea/0x280 [ 2090.813292] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2090.813872] ? lock_downgrade+0x6d0/0x6d0 [ 2090.814341] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2090.814930] ? tcp_splice_read+0x8c0/0x8c0 [ 2090.815392] inet6_recvmsg+0x13b/0x6e0 [ 2090.815844] ? inet6_bind+0x120/0x120 [ 2090.816273] ? security_socket_recvmsg+0x95/0xc0 [ 2090.816785] ? inet6_bind+0x120/0x120 [ 2090.817198] sock_recvmsg+0xff/0x180 [ 2090.817628] __sys_recvfrom+0x1be/0x2f0 [ 2090.818067] ? __ia32_sys_send+0x100/0x100 [ 2090.818525] ? lock_downgrade+0x6d0/0x6d0 [ 2090.819006] ? wait_for_completion_io+0x270/0x270 [ 2090.819530] ? rcu_read_lock_any_held+0x75/0xa0 [ 2090.820078] ? vfs_write+0x354/0xa70 [ 2090.820513] ? fput_many+0x2f/0x1a0 [ 2090.820933] ? ksys_write+0x1a9/0x260 [ 2090.821357] ? __ia32_sys_read+0xb0/0xb0 [ 2090.821950] __x64_sys_recvfrom+0xdd/0x1b0 [ 2090.822447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2090.823054] do_syscall_64+0x33/0x40 [ 2090.823497] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2090.824109] RIP: 0033:0x7f2e54dfeb19 [ 2090.824531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2090.826587] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2090.827555] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 2090.828344] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2090.829122] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2090.829926] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2090.830725] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:20:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000d00, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:20:13 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xffffff8c, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:20:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r1, &(0x7f00000000c0)=0x56cb, r3, &(0x7f0000000100)=0x6aa, 0x2, 0x0) fcntl$setown(r2, 0x8, 0x0) close(r2) perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x5, 0x0, 0x4, 0x0, 0x10001, 0xa2050, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x240, 0x7, 0x0, 0x7, 0x0, 0x7, 0x9, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000004c0)) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000140)={0x7, 'veth0\x00', {0x4}}) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)="5afd9f303f1af27d7c727489148e9448b568a740018a6799fb420f5627ca4c48e48982413b096cc04619d2a5b78364ed6d0a2245df1b28fdfe189a6dad630b100d1b081ee27179623260ca01ea0fdd0d5a4e83d0d7aee75295101db285e955a763ab8bcbb0f243d2f27a25b1736893b989993f21367d86a6d5b21e0d86fb95be5d4f06ed301213fe5909b637156712a25f5dc432abacf083fc3e89c456a526ef1bf182a0b30dbca6440b9268a149034ae3fa22fdd2373d6ffb83fc048633", 0xbe, r3}, 0x68) 03:20:13 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000d05, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:20:13 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xffffffc0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:20:26 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xffffffe4, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:20:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000e00, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:20:26 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 03:20:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 4) 03:20:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 26) 03:20:26 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:20:26 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:20:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0) r5 = syz_io_uring_complete(r2) clock_gettime(0x0, &(0x7f0000000400)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) faccessat2(r5, &(0x7f00000001c0)='./file0\x00', 0x160, 0x300) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) syz_io_uring_setup(0x325, &(0x7f0000000440)={0x0, 0x9078, 0x0, 0x3, 0x32f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x32) ioctl$CDROM_DISC_STATUS(r4, 0x5327) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ppoll(&(0x7f00000002c0)=[{r7, 0x44a6}], 0x1, &(0x7f0000000340), &(0x7f0000000380)={[0x1d9]}, 0x8) [ 2104.203105] FAULT_INJECTION: forcing a failure. [ 2104.203105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2104.205542] CPU: 1 PID: 48718 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2104.206687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2104.208079] Call Trace: [ 2104.208518] dump_stack+0x107/0x167 [ 2104.209153] should_fail.cold+0x5/0xa [ 2104.209785] _copy_to_iter+0x264/0x12d0 [ 2104.210462] ? mark_lock+0xf5/0x2df0 [ 2104.211094] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2104.211984] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2104.212766] ? lock_chain_count+0x20/0x20 [ 2104.213476] ? __virt_addr_valid+0x128/0x350 [ 2104.214206] ? __check_object_size+0x319/0x440 [ 2104.214979] simple_copy_to_iter+0x4c/0x70 [ 2104.215715] __skb_datagram_iter+0x4f7/0x880 [ 2104.216403] ? zerocopy_sg_from_iter+0x110/0x110 [ 2104.217216] skb_copy_datagram_iter+0x88/0x190 [ 2104.217959] tcp_recvmsg+0x13b5/0x2930 [ 2104.218616] ? tcp_splice_read+0x8c0/0x8c0 [ 2104.219342] ? sock_has_perm+0x1ea/0x280 [ 2104.220049] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2104.220905] ? lock_downgrade+0x6d0/0x6d0 [ 2104.221617] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2104.222445] ? tcp_splice_read+0x8c0/0x8c0 [ 2104.223145] inet6_recvmsg+0x13b/0x6e0 [ 2104.223828] ? inet6_bind+0x120/0x120 [ 2104.224479] ? security_socket_recvmsg+0x95/0xc0 [ 2104.225271] ? inet6_bind+0x120/0x120 [ 2104.225924] sock_recvmsg+0xff/0x180 [ 2104.226553] __sys_recvfrom+0x1be/0x2f0 [ 2104.227236] ? __ia32_sys_send+0x100/0x100 [ 2104.227979] ? lock_downgrade+0x6d0/0x6d0 [ 2104.228696] ? wait_for_completion_io+0x270/0x270 [ 2104.229509] ? rcu_read_lock_any_held+0x75/0xa0 [ 2104.230284] ? vfs_write+0x354/0xa70 [ 2104.230854] ? fput_many+0x2f/0x1a0 [ 2104.231462] ? ksys_write+0x1a9/0x260 [ 2104.232060] ? __ia32_sys_read+0xb0/0xb0 [ 2104.232763] __x64_sys_recvfrom+0xdd/0x1b0 [ 2104.233470] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2104.234288] do_syscall_64+0x33/0x40 [ 2104.234922] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2104.235789] RIP: 0033:0x7fcd1f4c0b19 [ 2104.236366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2104.239348] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2104.240598] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2104.241700] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2104.242807] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2104.243992] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2104.245104] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:20:26 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xfffffff6, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:20:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000e30, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:20:26 executing program 6: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) close(r0) setpriority(0x0, 0x0, 0x200) write$bt_hci(0xffffffffffffffff, &(0x7f0000001740)=ANY=[], 0xfdef) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/94, 0x5e}], 0x1, 0xfffffffd, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000001600)={'macvlan0\x00'}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000015c0)=@v2={0x2, @adiantum, 0x0, '\x00', @c}) close(r2) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0xb44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x8, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000001640)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYRESDEC=r4]) r6 = openat(r5, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x448c80, 0x40) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000204) migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000040)=0x1) splice(r1, &(0x7f0000000180)=0x401, r1, &(0x7f00000001c0), 0x5, 0x3) perf_event_open(&(0x7f00000016c0)={0x0, 0x80, 0x6, 0x5, 0x3, 0x5, 0x0, 0x7f8f, 0x42cd0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000001680), 0x2}, 0x2aed2b9c212879ec, 0x10000, 0x6, 0x2, 0x7fffffff, 0x7, 0x3, 0x0, 0x9, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r6, 0x1) [ 2104.444021] FAULT_INJECTION: forcing a failure. [ 2104.444021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2104.445900] CPU: 1 PID: 48737 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 2104.446887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2104.448116] Call Trace: [ 2104.448529] dump_stack+0x107/0x167 [ 2104.449056] should_fail.cold+0x5/0xa [ 2104.449637] _copy_to_iter+0x264/0x12d0 [ 2104.450226] ? zerocopy_sg_from_iter+0x110/0x110 [ 2104.450937] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2104.451614] ? __sanitizer_cov_trace_pc+0x45/0x60 [ 2104.452350] ? __virt_addr_valid+0x128/0x350 [ 2104.453007] ? __check_object_size+0x319/0x440 [ 2104.453656] simple_copy_to_iter+0x4c/0x70 [ 2104.454293] __skb_datagram_iter+0x4f7/0x880 [ 2104.454893] ? zerocopy_sg_from_iter+0x110/0x110 [ 2104.455603] skb_copy_datagram_iter+0x88/0x190 [ 2104.456267] tcp_recvmsg+0x13b5/0x2930 [ 2104.456809] ? tcp_splice_read+0x8c0/0x8c0 [ 2104.457452] ? sock_has_perm+0x1ea/0x280 [ 2104.458048] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2104.458813] ? lock_downgrade+0x6d0/0x6d0 [ 2104.459375] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2104.460170] ? tcp_splice_read+0x8c0/0x8c0 [ 2104.460793] inet6_recvmsg+0x13b/0x6e0 [ 2104.461326] ? inet6_bind+0x120/0x120 [ 2104.461894] ? security_socket_recvmsg+0x95/0xc0 [ 2104.462571] ? inet6_bind+0x120/0x120 [ 2104.463123] sock_recvmsg+0xff/0x180 [ 2104.463666] __sys_recvfrom+0x1be/0x2f0 [ 2104.464236] ? __ia32_sys_send+0x100/0x100 [ 2104.464843] ? lock_downgrade+0x6d0/0x6d0 [ 2104.465454] ? wait_for_completion_io+0x270/0x270 [ 2104.466141] ? rcu_read_lock_any_held+0x75/0xa0 [ 2104.466827] ? vfs_write+0x354/0xa70 [ 2104.467401] ? fput_many+0x2f/0x1a0 [ 2104.467941] ? ksys_write+0x1a9/0x260 [ 2104.468509] ? __ia32_sys_read+0xb0/0xb0 [ 2104.469108] __x64_sys_recvfrom+0xdd/0x1b0 [ 2104.469747] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2104.470499] do_syscall_64+0x33/0x40 [ 2104.471065] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2104.471852] RIP: 0033:0x7f2e54dfeb19 [ 2104.472397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2104.474917] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2104.476041] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 2104.477069] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2104.478113] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2104.479149] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2104.480201] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:20:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000f00, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:20:26 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x4084ffffffff, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:20:26 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r0, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) getpgid(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/357], 0x1c}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = clone3(&(0x7f0000002340)={0x28000, 0x0, &(0x7f00000000c0), &(0x7f0000000140), {0x28}, &(0x7f0000000180)=""/252, 0xfc, &(0x7f00000002c0)=""/4096, 0x0}, 0x58) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0x729d2000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/94, 0x5e}], 0x1, 0xfffffffd, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x18, 0xe, 0x2, 0x5, 0x70bd2d, 0x25dfdbff, {0x3, 0x0, 0x3}, [@typed={0x4, 0x94}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) r3 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x2, 0xcd, 0x3, 0x8, 0x0, 0x0, 0xc0a5b, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0xfffffffffffffffe, 0x6f, 0x5, 0x1, 0x10001, 0x8, 0x0, 0x4, 0x0, 0x6793}, r1, 0xffffffffffffffff, r3, 0x1) unshare(0x48020200) 03:20:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000f05, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:20:27 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xedc000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:20:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 5) 03:20:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000001020, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:20:40 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}}, 0x0, 0x800000000000003, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000001300)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 03:20:40 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:20:40 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:20:40 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:20:40 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 1) 03:20:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 27) 03:20:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000001100, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2118.112872] FAULT_INJECTION: forcing a failure. [ 2118.112872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2118.114550] CPU: 1 PID: 49230 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2118.115264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2118.116150] Call Trace: [ 2118.116435] dump_stack+0x107/0x167 [ 2118.116852] should_fail.cold+0x5/0xa [ 2118.117278] _copy_to_iter+0x264/0x12d0 [ 2118.117709] ? mark_lock+0xf5/0x2df0 [ 2118.118123] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2118.118689] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2118.119238] ? lock_chain_count+0x20/0x20 [ 2118.119691] ? __virt_addr_valid+0x128/0x350 [ 2118.120196] ? __check_object_size+0x319/0x440 [ 2118.120692] simple_copy_to_iter+0x4c/0x70 [ 2118.121167] __skb_datagram_iter+0x122/0x880 [ 2118.121640] ? do_raw_spin_lock+0x121/0x260 [ 2118.122111] ? zerocopy_sg_from_iter+0x110/0x110 [ 2118.122620] ? mark_held_locks+0x9e/0xe0 [ 2118.123065] skb_copy_datagram_iter+0x88/0x190 [ 2118.123574] tcp_recvmsg+0x13b5/0x2930 [ 2118.124031] ? tcp_splice_read+0x8c0/0x8c0 [ 2118.124509] ? sock_has_perm+0x1ea/0x280 [ 2118.124950] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2118.125513] ? lock_downgrade+0x6d0/0x6d0 [ 2118.125966] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2118.126559] ? tcp_splice_read+0x8c0/0x8c0 [ 2118.127009] inet6_recvmsg+0x13b/0x6e0 [ 2118.127427] ? inet6_bind+0x120/0x120 [ 2118.127854] ? security_socket_recvmsg+0x95/0xc0 [ 2118.128359] ? inet6_bind+0x120/0x120 [ 2118.128797] sock_recvmsg+0xff/0x180 [ 2118.129196] __sys_recvfrom+0x1be/0x2f0 [ 2118.129630] ? __ia32_sys_send+0x100/0x100 [ 2118.130082] ? lock_downgrade+0x6d0/0x6d0 [ 2118.130562] ? wait_for_completion_io+0x270/0x270 [ 2118.131098] ? rcu_read_lock_any_held+0x75/0xa0 [ 2118.131587] ? vfs_write+0x354/0xa70 [ 2118.132009] ? fput_many+0x2f/0x1a0 [ 2118.132425] ? ksys_write+0x1a9/0x260 [ 2118.132809] ? __ia32_sys_read+0xb0/0xb0 [ 2118.133256] __x64_sys_recvfrom+0xdd/0x1b0 [ 2118.133709] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2118.134259] do_syscall_64+0x33/0x40 [ 2118.134621] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2118.135109] RIP: 0033:0x7f848888eb19 [ 2118.135469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2118.137226] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2118.137954] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2118.138636] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2118.139304] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2118.139986] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2118.140663] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 [ 2118.142515] FAULT_INJECTION: forcing a failure. [ 2118.142515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2118.143928] CPU: 1 PID: 49213 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2118.144648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2118.145518] Call Trace: [ 2118.145801] dump_stack+0x107/0x167 [ 2118.146190] should_fail.cold+0x5/0xa [ 2118.146599] _copy_to_iter+0x264/0x12d0 [ 2118.147026] ? mark_lock+0xf5/0x2df0 [ 2118.147423] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2118.147985] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2118.148491] ? lock_chain_count+0x20/0x20 [ 2118.148918] ? __virt_addr_valid+0x128/0x350 [ 2118.149475] ? __check_object_size+0x319/0x440 [ 2118.149960] simple_copy_to_iter+0x4c/0x70 [ 2118.150403] __skb_datagram_iter+0x4f7/0x880 [ 2118.150868] ? zerocopy_sg_from_iter+0x110/0x110 [ 2118.151386] skb_copy_datagram_iter+0x88/0x190 [ 2118.151885] tcp_recvmsg+0x13b5/0x2930 [ 2118.152314] ? tcp_splice_read+0x8c0/0x8c0 [ 2118.152725] ? sock_has_perm+0x1ea/0x280 [ 2118.153158] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2118.153660] ? lock_downgrade+0x6d0/0x6d0 [ 2118.154077] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2118.154624] ? tcp_splice_read+0x8c0/0x8c0 [ 2118.155077] inet6_recvmsg+0x13b/0x6e0 03:20:40 executing program 6: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000100", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000400)=0x5) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000880)=@rc={0x1f, @none}, 0x80, &(0x7f0000000040), 0x1, 0x0, 0x13}, 0x2) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/70, 0x46, 0xfffffffffffffff8) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000180)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d707265393032390038372c34382c00305212dfa48c7000"/40]) mknodat$loop(r1, &(0x7f0000000240)='./mnt\x00', 0x0, 0x1) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f00000007c0)=""/150, 0x96}], 0x3, 0xcae, 0x0) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=unix,rootcontext=system_u,smackfsroot=prefer,fsmagic=0x0000000000000004,uid<', @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r2, @ANYRESHEX=r2]) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000005080)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="00040000"], 0x18}}], 0x1, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r4, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000001c0)=""/89, 0x59}], 0x3, 0x5545, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) [ 2118.155480] ? inet6_bind+0x120/0x120 [ 2118.156077] ? security_socket_recvmsg+0x95/0xc0 [ 2118.156569] ? inet6_bind+0x120/0x120 [ 2118.156974] sock_recvmsg+0xff/0x180 [ 2118.157379] __sys_recvfrom+0x1be/0x2f0 [ 2118.157805] ? __ia32_sys_send+0x100/0x100 [ 2118.158232] ? lock_downgrade+0x6d0/0x6d0 [ 2118.158689] ? wait_for_completion_io+0x270/0x270 [ 2118.159203] ? rcu_read_lock_any_held+0x75/0xa0 [ 2118.159700] ? vfs_write+0x354/0xa70 [ 2118.160113] ? fput_many+0x2f/0x1a0 [ 2118.160505] ? ksys_write+0x1a9/0x260 [ 2118.160850] ? __ia32_sys_read+0xb0/0xb0 [ 2118.161285] __x64_sys_recvfrom+0xdd/0x1b0 [ 2118.161727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2118.162206] do_syscall_64+0x33/0x40 03:20:40 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) [ 2118.162586] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2118.163224] RIP: 0033:0x7fcd1f4c0b19 [ 2118.163696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2118.165238] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2118.165893] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2118.166471] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2118.167082] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2118.167668] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2118.168301] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:20:40 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x4000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 2118.279174] FAULT_INJECTION: forcing a failure. [ 2118.279174] name failslab, interval 1, probability 0, space 0, times 0 [ 2118.280670] CPU: 1 PID: 49180 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 2118.281396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2118.282268] Call Trace: [ 2118.282554] dump_stack+0x107/0x167 [ 2118.282955] should_fail.cold+0x5/0xa [ 2118.283380] should_failslab+0x5/0x20 [ 2118.283791] __kmalloc_node_track_caller+0x74/0x3b0 [ 2118.284355] ? __tcp_send_ack.part.0+0x67/0x650 [ 2118.284851] __alloc_skb+0xb1/0x5b0 [ 2118.285259] __tcp_send_ack.part.0+0x67/0x650 [ 2118.285734] tcp_send_ack+0x7d/0xa0 [ 2118.286118] tcp_cleanup_rbuf+0x468/0x5a0 [ 2118.286572] tcp_recvmsg+0x868/0x2930 [ 2118.286993] ? tcp_splice_read+0x8c0/0x8c0 [ 2118.287486] ? sock_has_perm+0x1ea/0x280 [ 2118.287927] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2118.288513] ? lock_downgrade+0x6d0/0x6d0 [ 2118.288953] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2118.289536] ? tcp_splice_read+0x8c0/0x8c0 [ 2118.289995] inet6_recvmsg+0x13b/0x6e0 [ 2118.290415] ? inet6_bind+0x120/0x120 [ 2118.290861] ? security_socket_recvmsg+0x95/0xc0 [ 2118.291356] ? inet6_bind+0x120/0x120 [ 2118.291796] sock_recvmsg+0xff/0x180 [ 2118.292207] __sys_recvfrom+0x1be/0x2f0 [ 2118.292632] ? __ia32_sys_send+0x100/0x100 [ 2118.293107] ? lock_downgrade+0x6d0/0x6d0 [ 2118.293584] ? wait_for_completion_io+0x270/0x270 [ 2118.294130] ? rcu_read_lock_any_held+0x75/0xa0 [ 2118.294619] ? vfs_write+0x354/0xa70 [ 2118.295047] ? fput_many+0x2f/0x1a0 [ 2118.295437] ? ksys_write+0x1a9/0x260 [ 2118.295849] ? __ia32_sys_read+0xb0/0xb0 [ 2118.296321] __x64_sys_recvfrom+0xdd/0x1b0 [ 2118.296688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2118.297123] do_syscall_64+0x33/0x40 [ 2118.297478] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2118.297890] RIP: 0033:0x7f2e54dfeb19 [ 2118.298228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2118.299816] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2118.300490] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 2118.301103] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2118.301814] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2118.302628] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2118.303513] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 [ 2118.363043] tmpfs: Bad value for 'mpol' [ 2118.375650] tmpfs: Bad value for 'mpol' 03:20:40 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, 0x0, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:20:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000001201, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:20:40 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000440)='./file0\x00', 0x400) inotify_init1(0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/94, 0x5e}], 0x1, 0xfffffffd, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = timerfd_create(0x9, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') r6 = dup3(r5, r4, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000240)={0x5, 0x3ff, 0x9, 0x0, 0x0, [{{}, 0x7}, {{}, 0x8}, {{}, 0x8}, {{r6}, 0x7}, {{}, 0x8}, {{}, 0x1ff}, {}, {{r2}, 0x9}, {{r3}, 0x557}]}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, r7}}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r1, &(0x7f0000000000)={0x400, 0x0, 0x5}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r7}}, 0x79) rmdir(&(0x7f0000000180)='./file0\x00') 03:20:40 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x8000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:20:52 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, 0x0, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:20:52 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x100000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:20:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000001600, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:20:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 28) 03:20:52 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:20:52 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 2) 03:20:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 6) 03:20:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="50020000170001000000000000000000fc020000000000dd00000000000000010000000000000000ac1414720056d385c61425a53d00000000000000830000000000001d00000000fc00000000000000edff00000000000000000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200100000000000000000000000000027f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x250}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0xb8, 0x464, 0x400, 0x70bd2a, 0x25dfdbff, "8e9226c74193b7b5b72b733726b6bb48808ba3cdd6a345917bdbb1c08f57e612c77a4b7928584e92dea2e5b7ebb9b2804343c2e8384e7cf254b37b1c8e621fc79ba4559b51921ea4411c09185e31369d8a3eb020edebbc0348e4075cdba7fea8f658f39ce65cdee4450b834dc20952bf9b749651fd317bb6696de86bd28d24a86eafb340e5a960905deefa5ed9e5d1cb850a4e9752c96c15d92eeb8d33cb9a5c84db452fe2", ["", "", "", "", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0x20040}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x238040, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x105b40, 0x0) kcmp(0x0, 0x0, 0x0, r3, r0) r4 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0xffffffffffffffff) close(r4) sendfile(r4, r1, &(0x7f0000000000)=0x4, 0x0) unshare(0x48020200) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)={0x12b4, 0x21, 0x400, 0x70bd25, 0x25dfdbff, {0xd}, [@typed={0x8, 0x5c, 0x0, 0x0, @uid=0xee01}, @generic="f998933fc17d21b478a5167d662e64fb93a489022cfa41c99c6a5f0a7814ba19f19e1db289b67924c72f6f54d9d049d949553fb748bf3cd25d83a26086b367c11859e5a9adb69a6db3e8a8a5dcccdff34dae7341213cc4b2ec7cf5920571aa60fa17c7b3a56d9ba837ff12a1bca41dc358709ed3144a6f094fa62f3e5560c5f4182186e0f7f9612a3e1e2d9c3beaf8516bfdd91bea031bf1e66547d4765efaa589c12c67a636e1efe2c4de8e68d25e2d6d3171b10a622aa0fdc718a43de8b3e4057740af265749ff07c8faa2d457e51e65b9d16be641ac304ab1d9faca71b7882106bd3686d45d961f62bd39e27e95a04b36", @typed={0xc, 0x3c, 0x0, 0x0, @binary="0c3283e0ed0720b8"}, @generic="8c370052ffc1537bc01c5161c433eb34511342ba2d84635c40881940e93d45d78a0cf2e788a5a88418b579", @nested={0x101c, 0x6d, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @generic="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", @typed={0xe, 0x27, 0x0, 0x0, @str='/dev/zero\x00'}]}, @nested={0x10f, 0x2, 0x0, 0x1, [@generic="a46b4333172a23d113af9c8aa044cc2e4fd35f2a937bb92c951a39461cc2998701819f9df0993214b8deabe42e41e29e1b0e492dd15c6ffc44a8d9fcb651e8291fbbbec9190fd24c494002736808f4631326109848b57622a0b1b9fa2ec7b4e4aa5830af942ac7db32f2a2fb918f15dccb90b4a41004e48efc58122831ae8d5b1c041a7e2a5a2c9b42e73ed16a0468b3de8db245ede6ae736375a00c3b5ce0157cd2fa1e9e0aed88b101c6847e578c58de4eed671040eb2a25187c9d106ea1e6d0313134664445167ec23b22b275b81601c5eec8d3ece9c2d20d7d5f13733f371b6253f331085e92", @typed={0x8, 0x45, 0x0, 0x0, @uid=0xee01}, @generic="9d00f5c0d6d7861144bf12ee973109caf5fa0868059f77dc0197b6"]}, @generic="cca3390191b1fb72a5d59b3b433e0f56839d790e9c740d0fddbfda3972e211b723f9b35f6d763e70461cfa88d0bd", @typed={0x6, 0x39, 0x0, 0x0, @str='-\x00'}, @typed={0xc, 0x28, 0x0, 0x0, @u64=0x2}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r5, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x0) 03:20:52 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, 0x0, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) [ 2130.568656] FAULT_INJECTION: forcing a failure. [ 2130.568656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2130.570239] CPU: 1 PID: 49566 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2130.570986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2130.571829] Call Trace: [ 2130.572116] dump_stack+0x107/0x167 [ 2130.572495] should_fail.cold+0x5/0xa [ 2130.572901] _copy_to_iter+0x264/0x12d0 [ 2130.573341] ? mark_lock+0xf5/0x2df0 [ 2130.573729] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2130.574302] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2130.574805] ? lock_chain_count+0x20/0x20 [ 2130.575257] ? __virt_addr_valid+0x128/0x350 [ 2130.575719] ? __check_object_size+0x319/0x440 [ 2130.576204] simple_copy_to_iter+0x4c/0x70 [ 2130.576635] __skb_datagram_iter+0x4f7/0x880 [ 2130.577081] ? zerocopy_sg_from_iter+0x110/0x110 [ 2130.577595] skb_copy_datagram_iter+0x88/0x190 [ 2130.578057] tcp_recvmsg+0x13b5/0x2930 [ 2130.578468] ? tcp_splice_read+0x8c0/0x8c0 [ 2130.578904] ? sock_has_perm+0x1ea/0x280 [ 2130.579328] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2130.579861] ? lock_downgrade+0x6d0/0x6d0 [ 2130.580302] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2130.580838] ? tcp_splice_read+0x8c0/0x8c0 [ 2130.581277] inet6_recvmsg+0x13b/0x6e0 [ 2130.581689] ? inet6_bind+0x120/0x120 [ 2130.582079] ? security_socket_recvmsg+0x95/0xc0 [ 2130.582587] ? inet6_bind+0x120/0x120 [ 2130.582964] sock_recvmsg+0xff/0x180 [ 2130.583356] __sys_recvfrom+0x1be/0x2f0 [ 2130.583762] ? __ia32_sys_send+0x100/0x100 [ 2130.584189] ? lock_downgrade+0x6d0/0x6d0 [ 2130.584642] ? wait_for_completion_io+0x270/0x270 [ 2130.585129] ? rcu_read_lock_any_held+0x75/0xa0 [ 2130.585626] ? vfs_write+0x354/0xa70 [ 2130.586014] ? fput_many+0x2f/0x1a0 [ 2130.586407] ? ksys_write+0x1a9/0x260 [ 2130.586799] ? __ia32_sys_read+0xb0/0xb0 [ 2130.587216] __x64_sys_recvfrom+0xdd/0x1b0 [ 2130.587672] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2130.588206] do_syscall_64+0x33/0x40 [ 2130.588605] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2130.589123] RIP: 0033:0x7fcd1f4c0b19 [ 2130.589530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2130.591396] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2130.592179] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2130.592916] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2130.593661] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2130.594399] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2130.595112] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 [ 2130.611067] FAULT_INJECTION: forcing a failure. [ 2130.611067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2130.612360] CPU: 1 PID: 49567 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2130.613040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2130.613904] Call Trace: [ 2130.614179] dump_stack+0x107/0x167 [ 2130.614576] should_fail.cold+0x5/0xa [ 2130.614968] _copy_to_iter+0x264/0x12d0 [ 2130.615391] ? mark_lock+0xf5/0x2df0 [ 2130.615774] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2130.616321] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2130.616827] ? lock_chain_count+0x20/0x20 [ 2130.617257] ? __virt_addr_valid+0x128/0x350 [ 2130.617716] ? __check_object_size+0x319/0x440 [ 2130.618191] simple_copy_to_iter+0x4c/0x70 [ 2130.618644] __skb_datagram_iter+0x4f7/0x880 [ 2130.619096] ? zerocopy_sg_from_iter+0x110/0x110 [ 2130.619611] skb_copy_datagram_iter+0x88/0x190 [ 2130.620086] tcp_recvmsg+0x13b5/0x2930 [ 2130.620500] ? tcp_splice_read+0x8c0/0x8c0 [ 2130.620974] ? sock_has_perm+0x1ea/0x280 [ 2130.621394] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2130.621932] ? lock_downgrade+0x6d0/0x6d0 [ 2130.622382] ? perf_trace_lock+0xac/0x490 [ 2130.622814] ? tcp_splice_read+0x8c0/0x8c0 [ 2130.623240] inet6_recvmsg+0x13b/0x6e0 [ 2130.623660] ? inet6_bind+0x120/0x120 [ 2130.624061] ? security_socket_recvmsg+0x95/0xc0 [ 2130.624572] ? inet6_bind+0x120/0x120 [ 2130.624989] sock_recvmsg+0xff/0x180 [ 2130.625392] __sys_recvfrom+0x1be/0x2f0 [ 2130.625806] ? __ia32_sys_send+0x100/0x100 [ 2130.626416] ? lock_downgrade+0x6d0/0x6d0 [ 2130.626856] ? wait_for_completion_io+0x270/0x270 [ 2130.627390] ? rcu_read_lock_any_held+0x75/0xa0 [ 2130.627866] ? vfs_write+0x354/0xa70 [ 2130.628268] ? fput_many+0x2f/0x1a0 [ 2130.628640] ? ksys_write+0x1a9/0x260 [ 2130.629037] ? __ia32_sys_read+0xb0/0xb0 [ 2130.629455] __x64_sys_recvfrom+0xdd/0x1b0 [ 2130.629887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2130.630410] do_syscall_64+0x33/0x40 [ 2130.630785] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2130.631314] RIP: 0033:0x7f848888eb19 [ 2130.631719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2130.633543] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2130.634315] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2130.635032] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2130.635761] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2130.636535] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2130.637255] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 03:20:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000001800, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:20:52 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x200000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:20:52 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:20:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="50020000170001000000000000000000fc020000000000dd00000000000000010000000000000000ac1414720056d385c61425a53d00000000000000830000000000001d00000000fc00000000000000edff00000000000000000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200100000000000000000000000000027f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x250}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0xb8, 0x464, 0x400, 0x70bd2a, 0x25dfdbff, "8e9226c74193b7b5b72b733726b6bb48808ba3cdd6a345917bdbb1c08f57e612c77a4b7928584e92dea2e5b7ebb9b2804343c2e8384e7cf254b37b1c8e621fc79ba4559b51921ea4411c09185e31369d8a3eb020edebbc0348e4075cdba7fea8f658f39ce65cdee4450b834dc20952bf9b749651fd317bb6696de86bd28d24a86eafb340e5a960905deefa5ed9e5d1cb850a4e9752c96c15d92eeb8d33cb9a5c84db452fe2", ["", "", "", "", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0x20040}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x238040, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x105b40, 0x0) kcmp(0x0, 0x0, 0x0, r3, r0) r4 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0xffffffffffffffff) close(r4) sendfile(r4, r1, &(0x7f0000000000)=0x4, 0x0) unshare(0x48020200) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)={0x12b4, 0x21, 0x400, 0x70bd25, 0x25dfdbff, {0xd}, [@typed={0x8, 0x5c, 0x0, 0x0, @uid=0xee01}, @generic="f998933fc17d21b478a5167d662e64fb93a489022cfa41c99c6a5f0a7814ba19f19e1db289b67924c72f6f54d9d049d949553fb748bf3cd25d83a26086b367c11859e5a9adb69a6db3e8a8a5dcccdff34dae7341213cc4b2ec7cf5920571aa60fa17c7b3a56d9ba837ff12a1bca41dc358709ed3144a6f094fa62f3e5560c5f4182186e0f7f9612a3e1e2d9c3beaf8516bfdd91bea031bf1e66547d4765efaa589c12c67a636e1efe2c4de8e68d25e2d6d3171b10a622aa0fdc718a43de8b3e4057740af265749ff07c8faa2d457e51e65b9d16be641ac304ab1d9faca71b7882106bd3686d45d961f62bd39e27e95a04b36", @typed={0xc, 0x3c, 0x0, 0x0, @binary="0c3283e0ed0720b8"}, @generic="8c370052ffc1537bc01c5161c433eb34511342ba2d84635c40881940e93d45d78a0cf2e788a5a88418b579", @nested={0x101c, 0x6d, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @generic="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", @typed={0xe, 0x27, 0x0, 0x0, @str='/dev/zero\x00'}]}, @nested={0x10f, 0x2, 0x0, 0x1, [@generic="a46b4333172a23d113af9c8aa044cc2e4fd35f2a937bb92c951a39461cc2998701819f9df0993214b8deabe42e41e29e1b0e492dd15c6ffc44a8d9fcb651e8291fbbbec9190fd24c494002736808f4631326109848b57622a0b1b9fa2ec7b4e4aa5830af942ac7db32f2a2fb918f15dccb90b4a41004e48efc58122831ae8d5b1c041a7e2a5a2c9b42e73ed16a0468b3de8db245ede6ae736375a00c3b5ce0157cd2fa1e9e0aed88b101c6847e578c58de4eed671040eb2a25187c9d106ea1e6d0313134664445167ec23b22b275b81601c5eec8d3ece9c2d20d7d5f13733f371b6253f331085e92", @typed={0x8, 0x45, 0x0, 0x0, @uid=0xee01}, @generic="9d00f5c0d6d7861144bf12ee973109caf5fa0868059f77dc0197b6"]}, @generic="cca3390191b1fb72a5d59b3b433e0f56839d790e9c740d0fddbfda3972e211b723f9b35f6d763e70461cfa88d0bd", @typed={0x6, 0x39, 0x0, 0x0, @str='-\x00'}, @typed={0xc, 0x28, 0x0, 0x0, @u64=0x2}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r5, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x0) [ 2130.825913] FAULT_INJECTION: forcing a failure. [ 2130.825913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2130.827326] CPU: 1 PID: 49563 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 2130.828014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2130.828850] Call Trace: [ 2130.829126] dump_stack+0x107/0x167 [ 2130.829509] should_fail.cold+0x5/0xa [ 2130.829915] _copy_to_iter+0x264/0x12d0 [ 2130.830326] ? __schedule+0x82c/0x1ea0 [ 2130.830718] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2130.831211] ? __virt_addr_valid+0x128/0x350 [ 2130.831651] ? __check_object_size+0x319/0x440 [ 2130.832134] simple_copy_to_iter+0x4c/0x70 [ 2130.832561] __skb_datagram_iter+0x4f7/0x880 [ 2130.833010] ? zerocopy_sg_from_iter+0x110/0x110 [ 2130.833492] skb_copy_datagram_iter+0x88/0x190 [ 2130.833951] tcp_recvmsg+0x13b5/0x2930 [ 2130.834360] ? tcp_splice_read+0x8c0/0x8c0 [ 2130.834790] ? sock_has_perm+0x1ea/0x280 [ 2130.835199] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2130.835710] ? lock_downgrade+0x6d0/0x6d0 [ 2130.836144] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2130.836674] ? tcp_splice_read+0x8c0/0x8c0 [ 2130.837087] inet6_recvmsg+0x13b/0x6e0 [ 2130.837480] ? inet6_bind+0x120/0x120 [ 2130.837868] ? security_socket_recvmsg+0x95/0xc0 [ 2130.838340] ? inet6_bind+0x120/0x120 [ 2130.838729] sock_recvmsg+0xff/0x180 [ 2130.839104] __sys_recvfrom+0x1be/0x2f0 [ 2130.839501] ? __ia32_sys_send+0x100/0x100 [ 2130.839920] ? lock_downgrade+0x6d0/0x6d0 [ 2130.840367] ? wait_for_completion_io+0x270/0x270 [ 2130.840850] ? rcu_read_lock_any_held+0x75/0xa0 [ 2130.841313] ? vfs_write+0x354/0xa70 [ 2130.841687] ? fput_many+0x2f/0x1a0 [ 2130.842056] ? ksys_write+0x1a9/0x260 [ 2130.842437] ? __ia32_sys_read+0xb0/0xb0 [ 2130.842845] __x64_sys_recvfrom+0xdd/0x1b0 [ 2130.843270] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2130.843780] do_syscall_64+0x33/0x40 [ 2130.844172] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2130.844689] RIP: 0033:0x7f2e54dfeb19 [ 2130.845060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2130.846865] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2130.847622] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 2130.848340] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2130.849035] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2130.849737] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2130.850436] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:20:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000002000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:20:53 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:20:53 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000002010, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:20:53 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x700000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:21:06 executing program 6: flock(0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x9}]}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'erspan0\x00'}) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0}], 0x3) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040804}, 0x80) r2 = eventfd(0x4) bind$802154_raw(r0, &(0x7f0000000200)={0x24, @none={0x0, 0x3}}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x7) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x200) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000002c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee01}}, './file1\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0xffffffffdffffff5}, {&(0x7f0000000240)="020000000300000004", 0x9, 0x2}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000500)={[{@noacl}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x63, 0x34, 0x37, 0x62, 0x50, 0x61, 0x39], 0x2d, [0x37, 0x63, 0xe1d26ec273c7800, 0x63], 0x2d, [0x37, 0x32, 0x62, 0xc0], 0x2d, [0x65, 0x66, 0x37, 0x30], 0x2d, [0x37, 0x66, 0x32, 0x66, 0x35, 0x30, 0x66, 0x55]}}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', r4}}]}) 03:21:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 7) 03:21:06 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:21:06 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x800000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:21:06 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:21:06 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 3) 03:21:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 29) 03:21:06 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000002e00, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2144.636819] FAULT_INJECTION: forcing a failure. [ 2144.636819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2144.639148] CPU: 1 PID: 49925 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2144.640252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2144.641496] Call Trace: [ 2144.641907] dump_stack+0x107/0x167 [ 2144.642470] should_fail.cold+0x5/0xa [ 2144.643056] _copy_to_iter+0x264/0x12d0 [ 2144.643678] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2144.644437] ? __virt_addr_valid+0x1b2/0x350 [ 2144.645103] ? __virt_addr_valid+0x128/0x350 [ 2144.645776] ? __check_object_size+0x319/0x440 [ 2144.646478] simple_copy_to_iter+0x4c/0x70 [ 2144.646489] Unsupported ieee802154 address type: 0 [ 2144.647129] __skb_datagram_iter+0x4f7/0x880 [ 2144.647158] ? zerocopy_sg_from_iter+0x110/0x110 [ 2144.647187] skb_copy_datagram_iter+0x88/0x190 [ 2144.647211] tcp_recvmsg+0x13b5/0x2930 [ 2144.650778] ? tcp_splice_read+0x8c0/0x8c0 [ 2144.651445] ? sock_has_perm+0x1ea/0x280 [ 2144.652112] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2144.652918] ? lock_downgrade+0x6d0/0x6d0 [ 2144.653590] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2144.654415] ? tcp_splice_read+0x8c0/0x8c0 [ 2144.655066] inet6_recvmsg+0x13b/0x6e0 [ 2144.655675] ? inet6_bind+0x120/0x120 [ 2144.656283] ? security_socket_recvmsg+0x95/0xc0 [ 2144.657021] ? inet6_bind+0x120/0x120 [ 2144.657609] sock_recvmsg+0xff/0x180 [ 2144.658196] __sys_recvfrom+0x1be/0x2f0 [ 2144.658814] ? __ia32_sys_send+0x100/0x100 [ 2144.659476] ? lock_downgrade+0x6d0/0x6d0 [ 2144.660168] ? wait_for_completion_io+0x270/0x270 [ 2144.660912] ? rcu_read_lock_any_held+0x75/0xa0 [ 2144.661651] ? vfs_write+0x354/0xa70 [ 2144.662224] ? fput_many+0x2f/0x1a0 [ 2144.662805] ? ksys_write+0x1a9/0x260 [ 2144.663392] ? __ia32_sys_read+0xb0/0xb0 [ 2144.664044] __x64_sys_recvfrom+0xdd/0x1b0 [ 2144.664720] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2144.665552] do_syscall_64+0x33/0x40 [ 2144.666143] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2144.666941] RIP: 0033:0x7f848888eb19 [ 2144.667511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2144.670312] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2144.671549] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2144.672685] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 03:21:06 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x900000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 2144.673815] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2144.675171] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2144.676436] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 [ 2144.681205] FAULT_INJECTION: forcing a failure. [ 2144.681205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2144.683596] CPU: 1 PID: 49927 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2144.684819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2144.686172] Call Trace: [ 2144.686603] dump_stack+0x107/0x167 [ 2144.687164] should_fail.cold+0x5/0xa [ 2144.687789] _copy_to_iter+0x264/0x12d0 [ 2144.688408] ? mark_lock+0xf5/0x2df0 [ 2144.689008] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2144.689803] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2144.690594] ? lock_chain_count+0x20/0x20 [ 2144.691221] ? __virt_addr_valid+0x128/0x350 [ 2144.691933] ? __check_object_size+0x319/0x440 [ 2144.692640] simple_copy_to_iter+0x4c/0x70 [ 2144.693322] __skb_datagram_iter+0x4f7/0x880 [ 2144.693998] ? zerocopy_sg_from_iter+0x110/0x110 [ 2144.694771] skb_copy_datagram_iter+0x88/0x190 [ 2144.695465] tcp_recvmsg+0x13b5/0x2930 [ 2144.696110] ? tcp_splice_read+0x8c0/0x8c0 [ 2144.696768] ? sock_has_perm+0x1ea/0x280 [ 2144.697425] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2144.698201] ? lock_downgrade+0x6d0/0x6d0 [ 2144.698863] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2144.699654] ? tcp_splice_read+0x8c0/0x8c0 [ 2144.700341] inet6_recvmsg+0x13b/0x6e0 [ 2144.700929] ? inet6_bind+0x120/0x120 [ 2144.701545] ? security_socket_recvmsg+0x95/0xc0 [ 2144.702255] ? inet6_bind+0x120/0x120 [ 2144.702864] sock_recvmsg+0xff/0x180 [ 2144.703434] __sys_recvfrom+0x1be/0x2f0 [ 2144.704074] ? __ia32_sys_send+0x100/0x100 [ 2144.704734] ? lock_downgrade+0x6d0/0x6d0 [ 2144.705428] ? wait_for_completion_io+0x270/0x270 [ 2144.706265] ? rcu_read_lock_any_held+0x75/0xa0 [ 2144.707063] ? vfs_write+0x354/0xa70 [ 2144.707656] ? fput_many+0x2f/0x1a0 [ 2144.708345] ? ksys_write+0x1a9/0x260 [ 2144.708975] ? __ia32_sys_read+0xb0/0xb0 [ 2144.709731] __x64_sys_recvfrom+0xdd/0x1b0 [ 2144.710402] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2144.711210] do_syscall_64+0x33/0x40 [ 2144.711798] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2144.712612] RIP: 0033:0x7fcd1f4c0b19 [ 2144.713196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2144.716297] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2144.717683] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2144.718967] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2144.720080] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2144.721208] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2144.722356] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 [ 2144.763414] audit: type=1326 audit(1708485666.864:199): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=49848 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a3a52db19 code=0x0 03:21:06 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:21:06 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000002f00, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2144.825536] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 2144.825536] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2144.825536] [ 2144.827709] EXT4-fs (loop6): Unrecognized mount option "fsuuid=fc47bPa9-7c" or missing value [ 2144.859639] FAULT_INJECTION: forcing a failure. [ 2144.859639] name failslab, interval 1, probability 0, space 0, times 0 [ 2144.861780] CPU: 1 PID: 49926 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 2144.862890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2144.864614] Call Trace: [ 2144.865046] dump_stack+0x107/0x167 [ 2144.865675] should_fail.cold+0x5/0xa [ 2144.866293] ? __alloc_skb+0x6d/0x5b0 [ 2144.866914] should_failslab+0x5/0x20 [ 2144.867535] kmem_cache_alloc_node+0x55/0x330 [ 2144.868274] __alloc_skb+0x6d/0x5b0 [ 2144.869001] ? ktime_get+0x158/0x1f0 [ 2144.869691] __tcp_send_ack.part.0+0x67/0x650 [ 2144.870505] tcp_send_ack+0x7d/0xa0 [ 2144.871088] tcp_cleanup_rbuf+0x468/0x5a0 [ 2144.871759] tcp_recvmsg+0x868/0x2930 [ 2144.872400] ? tcp_splice_read+0x8c0/0x8c0 [ 2144.873089] ? sock_has_perm+0x1ea/0x280 [ 2144.873838] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2144.874836] ? lock_downgrade+0x6d0/0x6d0 [ 2144.875509] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2144.876448] ? tcp_splice_read+0x8c0/0x8c0 [ 2144.877125] inet6_recvmsg+0x13b/0x6e0 [ 2144.877942] ? inet6_bind+0x120/0x120 [ 2144.878561] ? security_socket_recvmsg+0x95/0xc0 [ 2144.879405] ? inet6_bind+0x120/0x120 [ 2144.880149] sock_recvmsg+0xff/0x180 [ 2144.880762] __sys_recvfrom+0x1be/0x2f0 [ 2144.881401] ? __ia32_sys_send+0x100/0x100 [ 2144.882071] ? lock_downgrade+0x6d0/0x6d0 [ 2144.882759] ? wait_for_completion_io+0x270/0x270 [ 2144.883533] ? rcu_read_lock_any_held+0x75/0xa0 [ 2144.884290] ? vfs_write+0x354/0xa70 [ 2144.884892] ? fput_many+0x2f/0x1a0 [ 2144.885475] ? ksys_write+0x1a9/0x260 [ 2144.886086] ? __ia32_sys_read+0xb0/0xb0 [ 2144.886744] __x64_sys_recvfrom+0xdd/0x1b0 [ 2144.887421] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2144.888255] do_syscall_64+0x33/0x40 [ 2144.888852] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2144.889672] RIP: 0033:0x7f2e54dfeb19 [ 2144.890358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2144.893584] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2144.895003] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 2144.896345] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2144.897549] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2144.898758] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2144.899904] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 [ 2144.911688] audit: type=1326 audit(1708485667.013:200): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=49848 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a3a52db19 code=0x0 [ 2144.916789] Unsupported ieee802154 address type: 0 03:21:07 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001900)=[{0x0, 0x0, 0x7fff}]) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000003300)=ANY=[@ANYBLOB="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"/6529], 0x1978) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) dup(r1) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@nl=@unspec}, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x4000010, 0xffffffffffffffff, 0x8000000) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_open_dev$rtc(&(0x7f00000000c0), 0x100000001, 0x40) 03:21:07 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:21:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000002ff2, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:21:07 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xa00000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:21:07 executing program 6: syz_io_uring_setup(0xb54, &(0x7f0000000040), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, 0x13, 0x1, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x93, 0x0, 0x1, [@typed={0x8, 0x1a, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0x6e) 03:21:07 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:21:19 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x88) lseek(r1, 0x800, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r4, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) fstatfs(r5, &(0x7f0000000000)=""/34) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="01000002a8f68ad8bb000100", @ANYRES32=r3, @ANYBLOB="ff0f0000000000002e2f66696c653100"]) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x9101) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file1\x00', 0x40, 0x0) sendfile(r1, r3, 0x0, 0x100000001) 03:21:19 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 4) 03:21:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 30) 03:21:19 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:21:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 8) 03:21:19 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:21:19 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xb00000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:21:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000003000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:21:19 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) [ 2157.310726] FAULT_INJECTION: forcing a failure. [ 2157.310726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2157.311829] CPU: 0 PID: 50268 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2157.312451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2157.313218] Call Trace: [ 2157.313465] dump_stack+0x107/0x167 [ 2157.313789] should_fail.cold+0x5/0xa [ 2157.314141] _copy_to_iter+0x264/0x12d0 [ 2157.314508] ? mark_lock+0xf5/0x2df0 [ 2157.314848] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2157.315321] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2157.315764] ? lock_chain_count+0x20/0x20 [ 2157.316130] ? __virt_addr_valid+0x128/0x350 [ 2157.316541] ? __check_object_size+0x319/0x440 [ 2157.316956] simple_copy_to_iter+0x4c/0x70 [ 2157.317342] __skb_datagram_iter+0x4f7/0x880 [ 2157.317744] ? zerocopy_sg_from_iter+0x110/0x110 [ 2157.318169] skb_copy_datagram_iter+0x88/0x190 [ 2157.318583] tcp_recvmsg+0x13b5/0x2930 [ 2157.318944] ? tcp_splice_read+0x8c0/0x8c0 [ 2157.319325] ? sock_has_perm+0x1ea/0x280 [ 2157.319698] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2157.320153] ? lock_downgrade+0x6d0/0x6d0 [ 2157.320539] ? perf_trace_lock+0xac/0x490 [ 2157.320911] ? tcp_splice_read+0x8c0/0x8c0 [ 2157.321290] inet6_recvmsg+0x13b/0x6e0 [ 2157.321645] ? inet6_bind+0x120/0x120 [ 2157.321981] ? security_socket_recvmsg+0x95/0xc0 [ 2157.322412] ? inet6_bind+0x120/0x120 [ 2157.322747] sock_recvmsg+0xff/0x180 [ 2157.323085] __sys_recvfrom+0x1be/0x2f0 [ 2157.323441] ? __ia32_sys_send+0x100/0x100 [ 2157.323822] ? lock_downgrade+0x6d0/0x6d0 [ 2157.324206] ? wait_for_completion_io+0x270/0x270 [ 2157.324654] ? rcu_read_lock_any_held+0x75/0xa0 [ 2157.325063] ? vfs_write+0x354/0xa70 [ 2157.325410] ? fput_many+0x2f/0x1a0 [ 2157.325731] ? ksys_write+0x1a9/0x260 [ 2157.326071] ? __ia32_sys_read+0xb0/0xb0 [ 2157.326440] __x64_sys_recvfrom+0xdd/0x1b0 [ 2157.326821] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2157.327283] do_syscall_64+0x33/0x40 [ 2157.327614] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2157.328067] RIP: 0033:0x7f848888eb19 [ 2157.328411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2157.330061] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2157.330753] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2157.331403] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2157.332045] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2157.332694] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2157.333348] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 [ 2157.351522] FAULT_INJECTION: forcing a failure. [ 2157.351522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2157.352886] CPU: 0 PID: 50311 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2157.353505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2157.354239] Call Trace: [ 2157.354477] dump_stack+0x107/0x167 [ 2157.354801] should_fail.cold+0x5/0xa [ 2157.355145] _copy_to_iter+0x264/0x12d0 [ 2157.355505] ? mark_lock+0xf5/0x2df0 [ 2157.355837] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2157.356307] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2157.356755] ? lock_chain_count+0x20/0x20 [ 2157.357127] ? __virt_addr_valid+0x128/0x350 [ 2157.357524] ? __check_object_size+0x319/0x440 [ 2157.357937] simple_copy_to_iter+0x4c/0x70 [ 2157.358314] __skb_datagram_iter+0x4f7/0x880 [ 2157.358709] ? zerocopy_sg_from_iter+0x110/0x110 [ 2157.359129] skb_copy_datagram_iter+0x88/0x190 [ 2157.359539] tcp_recvmsg+0x13b5/0x2930 [ 2157.359901] ? tcp_splice_read+0x8c0/0x8c0 [ 2157.360290] ? sock_has_perm+0x1ea/0x280 [ 2157.360658] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2157.361118] ? lock_downgrade+0x6d0/0x6d0 [ 2157.361483] ? perf_trace_lock+0xac/0x490 [ 2157.361854] ? tcp_splice_read+0x8c0/0x8c0 [ 2157.362231] inet6_recvmsg+0x13b/0x6e0 [ 2157.362578] ? inet6_bind+0x120/0x120 [ 2157.362920] ? security_socket_recvmsg+0x95/0xc0 [ 2157.363344] ? inet6_bind+0x120/0x120 [ 2157.363685] sock_recvmsg+0xff/0x180 [ 2157.364019] __sys_recvfrom+0x1be/0x2f0 [ 2157.364398] ? __ia32_sys_send+0x100/0x100 [ 2157.364770] ? lock_downgrade+0x6d0/0x6d0 [ 2157.365153] ? wait_for_completion_io+0x270/0x270 [ 2157.365588] ? rcu_read_lock_any_held+0x75/0xa0 [ 2157.366000] ? vfs_write+0x354/0xa70 [ 2157.366367] ? fput_many+0x2f/0x1a0 [ 2157.366703] ? ksys_write+0x1a9/0x260 [ 2157.367054] ? __ia32_sys_read+0xb0/0xb0 [ 2157.367435] __x64_sys_recvfrom+0xdd/0x1b0 [ 2157.367836] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2157.368311] do_syscall_64+0x33/0x40 [ 2157.368670] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2157.369141] RIP: 0033:0x7fcd1f4c0b19 [ 2157.369494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2157.371136] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2157.371824] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2157.372481] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2157.373116] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 03:21:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000300e, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2157.373740] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2157.374549] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:21:19 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1000000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:21:19 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) [ 2157.541164] FAULT_INJECTION: forcing a failure. [ 2157.541164] name failslab, interval 1, probability 0, space 0, times 0 [ 2157.542397] CPU: 0 PID: 50308 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 2157.543022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2157.543763] Call Trace: [ 2157.544007] dump_stack+0x107/0x167 [ 2157.544342] should_fail.cold+0x5/0xa [ 2157.544708] should_failslab+0x5/0x20 [ 2157.545058] __kmalloc_node_track_caller+0x74/0x3b0 [ 2157.545509] ? tcp_collapse+0x42c/0xf20 [ 2157.545871] __alloc_skb+0xb1/0x5b0 [ 2157.546202] tcp_collapse+0x42c/0xf20 [ 2157.546553] ? tcp_queue_rcv+0x7c0/0x7c0 [ 2157.546920] ? tcp_xmit_retransmit_queue+0x57/0x70 [ 2157.547359] ? tcp_xmit_recovery+0x86/0x180 [ 2157.547744] ? tcp_ack+0xeef/0x5690 [ 2157.548080] tcp_try_rmem_schedule+0xb8a/0x1690 [ 2157.548520] tcp_data_queue+0x16ba/0x47f0 [ 2157.548904] ? tcp_data_ready+0x500/0x500 [ 2157.549275] ? tcp_urg.part.0+0x157/0x2e0 [ 2157.549649] ? tcp_try_keep_open+0x2f0/0x2f0 [ 2157.550045] ? tcp_validate_incoming+0x431/0x16a0 [ 2157.550483] ? tcp_check_urg.isra.0+0x1db/0x720 [ 2157.550902] tcp_rcv_established+0x868/0x1e30 [ 2157.551315] ? tcp_check_space+0x6c0/0x6c0 [ 2157.551703] tcp_v6_do_rcv+0x7b3/0x1520 [ 2157.552062] __release_sock+0x139/0x3b0 [ 2157.552457] release_sock+0x54/0x1b0 [ 2157.552794] sk_wait_data+0x1a7/0x4d0 [ 2157.553139] ? sock_set_mark+0x130/0x130 [ 2157.553516] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2157.553980] tcp_recvmsg+0x17b2/0x2930 [ 2157.554344] ? tcp_splice_read+0x8c0/0x8c0 [ 2157.554736] ? sock_has_perm+0x1ea/0x280 [ 2157.555103] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2157.555567] ? lock_downgrade+0x6d0/0x6d0 [ 2157.555942] ? perf_trace_lock+0xac/0x490 [ 2157.556318] ? tcp_splice_read+0x8c0/0x8c0 [ 2157.556709] inet6_recvmsg+0x13b/0x6e0 [ 2157.557061] ? inet6_bind+0x120/0x120 [ 2157.557406] ? security_socket_recvmsg+0x95/0xc0 [ 2157.557835] ? inet6_bind+0x120/0x120 [ 2157.558179] sock_recvmsg+0xff/0x180 [ 2157.558516] __sys_recvfrom+0x1be/0x2f0 [ 2157.558876] ? __ia32_sys_send+0x100/0x100 [ 2157.559253] ? lock_downgrade+0x6d0/0x6d0 [ 2157.559644] ? wait_for_completion_io+0x270/0x270 [ 2157.560081] ? rcu_read_lock_any_held+0x75/0xa0 [ 2157.560515] ? vfs_write+0x354/0xa70 [ 2157.560859] ? fput_many+0x2f/0x1a0 [ 2157.561190] ? ksys_write+0x1a9/0x260 [ 2157.561534] ? __ia32_sys_read+0xb0/0xb0 [ 2157.561905] __x64_sys_recvfrom+0xdd/0x1b0 [ 2157.562287] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2157.562751] do_syscall_64+0x33/0x40 [ 2157.563084] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2157.563544] RIP: 0033:0x7f2e54dfeb19 [ 2157.563883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2157.565532] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2157.566214] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 2157.566855] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2157.567479] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2157.568115] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2157.568767] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:21:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000003032, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:21:19 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:21:32 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 5) 03:21:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000003230, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:21:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 9) 03:21:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x88) lseek(r1, 0x800, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r4, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) fstatfs(r5, &(0x7f0000000000)=""/34) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="01000002a8f68ad8bb000100", @ANYRES32=r3, @ANYBLOB="ff0f0000000000002e2f66696c653100"]) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x9101) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file1\x00', 0x40, 0x0) sendfile(r1, r3, 0x0, 0x100000001) 03:21:32 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2000000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:21:32 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:21:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 31) 03:21:32 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:21:32 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2170.053680] FAULT_INJECTION: forcing a failure. [ 2170.053680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2170.055554] CPU: 0 PID: 50500 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2170.056344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2170.057305] Call Trace: [ 2170.057617] dump_stack+0x107/0x167 [ 2170.058041] should_fail.cold+0x5/0xa [ 2170.058456] _copy_to_iter+0x264/0x12d0 [ 2170.058906] ? mark_lock+0xf5/0x2df0 [ 2170.059327] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2170.059927] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2170.060489] ? lock_chain_count+0x20/0x20 [ 2170.060983] ? __virt_addr_valid+0x128/0x350 [ 2170.061500] ? __check_object_size+0x319/0x440 [ 2170.062033] simple_copy_to_iter+0x4c/0x70 [ 2170.062528] __skb_datagram_iter+0x4f7/0x880 [ 2170.063047] ? zerocopy_sg_from_iter+0x110/0x110 [ 2170.063601] skb_copy_datagram_iter+0x88/0x190 [ 2170.064148] tcp_recvmsg+0x13b5/0x2930 [ 2170.064631] ? tcp_splice_read+0x8c0/0x8c0 [ 2170.065138] ? sock_has_perm+0x1ea/0x280 [ 2170.065615] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2170.066208] ? lock_downgrade+0x6d0/0x6d0 [ 2170.066693] ? perf_trace_lock+0xac/0x490 [ 2170.067188] ? tcp_splice_read+0x8c0/0x8c0 [ 2170.067680] inet6_recvmsg+0x13b/0x6e0 [ 2170.068131] ? inet6_bind+0x120/0x120 [ 2170.068586] ? security_socket_recvmsg+0x95/0xc0 [ 2170.069129] ? inet6_bind+0x120/0x120 [ 2170.069569] sock_recvmsg+0xff/0x180 [ 2170.070004] __sys_recvfrom+0x1be/0x2f0 [ 2170.070465] ? __ia32_sys_send+0x100/0x100 [ 2170.070940] ? lock_downgrade+0x6d0/0x6d0 [ 2170.071425] ? wait_for_completion_io+0x270/0x270 [ 2170.072107] ? rcu_read_lock_any_held+0x75/0xa0 [ 2170.072644] ? vfs_write+0x354/0xa70 [ 2170.073001] ? fput_many+0x2f/0x1a0 [ 2170.073354] ? ksys_write+0x1a9/0x260 [ 2170.073709] ? __ia32_sys_read+0xb0/0xb0 [ 2170.074094] __x64_sys_recvfrom+0xdd/0x1b0 [ 2170.074496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2170.074969] do_syscall_64+0x33/0x40 [ 2170.075347] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2170.075814] RIP: 0033:0x7fcd1f4c0b19 [ 2170.076155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2170.077989] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2170.078711] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2170.079402] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2170.080046] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2170.080740] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2170.081424] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 [ 2170.088139] FAULT_INJECTION: forcing a failure. [ 2170.088139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2170.089834] CPU: 0 PID: 50519 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2170.090649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2170.091580] Call Trace: [ 2170.091887] dump_stack+0x107/0x167 [ 2170.092313] should_fail.cold+0x5/0xa [ 2170.092776] _copy_to_iter+0x264/0x12d0 [ 2170.093244] ? mark_lock+0xf5/0x2df0 [ 2170.093672] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2170.094275] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2170.094846] ? lock_chain_count+0x20/0x20 [ 2170.095337] ? __virt_addr_valid+0x128/0x350 [ 2170.095845] ? __check_object_size+0x319/0x440 [ 2170.096390] simple_copy_to_iter+0x4c/0x70 [ 2170.096904] __skb_datagram_iter+0x4f7/0x880 [ 2170.097421] ? zerocopy_sg_from_iter+0x110/0x110 [ 2170.097995] skb_copy_datagram_iter+0x88/0x190 [ 2170.098527] tcp_recvmsg+0x13b5/0x2930 [ 2170.099010] ? tcp_splice_read+0x8c0/0x8c0 [ 2170.099509] ? sock_has_perm+0x1ea/0x280 [ 2170.100001] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2170.100603] ? lock_downgrade+0x6d0/0x6d0 [ 2170.101106] ? perf_trace_lock+0xac/0x490 [ 2170.101589] ? tcp_splice_read+0x8c0/0x8c0 [ 2170.102100] inet6_recvmsg+0x13b/0x6e0 [ 2170.102553] ? inet6_bind+0x120/0x120 [ 2170.103019] ? security_socket_recvmsg+0x95/0xc0 [ 2170.103571] ? inet6_bind+0x120/0x120 [ 2170.104020] sock_recvmsg+0xff/0x180 [ 2170.104467] __sys_recvfrom+0x1be/0x2f0 [ 2170.104939] ? __ia32_sys_send+0x100/0x100 [ 2170.105409] ? lock_downgrade+0x6d0/0x6d0 [ 2170.105885] ? wait_for_completion_io+0x270/0x270 [ 2170.106454] ? rcu_read_lock_any_held+0x75/0xa0 [ 2170.106988] ? vfs_write+0x354/0xa70 [ 2170.107438] ? fput_many+0x2f/0x1a0 [ 2170.107865] ? ksys_write+0x1a9/0x260 [ 2170.108324] ? __ia32_sys_read+0xb0/0xb0 [ 2170.108802] __x64_sys_recvfrom+0xdd/0x1b0 [ 2170.109285] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2170.109874] do_syscall_64+0x33/0x40 [ 2170.110317] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2170.110902] RIP: 0033:0x7f848888eb19 [ 2170.111347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:21:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000003f00, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2170.113131] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2170.114080] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2170.114802] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2170.115475] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2170.116176] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2170.116908] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 03:21:32 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2010000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 2170.270052] FAULT_INJECTION: forcing a failure. [ 2170.270052] name failslab, interval 1, probability 0, space 0, times 0 [ 2170.271569] CPU: 1 PID: 50506 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 2170.272322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2170.273224] Call Trace: [ 2170.273591] dump_stack+0x107/0x167 [ 2170.274004] should_fail.cold+0x5/0xa [ 2170.274422] ? create_object.isra.0+0x3a/0xa20 [ 2170.274934] should_failslab+0x5/0x20 [ 2170.275343] kmem_cache_alloc+0x5b/0x310 [ 2170.275782] create_object.isra.0+0x3a/0xa20 [ 2170.276262] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2170.276878] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2170.277431] ? tcp_collapse+0x42c/0xf20 [ 2170.277869] __alloc_skb+0xb1/0x5b0 [ 2170.278284] tcp_collapse+0x42c/0xf20 [ 2170.278708] ? tcp_queue_rcv+0x7c0/0x7c0 [ 2170.279152] ? tcp_xmit_retransmit_queue+0x57/0x70 [ 2170.279689] ? tcp_xmit_recovery+0x86/0x180 [ 2170.280150] ? tcp_ack+0xeef/0x5690 [ 2170.280578] tcp_try_rmem_schedule+0xb8a/0x1690 [ 2170.281104] tcp_data_queue+0x16ba/0x47f0 [ 2170.281568] ? tcp_data_ready+0x500/0x500 [ 2170.282108] ? tcp_urg.part.0+0x157/0x2e0 [ 2170.282564] ? tcp_try_keep_open+0x2f0/0x2f0 [ 2170.283015] ? tcp_validate_incoming+0x431/0x16a0 [ 2170.283544] ? tcp_check_urg.isra.0+0x1db/0x720 [ 2170.284074] tcp_rcv_established+0x868/0x1e30 [ 2170.284619] ? tcp_check_space+0x6c0/0x6c0 [ 2170.285166] ? ip6_dst_check+0x2fa/0x8d0 [ 2170.285609] tcp_v6_do_rcv+0x7b3/0x1520 [ 2170.286047] __release_sock+0x139/0x3b0 [ 2170.286498] release_sock+0x54/0x1b0 [ 2170.286902] sk_wait_data+0x1a7/0x4d0 [ 2170.287318] ? sock_set_mark+0x130/0x130 [ 2170.287761] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2170.288317] tcp_recvmsg+0x17b2/0x2930 [ 2170.288770] ? tcp_splice_read+0x8c0/0x8c0 [ 2170.289225] ? sock_has_perm+0x1ea/0x280 [ 2170.289673] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2170.290213] ? lock_downgrade+0x6d0/0x6d0 [ 2170.290684] ? perf_trace_lock+0xac/0x490 [ 2170.291155] ? tcp_splice_read+0x8c0/0x8c0 [ 2170.291609] inet6_recvmsg+0x13b/0x6e0 [ 2170.292035] ? inet6_bind+0x120/0x120 [ 2170.292449] ? security_socket_recvmsg+0x95/0xc0 [ 2170.293048] ? inet6_bind+0x120/0x120 [ 2170.293502] sock_recvmsg+0xff/0x180 [ 2170.293986] __sys_recvfrom+0x1be/0x2f0 [ 2170.294426] ? __ia32_sys_send+0x100/0x100 [ 2170.294896] ? lock_downgrade+0x6d0/0x6d0 [ 2170.295383] ? wait_for_completion_io+0x270/0x270 [ 2170.295904] ? rcu_read_lock_any_held+0x75/0xa0 [ 2170.296428] ? vfs_write+0x354/0xa70 [ 2170.296865] ? fput_many+0x2f/0x1a0 [ 2170.297276] ? ksys_write+0x1a9/0x260 [ 2170.297693] ? __ia32_sys_read+0xb0/0xb0 [ 2170.298143] __x64_sys_recvfrom+0xdd/0x1b0 [ 2170.298632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2170.299192] do_syscall_64+0x33/0x40 [ 2170.299614] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2170.300248] RIP: 0033:0x7f2e54dfeb19 [ 2170.300752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2170.302848] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2170.303684] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 2170.304517] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2170.305450] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2170.306237] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2170.307010] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:21:32 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, 0x0, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:21:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000004000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:21:32 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, 0x0, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:21:32 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2403000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:21:32 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000300e, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:21:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 32) 03:21:45 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:21:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000004800, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:21:45 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, 0x0, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:21:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 10) 03:21:45 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x400, 0x4) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="030311000000050020ed97a62967be8eea2277cb07bd1adb4a6321e915e2dd2887be2e754a05c59ead"], 0x29, 0x1) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000180)=""/52, 0x34}, {&(0x7f00000001c0)=""/112, 0x70}, {&(0x7f0000000240)=""/71, 0x47}, {&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f0000000300)=""/161, 0xa1}, {&(0x7f00000003c0)=""/17, 0x11}], 0x6, 0x9, 0x3f) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) 03:21:45 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 6) 03:21:45 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x4000000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:21:45 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2183.858640] FAULT_INJECTION: forcing a failure. [ 2183.858640] name fail_usercopy, interval 1, probability 0, space 0, times 0 03:21:45 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) [ 2183.859746] CPU: 0 PID: 50880 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2183.860468] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2183.861240] Call Trace: [ 2183.861486] dump_stack+0x107/0x167 [ 2183.861818] should_fail.cold+0x5/0xa [ 2183.862167] _copy_to_iter+0x264/0x12d0 [ 2183.862532] ? mark_lock+0xf5/0x2df0 [ 2183.862867] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2183.863342] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2183.863781] ? lock_chain_count+0x20/0x20 [ 2183.864164] ? __virt_addr_valid+0x128/0x350 [ 2183.864567] ? __check_object_size+0x319/0x440 [ 2183.864989] simple_copy_to_iter+0x4c/0x70 [ 2183.865379] __skb_datagram_iter+0x4f7/0x880 [ 2183.865780] ? zerocopy_sg_from_iter+0x110/0x110 [ 2183.866213] skb_copy_datagram_iter+0x88/0x190 [ 2183.866631] tcp_recvmsg+0x13b5/0x2930 [ 2183.866996] ? tcp_splice_read+0x8c0/0x8c0 [ 2183.867387] ? sock_has_perm+0x1ea/0x280 [ 2183.867759] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2183.868227] ? lock_downgrade+0x6d0/0x6d0 [ 2183.868605] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2183.869086] ? tcp_splice_read+0x8c0/0x8c0 [ 2183.869482] inet6_recvmsg+0x13b/0x6e0 [ 2183.869835] ? inet6_bind+0x120/0x120 [ 2183.870180] ? security_socket_recvmsg+0x95/0xc0 [ 2183.870601] ? inet6_bind+0x120/0x120 [ 2183.870943] sock_recvmsg+0xff/0x180 [ 2183.871276] __sys_recvfrom+0x1be/0x2f0 [ 2183.871628] ? __ia32_sys_send+0x100/0x100 [ 2183.872012] ? lock_downgrade+0x6d0/0x6d0 [ 2183.872396] ? wait_for_completion_io+0x270/0x270 [ 2183.872837] ? rcu_read_lock_any_held+0x75/0xa0 [ 2183.873254] ? vfs_write+0x354/0xa70 [ 2183.873587] ? fput_many+0x2f/0x1a0 [ 2183.873914] ? ksys_write+0x1a9/0x260 [ 2183.874271] ? __ia32_sys_read+0xb0/0xb0 [ 2183.874642] __x64_sys_recvfrom+0xdd/0x1b0 [ 2183.875043] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2183.875515] do_syscall_64+0x33/0x40 [ 2183.875843] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2183.876298] RIP: 0033:0x7f848888eb19 [ 2183.876630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2183.878271] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2183.878954] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2183.879579] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2183.880226] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2183.880858] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2183.881511] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 03:21:45 executing program 6: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005640)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x3aed7fab, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a45c05a117fcab56211501285b0c972015fddc3fa194d751440f1cc750e3d469e8d8a8c4d2ef5520da8bb12eb2ac145d50095e9b80936dea3daf5d74", 0x3c}, {&(0x7f0000000100)="65bcf7049911a67c1a6fdae8df89526ab1b93958b394ffb1eedd0ee85311da2177aa270bab206e6813a8c1eece374a8590051b7212b3c497394e5d9d3f85614baac95e907c1d84cc3c4f27df1e8ce9011da4ebc5e414b663aa46857c8aa0366d1de03131b7288045c710bc3900e39113b51d07f1ad768b896d0622fbd5585bb9215087c3cec4e38fede2b1565b930704b8d250aa3f1e2ee8a1bae042944d65dd66db9e07a07506920063ab9f82a1bfbdd5ef8e217128f92bbb7e47", 0xbb}], 0x2, &(0x7f0000000400)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @hoplimit_2292={{0x14}}, @rthdrdstopts={{0x110, 0x29, 0x37, {0xe8, 0x1e, '\x00', [@pad1, @generic={0x7, 0x80, "1b02aef271e0763d43f1d903b3b3dfe508a4a14032d6152e8b20d6489b3ebbad47175ba14a0dac4bb7f531cb3dd30571c499d18c06dd61ffc66f2e22fedfb0b5501ca4211ff02484dad36e1f8676008799214d977fb2d4f31eb844e41f653db7bcc4208d3fdbf7d6497907a913bc12fa81f2b935ca4d5e4b01909434cae6662c"}, @calipso={0x7, 0x50, {0x1, 0x12, 0x20, 0x42, [0x200, 0x80, 0x0, 0x5, 0x7ff, 0xffff, 0xfff, 0x9491, 0x20]}}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x3}]}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x73, 0x6, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x80, 0x58, [0x7, 0x37a3, 0x0, 0x800, 0x7f]}}]}}}], 0x190}}, {{&(0x7f0000000280)={0xa, 0x4e23, 0x6, @local, 0x1f}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000002c0)="6c43997911920fcbb2a5c22a562b00902f988108e12f0b13db967de228f26227217cc54313dd8df5f2b17b736300404b2bb742896f4fa84b6b11a3b859", 0x3d}, {&(0x7f0000000300)="d16459426f6f9b523c588d787c8b544b5892c20fcfb316939299354f3a28462a8ae2", 0x22}, {&(0x7f00000005c0)="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", 0x1000}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="85212b0486422005775e281e2c56ca7055ef178e3c59f4f490a004cce12434eeff8b860eb34e729ab3f5de28110aeceab570cfd94e21b48a92b6f285fc90fc936040dd191de2fdfaef21e7d3394d635d4d60a6eb0ebd5030b67e56a1c4b3197fe7c72b77f2fa891c0c4c5d7a052158968c1a723c", 0x74}, {&(0x7f0000000380)="0db964c4a4f61436442509d03e7272d383829c63138ccedf36f094e08fc11410192b63029967aafaa5ef44a59d6e0043160da88e", 0x34}, {&(0x7f0000002640)="c0de43ea3821903750f9cc6dd70a25b51637b6ad1566fcc4d9d3831d70f1c72d8b48b7d599994edfe18b0f6899b8fb6d6d40720606d48d99", 0x38}], 0x4, &(0x7f00000026c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}, @hopopts={{0x60, 0x29, 0x36, {0x2f, 0x8, '\x00', [@pad1, @calipso={0x7, 0x38, {0x0, 0xc, 0xf8, 0x8, [0x7, 0x200000000000, 0x80, 0x1, 0x9, 0x3]}}, @ra={0x5, 0x2, 0x2}]}}}, @dstopts_2292={{0xf8, 0x29, 0x4, {0x0, 0x1b, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x6, 0x70, [0x3f, 0x6, 0xc932, 0x7fffffff, 0x2, 0xfffffffffffffff8]}}, @calipso={0x7, 0x40, {0x3, 0xe, 0xa, 0x1, [0x80000001, 0x509b, 0x4, 0xffffffffffffffc1, 0x3, 0x0, 0x4]}}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x9}, @generic={0x20, 0x3e, "e97babcb7522b672d05c4480bc6e6938f53e91e293db1f423943af9483961a89466ae79bd40822a61d1587bbfd93d88b15aded47a9c00794d0cae745b8ee"}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x5c, 0x12, 0x2, 0x1, 0x0, [@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private1, @empty, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x2c, 0x2, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim, @enc_lim={0x4, 0x1, 0x68}, @pad1]}}}], 0x240}}, {{&(0x7f0000002900)={0xa, 0x4e22, 0x1, @mcast1, 0x5}, 0x1c, &(0x7f0000002940), 0x0, &(0x7f0000002980)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x18}}, {{&(0x7f00000029c0)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c, &(0x7f0000002c80)=[{&(0x7f0000002a00)}, {&(0x7f0000002a40)="d492333ea57ab5d2b4dfd71175d4e0d582de002ab79efe4b5289943bf14b924f9602d86093d6266ee5ff3ebdd042d642681c3f8edda9a1fac28fc2ce8258031fbfcd534ff3a7733879aa50ce6b74b7da477bf5299fb2eace8962b8c20642cdd76ad418aefb2deadf1f98d4d3fc9ddda2d4a9802b5272e65d5e9819c6ce6a4ff4c18e808233d7ff0dd437c40e0405cbc6eebfa3238d599d3b34139d9b228bdafe31a315c5a572823be5990f5f562a46b684108c7a6dac731a93304202da2593f957fcfc13a09b67866b1f07b78d136d9abdfe8fa6eb9eacc7c54eff1d947e6cbdc68a093a", 0xe4}, {&(0x7f0000002b40)}, {&(0x7f0000002b80)="a9536b8798f76e4dc5a4af7d46656ecf595948b45c7ab1edbc2be5b3d358e14d37f3f402a4ad72f206dc657c5f002f5ad25464b8ef0ac0c7af46f56e5165a8ffcf0af777523ec58654a222055f138187c20adf35bece4f2d8c1c20fada0bb3a6daccf78dde749f73df16134060c213f7bfe4d127d9b3dd7743734117cb27006805a3ae6aca125f9ab16f7ec94e35045d824f7fc713ff58467add6fd22f54c6968d5757b1fd2a1304c7c331c75b95275e7d2ff69fdad4e895dcb8ab49563114c0294b8969349a05c573dfacea2a711514a568965b91f0f39a55", 0xd9}], 0x4}}, {{&(0x7f0000002cc0)={0xa, 0x4e22, 0x1, @remote, 0x77}, 0x1c, &(0x7f0000003200)=[{&(0x7f0000002d00)="630e08cbd3360b91da18b9b55ef86030f1ff1f1223db91f51c55bdce934c7e0fdc8617c3194758f8ea57164f124fa7b771d09c2336b83f14f70495b734dd3beda7870cc60df8a389556b744af2e2ff9176cd12f8eae7443021d01d6b70cb8d96442e69370de844c9", 0x68}, {&(0x7f0000002d80)="856386a8ee15cf8cb0ef91411e805974db46ef72b306d2b2", 0x18}, {&(0x7f0000002dc0)="1314a2eb0834b9b1fc5b91dda1fa1140631eb094a3f6ee41ba611438fb4446a4373435421b5292550a7b1b98d5578611cdf1e488640fb05ad0bdf86654ba6ba500d440782ce9a4ad7a214fdebf7c6b9618e093cd82308d57419f6e1d736f0d96c94909e9e8a10574fe669a74c5a7c9b8d5b96b8d418a2d68a21878aa62973d3ab21f20f952726538b3f4270732962470723fa477b4dc4038f791d307c4c485a616778e2cb413f8da02031f6900846f8d61eb292d5af175a549feb46ee33dbe9e3fab33febb22caa278", 0xc9}, {&(0x7f0000002ec0)}, {&(0x7f0000002f00)="b9c068d7548808c95fa0c51c80086a9fb3627b09cb2388f208c2fbe309d219b5534db2987f236039bf015adbd1fa7263c3ea226bb74c68ddea9ce4a50dae1801f0c9426f743f6ceca9bbbd234024976863a50c1e809e9b6e407f7fe769da1d4aa5b7b9bb", 0x64}, {&(0x7f0000002f80)="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", 0xfa}, {&(0x7f0000003080)="3beb0f66fcd6c4ad51a1e8058e6edd83d47cb081303f3a293558a587937f9dda0c9a9b4b0f42d542e35d0e310ee00afed43416ae0dd9f1353a8d6341f7546eadec8f5e7155b97ed83564d39570900110c2decbbd73958ff0826bd84748eaf125b50895f30ce78b1c70fbda39606d1052aa87cdf58c615c7a48812b74f95b355482fe50948715411acbb6f40779f8211574d59ac06ef0646a631b888cd384cc62a8701cdb41e4091d41af12599329a76e4113c461c4c431e33a8a2771a0b0f012356e4a1ff8bb6399890018d25ca937ab86db9292d8733708827f3c79", 0xdc}, {&(0x7f0000003180)="6564a144dbf9df2ae10eb5b3cf694e0ae1e2233923be13c37b99a93876d10d517336ec8892efb257b292a0d8c2e1289d9200c4dd1829f7bace806a563b5340075ca634b66f838a1b0b24a7bb6872b5eb5427757886e8f3e8e2f1fb5efefa51507f3e4020bf6acbfd3259d1f6c6e70472ee4c87fe9f", 0x75}], 0x8, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0x490}}, {{&(0x7f0000003740)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000003840)=[{&(0x7f0000003780)="1d3777f23afd02389d449d2ce27fc90caf691cf858b6a15b2779fe24e8183a76909853dd9828563efe9fa3174239fa1c19ff2f1d83e335eaab8b2b31255e30d0acb229290586e24864d24b21da1d4a6b524a52cc26dd2ec95389a26f4221a90abf9615d45a0bf8309c177e4bc23ccebb05a53b40fe59966a8a06aff2ba117ff7992398a9cbdfeb10ec3f4bd328210834e51981cc258d39d4797ee2393c9ab35e829161c15d32e32a4566", 0xaa}], 0x1, &(0x7f0000003880)=[@rthdrdstopts={{0x118, 0x29, 0x37, {0x2b, 0x1f, '\x00', [@generic={0x81, 0xf9, "6030cd5cda921b1eb785e8805d20844a42a880f8a1f9e1d9d4db4643531aceb5a8c391a3715538bab2c3cbd5640d9a6f5f936c5ae90d4acb26a3e5bd48759d840e95f1f1b283c712bc35f9091f9b0759c2cf67daba33b918b6c7ec46e995280788c09d2046bcced71bdd5eb36c0197a60d6170cb1e88344e144141347468e81f3d4dbaf63f914bb5692ed698b5df39a94b6066b4415ae3789b18a7a5d26b59277efcb65172bb7b0f8514f87007badd32a6d97f15e708027c4ed3d9c3b78d3da1bdadd5a6340540641f77eb75f4288e63396e484c7fffedc01b01dee955a5512a62ee4e29d168b37d00587022bd4241c1cf312c580b38fab3e8"}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x87, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x6}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x21, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x3}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0x180}}, {{&(0x7f0000003a00)={0xa, 0x4e21, 0x3, @mcast1, 0x9}, 0x1c, &(0x7f0000003c00)=[{&(0x7f0000003a40)="89c9577d20d45f65f3bd580ffcc4ce90ff37f3b1c9a33fa17cd858255134379bd84ab526b9c56acd3125ff3f2f819410796ceff13be5fb2ff2d14284fe23d6233db11ca835a71275fe3fa68ea5acebf09c25f498dfcf110a2fe0a502f83a9987712d90f57e9e2c3494e07ad4b6eb43fe4dd9f18bab206d6b1432b1e03c716e2ca2f56d1d6a", 0x85}, {&(0x7f0000003b00)="a12ad28cd17966cfcf769bdac7d4d652892399092277a0264eed93091bfa75a90574a26465b034767f6e75cd40987c9d8f90accaacfac52c84626bd9f1c26edf9305ab19154725194fb7a14b03ffb0dd9160168681b3f0b2b73903c61905f83b7bdde11601f967c9ea4bd1afa826ac1df874cb56f822ebc395d5b3ebb28abd845b765821017f39bba9fb2f88f95c869fee8b133942c59d448a6068c10ea3365ac0345e41a5ae54bbe51af2361e5abf4ba606014583839b62c6212f8195ac3b34e9a5940d5a", 0xc5}], 0x2, &(0x7f0000003c40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x100}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0x48}}, {{&(0x7f0000003cc0)={0xa, 0x4e21, 0x80000000, @remote, 0x8}, 0x1c, &(0x7f0000004100)=[{&(0x7f0000003d00)="a8671aa0816b06d69a8eabf2dc3c422f0f0f93a87205d2b056dde889a09d13b66b14c146e14fee0cc455d007662107f25170a2d857dacf994dfabe5c555921a18d4a0a371c8e9efe6a2b1e", 0x4b}, {&(0x7f0000003d80)="ad14a4a43ab4b4a25f2b3ceaeed8cb705ce1d985dcccd462bb0d6576f13805f041b1d802fc76db7e16f1a84c129904e6fc97dfbfff569fb8f44c3920d97a8f5f9af9cc3b78b5642d856406df44bec2b83843ef88c7ce0cb58e39f988fc96ef8e1f0a82c07a03c2c5c859e04922a0533450c549185d9c707f8461dd0060702da5dc2885a54e0ddcd663535228dc58aa7fa9e061aec26ae9ba39ea19655c6384a81b9a34e0501a7e22c0685d8489c834cfb1761267d343b4aeea965bb5bd3a05040b4c8bd8e8afb0fad7f5c7d574a621cf0d85b40e3369ccafb7ee598c84fbff9edcba4411c1ad377e74e2a4a425e2119602adf54aaa3c60c9", 0xf8}, {&(0x7f0000003e80)="cc99ea90ea3a9c7543364d3669678f8a154b8c1e682a5ef5e016a9e05797cc48a702579e6c9a2f6eabfe439ba4d956e72c4bc88b8e14dbbbfb799d9c296baafbc34788430a5a9efc457034cd1f2669197ab956171eef47c479363ee2e990f03ef7a1b39d55bde35d05d0ece85b6c2f84fd88ac7381ef359104736ab57afecc1ffa4f1adccf1232db4b12c4665acb55", 0x8f}, {&(0x7f0000003f40)="0c8d251aa87e7ec73ad171ab163f05b29add05f50202622dfc2592b6687213c2e30273332ed376", 0x27}, {&(0x7f0000003f80)="098328296b28bf23f4040fb7b71628fe9ac8ddcd7a0f7c85ac0a0c910e5b8412771c07765d82afdb0a75a2930e7164d95f4cfc775dab395840c3c04691ffe336ab2930c82e3778bb2f83194b006380dc41fd04575e046bd0dd35e3048fe3b7", 0x5f}, {&(0x7f0000004000)="021d350828c861973a6e888988aeb308eeaa3030a2f5b12206432ff1df928ab09eacb833b2e99381654b5dd4d0776cc3b8a4b9209ce165abe7e8067c8cc26b", 0x3f}, {&(0x7f0000004040)="372e0d4ec53394ebfe2deae04114cddb2cd06d23fa37976939d1a54fa368d2a676368d9cb532c7388d7a4ee8cb6ba71831935401d866f2f2daa2b17d5aa60575ea00b66b281fe7e3f7332c6856d6b2f584c475521549e48aca313ab1b4cbb0f16faab171227db6ee4d7967b3286264724b0c7bf474ba4e28155387a783fba6de2dea3d2262d48fb1e01c375a75ca6f3053b52c2e84", 0x95}], 0x7, &(0x7f0000007e00)=ANY=[@ANYBLOB="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"], 0x50}}, {{&(0x7f0000004200)={0xa, 0x4e20, 0x100, @loopback, 0x1}, 0x1c, &(0x7f0000005380)=[{&(0x7f0000004240)="29f8d6e64b48a1f2553865a2617a2f2b2f41d16c671705dd285e066d5543d19a4548ec4076b0f69a34997ecc52853ea4b0871b01202b1e54b3f62afaa8a7e1c44c767824287401a80e41780e5d74de846ed9be29a542677d6d4929fa50fef23ec21bb190edc2b12a16785376666a60b9d65e5b776337630f6fd0a4c4bf7f2e4118d55b6fe36019351515f94714a9973762cb10f9a7ea5ab619951ee350ae7a1b1e3360580fba62b72fe2b2f4815ec266e84b07a796993adab9e172d80d2c053a78623c0a520d791beea9058b0a75e3ee93322486ed397e519eedd57c", 0xdc}, {&(0x7f0000004340)="b7c3a215a2ae6e45840a8689203ef2dd111a604d7d5c4d974742b2f7a5a4d3c9911eb77b", 0x24}, {&(0x7f0000004380)="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", 0x1000}], 0x3, &(0x7f00000053c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @tclass={{0x14, 0x29, 0x43, 0x10001}}, @hopopts={{0x80, 0x29, 0x36, {0x2b, 0xc, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x3f, 0x904, [0x11, 0x9, 0x800000000000, 0x4, 0x1, 0x0, 0x0, 0x5]}}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0xc9}, @calipso={0x7, 0x10, {0x0, 0x2, 0xec, 0x1, [0x3]}}]}}}, @flowinfo={{0x14}}, @hopopts={{0xb0, 0x29, 0x36, {0x87, 0x13, '\x00', [@calipso={0x7, 0x50, {0x2, 0x12, 0x9, 0x0, [0x1000, 0x7, 0x0, 0xcd, 0x2, 0x1c6, 0x4, 0x80000000, 0x1]}}, @generic={0x5, 0x1c, "d44a58fd6c2874fe20ec33fa02d64e5fbdd79d36085bbdc231dcf319"}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7fe}, @enc_lim={0x4, 0x1, 0x40}, @pad1, @hao={0xc9, 0x10, @mcast1}]}}}, @flowinfo={{0x14}}, @hopopts={{0x28, 0x29, 0x36, {0x16, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xfd}, @enc_lim={0x4, 0x1, 0xc4}, @pad1]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x62, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x31}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffa}}, @hopopts_2292={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x3, 0x7f, [0x3, 0xa0000000000, 0x5, 0x8, 0x80000000]}}, @pad1]}}}], 0x250}}], 0xa, 0x40) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="017d3fd0f34d2a171ffeb74ec1650072"]) r5 = syz_genetlink_get_family_id$batadv(0x0, r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0xfec6, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r8, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r8, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r5, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000016c0)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f00000017c0)=0xe8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x3f, 0xa, &(0x7f00000015c0)=[{&(0x7f0000000240)="beff801084c120b286dc1c2fb040392f7a47ff7e11b62453a30e9797a4012b3130b4148575914d5e1db62db1df66ca5968b87a488ba78b70d95c0a8e71d504a2658301e911ed55f754253ba9b1f15c164488c0d139d3be46e339654774027b580d8705bda30d3ddb4058c9b46c59104a8d5531a9fc5180d99a81cf28c5358e97073ed675d106b657fafed24677deb89fad22a483386f9b2ace5a2fe52192a64dc31f603718b230739ee27e48588e5635eccb6d1a1b21e280aef601c7b616673225bf", 0xc2, 0x10000}, {&(0x7f0000000140)="5415a314a95958462adffa503e23978c85b1ef850e1014a9285563b701180438fac02f0bbdf998264aa0ef28276d479249a9d98d98dc00f8933abb121114d9a9a13ecc6e36b1baade82939e5ae582a085a516f1e775ff2e585a5e56bfa487a47", 0x60, 0x8}, {&(0x7f0000000340)="f7b960828d70629f04d47731bbd44a68d8f91e557a08a7e7015f76ed592792eefd519eec0689d4f613b26ac7f759e07fa8cc8f169b55655b64eca9c1b82596ce2950014c508bbec111383dfd95f20fb4b1360abacefcf067d07279168d4eced9132fcc2374f6c7e5e063d1da308777f166b2b3e025408970521aac6a9cbee9f02e3c6bad0245d29073e6e15b435c78427ce088c11f0d1917493ebfaa1c660c4b72152840ea9f9908997b04", 0xab, 0x100}, {&(0x7f0000000400)="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", 0x1000, 0xfffffffffffffff7}, {&(0x7f00000001c0)="618efe4035c6e2c5d3c6c9d2e73db83f13a8a85990a91ab52c3ad68e74a2a1", 0x1f, 0x5}, {&(0x7f0000001400)="f824e792a085396358d118", 0xb, 0xffffffffffffffe5}, {&(0x7f0000001440)="346cdb550a9c848b", 0x8, 0xbc02}, {&(0x7f0000001480)="815c60f6fda173c3e517711bf223dfe60ed4a6027b21835ed07bd0ff700bde30343d027f6d0912f12d3c4258e0bcef144d32cb6ac065f262406aba5422d8bebc879c6b5cdfe80e3a03f67d9af8c33a6baeee883383213a59347c6e4aedc2272d1b8df837f42fd76b682cae5f37d2e34e93d8d4fd6b78da97c97d0b7f4c91919e1b69401de4db17a5a3308d46e6af19f6ed744771e7a2e3af8572e1c071f03c5f5f1c714d42de2f8cbefadd4f8804", 0xae, 0x3ff}, {&(0x7f0000001540)="a679a2980c9e55284a92beb8334ca8e80ee3819f9203bb77610a17bd393bf91f6bd8cdace43ce1a83fe17a", 0x2b, 0x7f}, {&(0x7f0000001580), 0x0, 0xfffffffffffffffe}], 0x8004, &(0x7f0000001f00)=ANY=[@ANYBLOB='nnonumtail=1,utf8=0,uni_xlate=1,shortname=win95,shortname=win95,fsmagic=0xfffffffffffffffd,euid<', @ANYRESDEC=r9, @ANYBLOB="2c736d61636b66736861743d29d25ed52d252c736d61636b66736861743d69736f39363630002c00e6fb54c33629e081651d625e5e8e4b8c48900cc9da18248a000097a23281e3048a5efbdc37ac32df6d42c4885351a8154f7f5aae8f42b6e7de02a6d26242ed4b0501aaa6e02ed816ec40610300000060781fc8561c7e95025eb2ff7f633c25d30c65040705c5fdb6e193f32bd4ea3240b76ace03b21301f40fae90c667b4c57b61dc560865a38d5bc8fb44911726031a1b03d550a386682300c855f1ba99b89126"]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000008300)={&(0x7f0000008080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000082c0)={&(0x7f00000080c0)=@newpolicy={0x1f0, 0x13, 0x1, 0x70bd26, 0x25dfdbff, {{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@empty, 0x4e24, 0x0, 0x4e24, 0x2, 0x2, 0x20, 0x20, 0x11, r8, r9}, {0x4, 0x9, 0xfffffffffffffffb, 0x5, 0xa88d, 0x200, 0x2be8, 0x20}, {0xf528, 0x7ff, 0x7, 0x656}, 0x7000000, 0x6e6bbe, 0x1, 0x0, 0x1}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e23, @in6=@ipv4={'\x00', '\xff\xff', @empty}}}, @policy_type={0xa}, @lifetime_val={0x24, 0x9, {0x7, 0x3ff, 0x8, 0x3}}, @sec_ctx={0xe9, 0x8, {0xe5, 0x8, 0x0, 0x40, 0xdd, "e95078516120f29e088b715bff02afb1820e37630850a2e958519436e734e82b1dcc535ee52359863061e629c1efe76fec908819120332cb83a5db1f1a1b047cb8d28d34f064900fa990cccf94120f87229be2cdf67295a9792837141bd4159d4646e067cdf465fb550d032e284d6d51866ace20046169d4d1c5e9cee4b1d250c5d8fb2657c7a0565439d81295b3cb62ec285194833c2c780641a5854454e1f248ca53d956fd409e47ecf71b03e792211e67e648dd4393eba42a00f820c412a055c48114e8438d00472691fac7b384ad4de48f990a1c0e059f7a3f99cc"}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40002}, 0x3) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)='T2\x00\x00', 0x4}], 0x1, &(0x7f0000000040)=[@dstopts_2292={{0x18, 0x29, 0x3b}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x30}}], 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000002b40)={&(0x7f0000002940)={0xa, 0x4e23, 0x1f6b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000005bc0)=[{&(0x7f0000002a00)="18fea149dc4f9a2463a27024", 0xc}, {&(0x7f00000058c0)="cddc28b81aa7053f80a7a563f2a3a4a2a714899ba408e78ad862c6e1b0c96d807f122b7f0826da526af1263633668d15cc6206b6c4c303d90b54ca98d194055344a92d364138f4f40b577b4bd60669173bf799e7f123d08ff8b38ad97e964eb5e04ee71178043b91f8de0455b427064e32989a54c7d81f1bddf070b1cd1f9c378e898ca01a57966faeb7faef50bd6cc63df20ddb5fd4be1cb16bbbd8bfb4f9e4425520be2f7c04c025c22edde251443f43dc789d9c0eaf02b72152072d6321e37dc1c4cf38c842a5cdc16cea25390dfbc0c0b76a2ec0a0a0aeeae4631e72528042c52d", 0xe3}, {&(0x7f00000059c0)="62a9a011acaa810dce5a00eeebb046c45aaef1afe6e314c2a10fc86882a9436ade2c75b7d175654cded2e9e02f388fc903dbc7c4e54e28ecbf1605689d1463ea44ee00a20ed4c23d1ca73a0486151f0d8165b57f2260e30fb3bd8bc45d419de8139732e7893a3c81f23a77c5bf1797b0307856c6886fd7644a0b94d86577f58a45cdbfe41d973573a78b2a52dcd05c0adc1d8903de2c7c9eda426a06e2f3513301931afddda4abcff5eb974b6029d623b35432df94ee08e4ccfade91a5e4af09125ef1dccff35082ad9c8ed67619f553917e9989f9", 0xd5}, {&(0x7f0000005ac0)="d96a79344697d49f71f1c65ee6ef8afb12f38b76ed90e7e882413dbd89eea93fb88bc4d46b8441287793ef6bf0af7a89e792fa39f1177053b00a12d92bbdd17e079026d001999c23394315cc2bc0421b800d336ae41116943bb3842fe7332a3ae6c6d947e77f6cf601347f2ed284b692df1910f76bff1906", 0x78}, {&(0x7f0000005b40)="3688a7a6b17077652dcef8154df8062c576f5da502e6bfd68965a71eec8238fad457adbc0265c017a07ed9be9defb11ffc2a7a127b06f2201e730980dc141d2f86c5cd60a3f3269e56d1e4f6375d470fb03a129209b3a7a471bda7b6550c0ce8e496ae39b0233a95c581a261ca17be", 0x6f}], 0x5, &(0x7f0000005c40)=[@dstopts_2292={{0x1098, 0x29, 0x4, {0x29, 0x20f, '\x00', [@generic={0x1f, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x3ff00}, @hao={0xc9, 0x10, @mcast2}, @pad1, @generic={0x7, 0x3f, "0b134d8735a2a55781a6ce87ae8225e4500e78874591f1b5084fff881e4d50d8d3b8b61e5c042c397a9ae0dbcd55909eb4419ed64628335bfd0f15fbbf3e86"}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x1100, 0x29, 0x36, {0xef, 0x21d, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0x3}, @pad1, @pad1, @generic={0x1, 0x1000, "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"}, @calipso={0x7, 0x28, {0x2, 0x8, 0x1, 0x6, [0xe0, 0x2, 0x8, 0x10000]}}, @generic={0x81, 0x9e, "526525f7b5143ada96ee35b8c59884a6c018af25a437a24f78c6b8241d8fb31af3571fa80ce1d7923660f40e28f518aefbcc603bb632b47712d7519681c2764c89ed4c8f742b52497396ee5b6ef643fdf3344a5b5e2c8fac5243fafd4bf7d81fe0c6b843d9c033e8fa8a495342e3bb8a2fe3e09e49fb312e72f6dfc152b55f05d3bb41ddb8b78734a13f0b9bc57a04a22ab24f8e32bdcac1b9e8165290cd"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6c}}], 0x21b0}, 0x4) 03:21:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000004c00, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:21:46 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x4a00000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:21:46 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2184.017892] device lo entered promiscuous mode [ 2184.029901] FAULT_INJECTION: forcing a failure. [ 2184.029901] name failslab, interval 1, probability 0, space 0, times 0 [ 2184.031447] CPU: 0 PID: 50842 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 2184.032090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2184.032846] Call Trace: [ 2184.033105] dump_stack+0x107/0x167 [ 2184.033435] should_fail.cold+0x5/0xa [ 2184.033783] should_failslab+0x5/0x20 [ 2184.034123] __kmalloc_node_track_caller+0x74/0x3b0 [ 2184.034576] ? __tcp_send_ack.part.0+0x67/0x650 [ 2184.035005] __alloc_skb+0xb1/0x5b0 [ 2184.035337] __tcp_send_ack.part.0+0x67/0x650 [ 2184.035752] tcp_send_ack+0x7d/0xa0 [ 2184.036075] __tcp_ack_snd_check+0x156/0x9f0 [ 2184.036474] tcp_rcv_established+0x955/0x1e30 [ 2184.036885] ? tcp_check_space+0x6c0/0x6c0 [ 2184.037286] tcp_v6_do_rcv+0x7b3/0x1520 [ 2184.037643] __release_sock+0x139/0x3b0 [ 2184.038004] release_sock+0x54/0x1b0 [ 2184.038343] sk_wait_data+0x1a7/0x4d0 [ 2184.038689] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2184.039179] ? sock_set_mark+0x130/0x130 [ 2184.039551] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2184.040009] ? tcp_cleanup_rbuf+0x1d5/0x5a0 [ 2184.040401] ? tcp_cleanup_rbuf+0x238/0x5a0 [ 2184.040795] tcp_recvmsg+0x17b2/0x2930 [ 2184.041152] ? tcp_splice_read+0x8c0/0x8c0 [ 2184.041542] ? sock_has_perm+0x1ea/0x280 [ 2184.041906] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2184.042370] ? lock_downgrade+0x6d0/0x6d0 [ 2184.042751] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2184.043225] ? tcp_splice_read+0x8c0/0x8c0 [ 2184.043611] inet6_recvmsg+0x13b/0x6e0 [ 2184.043967] ? inet6_bind+0x120/0x120 [ 2184.044307] ? security_socket_recvmsg+0x95/0xc0 [ 2184.044739] ? inet6_bind+0x120/0x120 [ 2184.045083] sock_recvmsg+0xff/0x180 [ 2184.045424] __sys_recvfrom+0x1be/0x2f0 [ 2184.045780] ? __ia32_sys_send+0x100/0x100 [ 2184.046162] ? lock_downgrade+0x6d0/0x6d0 [ 2184.046557] ? wait_for_completion_io+0x270/0x270 [ 2184.046989] ? rcu_read_lock_any_held+0x75/0xa0 [ 2184.047410] ? vfs_write+0x354/0xa70 [ 2184.047742] ? fput_many+0x2f/0x1a0 [ 2184.048067] ? ksys_write+0x1a9/0x260 [ 2184.048407] ? __ia32_sys_read+0xb0/0xb0 [ 2184.048788] __x64_sys_recvfrom+0xdd/0x1b0 [ 2184.049169] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2184.049645] do_syscall_64+0x33/0x40 [ 2184.049977] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2184.050432] RIP: 0033:0x7f2e54dfeb19 [ 2184.050764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2184.052404] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2184.053097] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 2184.053743] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2184.054381] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2184.055024] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2184.055659] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 [ 2184.058752] FAULT_INJECTION: forcing a failure. [ 2184.058752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2184.059951] CPU: 0 PID: 50877 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2184.060572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2184.061345] Call Trace: [ 2184.061578] dump_stack+0x107/0x167 [ 2184.061904] should_fail.cold+0x5/0xa [ 2184.062251] _copy_to_iter+0x264/0x12d0 [ 2184.062607] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2184.063094] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2184.063534] ? __check_object_size+0x136/0x440 [ 2184.063945] ? __check_object_size+0x180/0x440 [ 2184.064351] ? __check_object_size+0x319/0x440 [ 2184.064779] simple_copy_to_iter+0x4c/0x70 [ 2184.065162] __skb_datagram_iter+0x4f7/0x880 [ 2184.065560] ? zerocopy_sg_from_iter+0x110/0x110 [ 2184.065989] skb_copy_datagram_iter+0x88/0x190 [ 2184.066399] tcp_recvmsg+0x13b5/0x2930 [ 2184.066757] ? tcp_splice_read+0x8c0/0x8c0 [ 2184.067133] ? sock_has_perm+0x1ea/0x280 [ 2184.067496] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2184.067970] ? lock_downgrade+0x6d0/0x6d0 [ 2184.068343] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2184.068826] ? tcp_splice_read+0x8c0/0x8c0 [ 2184.069209] inet6_recvmsg+0x13b/0x6e0 [ 2184.069556] ? inet6_bind+0x120/0x120 [ 2184.069900] ? security_socket_recvmsg+0x95/0xc0 [ 2184.070319] ? inet6_bind+0x120/0x120 [ 2184.070660] sock_recvmsg+0xff/0x180 [ 2184.070991] __sys_recvfrom+0x1be/0x2f0 [ 2184.071345] ? __ia32_sys_send+0x100/0x100 [ 2184.071722] ? lock_downgrade+0x6d0/0x6d0 [ 2184.072103] ? wait_for_completion_io+0x270/0x270 [ 2184.072536] ? rcu_read_lock_any_held+0x75/0xa0 [ 2184.072957] ? vfs_write+0x354/0xa70 [ 2184.073306] ? fput_many+0x2f/0x1a0 [ 2184.073640] ? ksys_write+0x1a9/0x260 [ 2184.073985] ? __ia32_sys_read+0xb0/0xb0 [ 2184.074353] __x64_sys_recvfrom+0xdd/0x1b0 [ 2184.074734] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2184.075197] do_syscall_64+0x33/0x40 [ 2184.075529] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2184.075984] RIP: 0033:0x7fcd1f4c0b19 [ 2184.076321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2184.077969] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2184.078651] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2184.079284] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2184.079913] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2184.080553] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2184.081201] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:21:46 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) [ 2184.142640] device lo left promiscuous mode [ 2184.173824] device lo entered promiscuous mode 03:21:46 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x8202000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 2184.194575] device lo left promiscuous mode 03:21:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 11) 03:21:59 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:21:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000006800, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:21:59 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:21:59 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x8cffffff00000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:21:59 executing program 6: chdir(&(0x7f0000000040)='./file0\x00') mount$cgroup(0x0, 0x0, 0x0, 0x180010, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000300)=0x101) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r0}, 0x3) chroot(&(0x7f0000000280)='./file2\x00') r2 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x404142, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000100)=r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) sendfile(r2, r5, 0x0, 0x100000001) 03:21:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 33) 03:21:59 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 7) 03:21:59 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) [ 2197.246117] FAULT_INJECTION: forcing a failure. [ 2197.246117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2197.247729] CPU: 0 PID: 51273 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2197.248502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2197.249395] Call Trace: [ 2197.249690] dump_stack+0x107/0x167 [ 2197.250095] should_fail.cold+0x5/0xa [ 2197.250518] _copy_to_iter+0x264/0x12d0 [ 2197.250958] ? mark_lock+0xf5/0x2df0 [ 2197.251368] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2197.251953] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2197.252484] ? lock_chain_count+0x20/0x20 [ 2197.252958] ? __virt_addr_valid+0x128/0x350 [ 2197.253440] ? __check_object_size+0x319/0x440 [ 2197.253952] simple_copy_to_iter+0x4c/0x70 [ 2197.254419] __skb_datagram_iter+0x4f7/0x880 [ 2197.254917] ? zerocopy_sg_from_iter+0x110/0x110 [ 2197.255449] skb_copy_datagram_iter+0x88/0x190 [ 2197.255965] tcp_recvmsg+0x13b5/0x2930 [ 2197.256406] ? tcp_splice_read+0x8c0/0x8c0 [ 2197.256903] ? sock_has_perm+0x1ea/0x280 [ 2197.257360] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2197.257929] ? lock_downgrade+0x6d0/0x6d0 [ 2197.258383] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2197.258960] ? tcp_splice_read+0x8c0/0x8c0 [ 2197.259421] inet6_recvmsg+0x13b/0x6e0 [ 2197.259851] ? inet6_bind+0x120/0x120 [ 2197.260271] ? security_socket_recvmsg+0x95/0xc0 [ 2197.260797] ? inet6_bind+0x120/0x120 [ 2197.261225] sock_recvmsg+0xff/0x180 [ 2197.261633] __sys_recvfrom+0x1be/0x2f0 [ 2197.262060] ? __ia32_sys_send+0x100/0x100 [ 2197.262523] ? lock_downgrade+0x6d0/0x6d0 [ 2197.262990] ? wait_for_completion_io+0x270/0x270 [ 2197.263522] ? rcu_read_lock_any_held+0x75/0xa0 [ 2197.264023] ? vfs_write+0x354/0xa70 [ 2197.264441] ? fput_many+0x2f/0x1a0 [ 2197.264835] ? ksys_write+0x1a9/0x260 [ 2197.265270] ? __ia32_sys_read+0xb0/0xb0 [ 2197.265718] __x64_sys_recvfrom+0xdd/0x1b0 [ 2197.266188] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2197.266751] do_syscall_64+0x33/0x40 [ 2197.267165] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2197.267724] RIP: 0033:0x7f848888eb19 [ 2197.268143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2197.270151] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2197.270984] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2197.271758] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2197.272530] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2197.273305] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2197.274075] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 03:21:59 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x8d03000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:21:59 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:21:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000006c00, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:21:59 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:21:59 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x80, 0x6) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) splice(r2, &(0x7f00000000c0)=0x40, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0xdcc, 0x12) [ 2197.442873] FAULT_INJECTION: forcing a failure. [ 2197.442873] name failslab, interval 1, probability 0, space 0, times 0 [ 2197.444457] CPU: 0 PID: 51204 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 2197.445234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2197.446149] Call Trace: [ 2197.446451] dump_stack+0x107/0x167 [ 2197.446866] should_fail.cold+0x5/0xa [ 2197.447305] ? __alloc_skb+0x6d/0x5b0 [ 2197.447743] should_failslab+0x5/0x20 [ 2197.448178] kmem_cache_alloc_node+0x55/0x330 [ 2197.448687] __alloc_skb+0x6d/0x5b0 [ 2197.449112] __tcp_send_ack.part.0+0x67/0x650 [ 2197.449614] tcp_send_ack+0x7d/0xa0 [ 2197.450011] __tcp_ack_snd_check+0x156/0x9f0 [ 2197.450500] tcp_rcv_established+0x955/0x1e30 [ 2197.450995] ? tcp_check_space+0x6c0/0x6c0 [ 2197.451477] tcp_v6_do_rcv+0x7b3/0x1520 [ 2197.451911] __release_sock+0x139/0x3b0 [ 2197.452362] release_sock+0x54/0x1b0 [ 2197.452769] tcp_recvmsg+0x870/0x2930 [ 2197.453203] ? tcp_splice_read+0x8c0/0x8c0 03:21:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000007400, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2197.453673] ? sock_has_perm+0x1ea/0x280 [ 2197.454275] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2197.454843] ? lock_downgrade+0x6d0/0x6d0 [ 2197.455307] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2197.455884] ? tcp_splice_read+0x8c0/0x8c0 [ 2197.456347] inet6_recvmsg+0x13b/0x6e0 [ 2197.456780] ? inet6_bind+0x120/0x120 [ 2197.457217] ? security_socket_recvmsg+0x95/0xc0 [ 2197.457727] ? inet6_bind+0x120/0x120 [ 2197.458148] sock_recvmsg+0xff/0x180 [ 2197.458559] __sys_recvfrom+0x1be/0x2f0 [ 2197.458986] ? __ia32_sys_send+0x100/0x100 [ 2197.459447] ? lock_downgrade+0x6d0/0x6d0 [ 2197.459917] ? wait_for_completion_io+0x270/0x270 [ 2197.460457] ? rcu_read_lock_any_held+0x75/0xa0 [ 2197.460969] ? vfs_write+0x354/0xa70 [ 2197.461382] ? fput_many+0x2f/0x1a0 [ 2197.461789] ? ksys_write+0x1a9/0x260 [ 2197.462202] ? __ia32_sys_read+0xb0/0xb0 [ 2197.462652] __x64_sys_recvfrom+0xdd/0x1b0 [ 2197.463118] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2197.463674] do_syscall_64+0x33/0x40 [ 2197.464081] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2197.464639] RIP: 0033:0x7f2e54dfeb19 [ 2197.465065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2197.467102] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2197.467925] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 2197.468689] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2197.469471] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2197.470238] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2197.471008] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 [ 2197.475549] FAULT_INJECTION: forcing a failure. [ 2197.475549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2197.476958] CPU: 0 PID: 51267 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2197.477713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2197.478605] Call Trace: [ 2197.478902] dump_stack+0x107/0x167 [ 2197.479306] should_fail.cold+0x5/0xa [ 2197.479752] _copy_to_iter+0x264/0x12d0 [ 2197.480214] ? sk_wait_data+0x353/0x4d0 [ 2197.480657] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2197.481215] ? __virt_addr_valid+0x128/0x350 [ 2197.481708] ? __check_object_size+0x319/0x440 [ 2197.482211] simple_copy_to_iter+0x4c/0x70 [ 2197.482678] __skb_datagram_iter+0x122/0x880 [ 2197.483174] ? zerocopy_sg_from_iter+0x110/0x110 03:21:59 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2197.483706] skb_copy_datagram_iter+0x88/0x190 [ 2197.484340] tcp_recvmsg+0x13b5/0x2930 [ 2197.484789] ? tcp_splice_read+0x8c0/0x8c0 [ 2197.485280] ? sock_has_perm+0x1ea/0x280 [ 2197.485730] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2197.486306] ? lock_downgrade+0x6d0/0x6d0 [ 2197.486768] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2197.487332] ? tcp_splice_read+0x8c0/0x8c0 [ 2197.487796] inet6_recvmsg+0x13b/0x6e0 [ 2197.488223] ? inet6_bind+0x120/0x120 [ 2197.488644] ? security_socket_recvmsg+0x95/0xc0 [ 2197.489174] ? inet6_bind+0x120/0x120 [ 2197.489597] sock_recvmsg+0xff/0x180 [ 2197.490012] __sys_recvfrom+0x1be/0x2f0 [ 2197.490454] ? __ia32_sys_send+0x100/0x100 [ 2197.490917] ? lock_downgrade+0x6d0/0x6d0 [ 2197.491395] ? wait_for_completion_io+0x270/0x270 [ 2197.491925] ? rcu_read_lock_any_held+0x75/0xa0 [ 2197.492439] ? vfs_write+0x354/0xa70 [ 2197.492849] ? fput_many+0x2f/0x1a0 [ 2197.493272] ? ksys_write+0x1a9/0x260 [ 2197.493700] ? __ia32_sys_read+0xb0/0xb0 [ 2197.494154] __x64_sys_recvfrom+0xdd/0x1b0 [ 2197.494626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2197.495203] do_syscall_64+0x33/0x40 [ 2197.495622] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2197.496197] RIP: 0033:0x7fcd1f4c0b19 [ 2197.496608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2197.498617] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2197.499453] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2197.500243] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2197.501034] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2197.501813] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2197.502590] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:22:12 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xad02000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:22:12 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 8) 03:22:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 12) 03:22:12 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f0000000080)={[{@stripe}]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x2a000, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/94, 0x5e}], 0x1, 0xfffffffd, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x4000, 0x161) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x3, 0x4}) 03:22:12 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:22:12 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:22:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000007800, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:22:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 34) 03:22:12 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:22:12 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) [ 2210.022238] EXT4-fs (sda): re-mounted. Opts: stripe=0x0000000000000000,,errors=continue [ 2210.028623] FAULT_INJECTION: forcing a failure. [ 2210.028623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2210.029643] CPU: 1 PID: 51451 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2210.030210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2210.030886] Call Trace: [ 2210.031109] dump_stack+0x107/0x167 [ 2210.031416] should_fail.cold+0x5/0xa [ 2210.031732] _copy_to_iter+0x264/0x12d0 [ 2210.032081] ? mark_lock+0xf5/0x2df0 [ 2210.032407] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2210.032845] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2210.033264] ? lock_chain_count+0x20/0x20 [ 2210.033614] ? __virt_addr_valid+0x128/0x350 [ 2210.033983] ? __check_object_size+0x319/0x440 [ 2210.034369] simple_copy_to_iter+0x4c/0x70 [ 2210.034735] __skb_datagram_iter+0x4f7/0x880 [ 2210.035105] ? zerocopy_sg_from_iter+0x110/0x110 [ 2210.035510] skb_copy_datagram_iter+0x88/0x190 [ 2210.035891] tcp_recvmsg+0x13b5/0x2930 [ 2210.036224] ? tcp_splice_read+0x8c0/0x8c0 [ 2210.036582] ? sock_has_perm+0x1ea/0x280 [ 2210.036918] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2210.037356] ? lock_downgrade+0x6d0/0x6d0 [ 2210.037701] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2210.038139] ? tcp_splice_read+0x8c0/0x8c0 [ 2210.038501] inet6_recvmsg+0x13b/0x6e0 [ 2210.038829] ? inet6_bind+0x120/0x120 [ 2210.039154] ? security_socket_recvmsg+0x95/0xc0 [ 2210.039555] ? inet6_bind+0x120/0x120 [ 2210.039871] sock_recvmsg+0xff/0x180 [ 2210.040182] __sys_recvfrom+0x1be/0x2f0 [ 2210.040514] ? __ia32_sys_send+0x100/0x100 [ 2210.040864] ? lock_downgrade+0x6d0/0x6d0 [ 2210.041228] ? wait_for_completion_io+0x270/0x270 [ 2210.041647] ? rcu_read_lock_any_held+0x75/0xa0 [ 2210.042037] ? vfs_write+0x354/0xa70 [ 2210.042340] ? fput_many+0x2f/0x1a0 [ 2210.042638] ? ksys_write+0x1a9/0x260 [ 2210.042963] ? __ia32_sys_read+0xb0/0xb0 [ 2210.043314] __x64_sys_recvfrom+0xdd/0x1b0 [ 2210.043675] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2210.044106] do_syscall_64+0x33/0x40 [ 2210.044410] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2210.044830] RIP: 0033:0x7f848888eb19 [ 2210.045145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2210.046662] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2210.047283] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2210.047872] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2210.048406] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2210.048995] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2210.049591] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 03:22:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000007a00, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2210.065694] EXT4-fs (sda): re-mounted. Opts: stripe=0x0000000000000000,,errors=continue 03:22:12 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xc0ffffffffffffff, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:22:12 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x8020, 0x0, 0x2, 0xd3e5}) close(r0) unlink(&(0x7f0000000080)='./file1\x00') 03:22:12 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:22:12 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:22:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000edc0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2210.245373] FAULT_INJECTION: forcing a failure. [ 2210.245373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2210.246667] CPU: 1 PID: 51452 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2210.247241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2210.247918] Call Trace: [ 2210.248148] dump_stack+0x107/0x167 [ 2210.248457] should_fail.cold+0x5/0xa [ 2210.248779] _copy_to_iter+0x264/0x12d0 [ 2210.249135] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2210.249587] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2210.249993] ? __check_object_size+0x136/0x440 [ 2210.250379] ? __virt_addr_valid+0x128/0x350 [ 2210.250742] ? __check_object_size+0x319/0x440 [ 2210.251128] simple_copy_to_iter+0x4c/0x70 [ 2210.251477] __skb_datagram_iter+0x4f7/0x880 [ 2210.251849] ? zerocopy_sg_from_iter+0x110/0x110 [ 2210.252281] skb_copy_datagram_iter+0x88/0x190 [ 2210.252793] tcp_recvmsg+0x13b5/0x2930 [ 2210.253178] ? tcp_splice_read+0x8c0/0x8c0 [ 2210.253692] ? sock_has_perm+0x1ea/0x280 [ 2210.254117] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2210.254544] ? lock_downgrade+0x6d0/0x6d0 [ 2210.254895] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2210.255328] ? tcp_splice_read+0x8c0/0x8c0 [ 2210.255685] inet6_recvmsg+0x13b/0x6e0 [ 2210.256013] ? inet6_bind+0x120/0x120 [ 2210.256330] ? security_socket_recvmsg+0x95/0xc0 [ 2210.256718] ? inet6_bind+0x120/0x120 [ 2210.257044] sock_recvmsg+0xff/0x180 [ 2210.257439] __sys_recvfrom+0x1be/0x2f0 [ 2210.257804] ? __ia32_sys_send+0x100/0x100 [ 2210.258309] ? lock_downgrade+0x6d0/0x6d0 [ 2210.258749] ? wait_for_completion_io+0x270/0x270 [ 2210.259152] ? rcu_read_lock_any_held+0x75/0xa0 [ 2210.259529] ? vfs_write+0x354/0xa70 [ 2210.259840] ? fput_many+0x2f/0x1a0 [ 2210.260143] ? ksys_write+0x1a9/0x260 [ 2210.260463] ? __ia32_sys_read+0xb0/0xb0 [ 2210.260800] __x64_sys_recvfrom+0xdd/0x1b0 [ 2210.261176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2210.261606] do_syscall_64+0x33/0x40 [ 2210.261912] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2210.262478] RIP: 0033:0x7fcd1f4c0b19 [ 2210.262785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2210.264536] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2210.265167] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2210.265745] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2210.266340] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2210.267048] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2210.267740] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 [ 2210.276036] FAULT_INJECTION: forcing a failure. [ 2210.276036] name failslab, interval 1, probability 0, space 0, times 0 [ 2210.277046] CPU: 1 PID: 51453 Comm: syz-executor.4 Not tainted 5.10.209 #1 [ 2210.277621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2210.278427] Call Trace: [ 2210.278667] dump_stack+0x107/0x167 [ 2210.279144] should_fail.cold+0x5/0xa [ 2210.279544] ? create_object.isra.0+0x3a/0xa20 [ 2210.279924] should_failslab+0x5/0x20 [ 2210.280242] kmem_cache_alloc+0x5b/0x310 [ 2210.280583] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2210.281024] create_object.isra.0+0x3a/0xa20 [ 2210.281385] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2210.281801] kmem_cache_alloc_node+0x169/0x330 [ 2210.282185] __alloc_skb+0x6d/0x5b0 [ 2210.282503] __tcp_send_ack.part.0+0x67/0x650 [ 2210.282873] tcp_send_ack+0x7d/0xa0 [ 2210.283171] __tcp_ack_snd_check+0x156/0x9f0 [ 2210.283543] tcp_rcv_established+0x955/0x1e30 [ 2210.283918] ? tcp_check_space+0x6c0/0x6c0 [ 2210.284305] tcp_v6_do_rcv+0x7b3/0x1520 [ 2210.284733] __release_sock+0x139/0x3b0 [ 2210.285080] release_sock+0x54/0x1b0 [ 2210.285492] tcp_recvmsg+0x870/0x2930 [ 2210.285971] ? tcp_splice_read+0x8c0/0x8c0 [ 2210.286331] ? sock_has_perm+0x1ea/0x280 [ 2210.286663] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2210.287083] ? lock_downgrade+0x6d0/0x6d0 [ 2210.287429] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2210.287859] ? tcp_splice_read+0x8c0/0x8c0 [ 2210.288215] inet6_recvmsg+0x13b/0x6e0 [ 2210.288534] ? inet6_bind+0x120/0x120 [ 2210.288845] ? security_socket_recvmsg+0x95/0xc0 [ 2210.289244] ? inet6_bind+0x120/0x120 [ 2210.289556] sock_recvmsg+0xff/0x180 [ 2210.289863] __sys_recvfrom+0x1be/0x2f0 [ 2210.290189] ? __ia32_sys_send+0x100/0x100 [ 2210.290530] ? lock_downgrade+0x6d0/0x6d0 [ 2210.290888] ? wait_for_completion_io+0x270/0x270 [ 2210.291313] ? rcu_read_lock_any_held+0x75/0xa0 [ 2210.291694] ? vfs_write+0x354/0xa70 [ 2210.292002] ? fput_many+0x2f/0x1a0 [ 2210.292307] ? ksys_write+0x1a9/0x260 [ 2210.292616] ? __ia32_sys_read+0xb0/0xb0 [ 2210.293131] __x64_sys_recvfrom+0xdd/0x1b0 [ 2210.293480] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2210.294115] do_syscall_64+0x33/0x40 [ 2210.294467] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2210.294887] RIP: 0033:0x7f2e54dfeb19 [ 2210.295196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2210.296803] RSP: 002b:00007f2e52353188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2210.297648] RAX: ffffffffffffffda RBX: 00007f2e54f12020 RCX: 00007f2e54dfeb19 [ 2210.298325] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2210.298893] RBP: 00007f2e523531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2210.299476] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2210.300057] R13: 00007ffc491a22bf R14: 00007f2e52353300 R15: 0000000000022000 03:22:12 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:22:26 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 9) 03:22:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 35) 03:22:26 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xd479000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:22:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000f22f, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:22:26 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:22:26 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xa11b8fd5b468ddae}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa48d, 0x0, 0x2, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) fallocate(r2, 0x0, 0x80000000, 0x3) signalfd(r0, &(0x7f0000000000)={[0x5]}, 0x8) fstatfs(0xffffffffffffffff, &(0x7f0000000100)=""/144) 03:22:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 13) 03:22:26 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:22:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000ff0f, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:22:26 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) [ 2224.490086] FAULT_INJECTION: forcing a failure. [ 2224.490086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2224.491121] CPU: 1 PID: 51734 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2224.491683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2224.492354] Call Trace: [ 2224.492580] dump_stack+0x107/0x167 [ 2224.492890] should_fail.cold+0x5/0xa [ 2224.493340] _copy_to_iter+0x264/0x12d0 [ 2224.493785] ? mark_lock+0xf5/0x2df0 [ 2224.494196] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2224.494629] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2224.495132] ? lock_chain_count+0x20/0x20 [ 2224.495566] ? __virt_addr_valid+0x128/0x350 [ 2224.496037] ? __check_object_size+0x319/0x440 [ 2224.496416] simple_copy_to_iter+0x4c/0x70 [ 2224.496870] __skb_datagram_iter+0x4f7/0x880 [ 2224.497402] ? zerocopy_sg_from_iter+0x110/0x110 [ 2224.497855] skb_copy_datagram_iter+0x88/0x190 [ 2224.498339] tcp_recvmsg+0x13b5/0x2930 [ 2224.498766] ? tcp_splice_read+0x8c0/0x8c0 [ 2224.499245] ? sock_has_perm+0x1ea/0x280 [ 2224.499582] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2224.500097] ? lock_downgrade+0x6d0/0x6d0 [ 2224.500592] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2224.501073] ? tcp_splice_read+0x8c0/0x8c0 [ 2224.501561] inet6_recvmsg+0x13b/0x6e0 [ 2224.501976] ? inet6_bind+0x120/0x120 [ 2224.502361] ? security_socket_recvmsg+0x95/0xc0 [ 2224.502820] ? inet6_bind+0x120/0x120 [ 2224.503184] sock_recvmsg+0xff/0x180 [ 2224.503597] __sys_recvfrom+0x1be/0x2f0 [ 2224.504034] ? __ia32_sys_send+0x100/0x100 [ 2224.504426] ? lock_downgrade+0x6d0/0x6d0 [ 2224.504843] ? wait_for_completion_io+0x270/0x270 [ 2224.505443] ? rcu_read_lock_any_held+0x75/0xa0 [ 2224.505835] ? vfs_write+0x354/0xa70 [ 2224.506254] ? fput_many+0x2f/0x1a0 [ 2224.506628] ? ksys_write+0x1a9/0x260 [ 2224.507074] ? __ia32_sys_read+0xb0/0xb0 [ 2224.507412] __x64_sys_recvfrom+0xdd/0x1b0 [ 2224.507852] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2224.508375] do_syscall_64+0x33/0x40 [ 2224.508816] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2224.509257] RIP: 0033:0x7f848888eb19 [ 2224.509667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2224.511395] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2224.512111] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2224.512853] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2224.513491] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2224.514076] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2224.514727] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 03:22:26 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x2040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f0000002fc0)=""/12, 0xc}, {&(0x7f0000000340)=""/83, 0x53}, {&(0x7f00000003c0)=""/34, 0x22}, {&(0x7f00000033c0)=""/241, 0xf1}], 0x8, &(0x7f0000003300)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000001cc0)=[{&(0x7f00000006c0)=""/39, 0x27}, {&(0x7f0000000700)=""/244, 0xf4}, {&(0x7f0000000800)=""/9, 0x9}, {&(0x7f0000000840)=""/206, 0xce}, {&(0x7f0000000940)=""/247, 0xf7}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/29, 0x1d}, {&(0x7f0000001a80)=""/146, 0x92}, {&(0x7f0000001b40)=""/73, 0x49}, {&(0x7f0000001bc0)=""/225, 0xe1}], 0xa, &(0x7f0000001e00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000001e80), 0x6e, &(0x7f0000002f80)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/78, 0x4e}], 0x2, &(0x7f0000003280)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x3, 0x1, &(0x7f0000003100)={0x77359400}) write$tun(r1, &(0x7f0000003140)={@void, @val={0x1, 0x0, 0x0, 0x3, 0x3, 0x3}, @ipv6=@dccp_packet={0x3, 0x6, "57effa", 0xee, 0x21, 0x0, @loopback, @private2, {[@dstopts={0x87, 0xc, '\x00', [@pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3a}}, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0xdd, 0x5, [0x80, 0x8, 0x9, 0x2]}}, @ra={0x5, 0x2, 0x72}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x20}]}], {{0x4e23, 0x4e23, 0x4, 0x1, 0xf, 0x0, 0x0, 0x7, 0x4, "a8b278", 0xff, "c1dd27"}, "bd74d6fbe18360c47965d15a3e58b6b936d343638fd94f90e4fecb29ab2c4441986a10e52fa772711feaaa75c67f21259186a9625759aad74e6058798e896b6ba1671f76746b247162059d558f81e6f836d63c7fde7827a643a8ba5a37fdca12770dd4f45aed91bdb0e06518d948"}}}}, 0x120) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) 03:22:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000040000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:22:26 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xd579000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:22:26 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) [ 2224.691724] FAULT_INJECTION: forcing a failure. [ 2224.691724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2224.692799] CPU: 1 PID: 51735 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2224.693391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2224.694069] Call Trace: [ 2224.694301] dump_stack+0x107/0x167 [ 2224.694608] should_fail.cold+0x5/0xa [ 2224.694928] _copy_to_iter+0x264/0x12d0 [ 2224.695273] ? __virt_addr_valid+0x220/0x350 [ 2224.695641] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2224.696050] ? __virt_addr_valid+0x128/0x350 [ 2224.696422] ? __check_object_size+0x319/0x440 [ 2224.696815] simple_copy_to_iter+0x4c/0x70 [ 2224.697166] __skb_datagram_iter+0x4f7/0x880 [ 2224.697546] ? zerocopy_sg_from_iter+0x110/0x110 [ 2224.697950] skb_copy_datagram_iter+0x88/0x190 [ 2224.698334] tcp_recvmsg+0x13b5/0x2930 [ 2224.698668] ? tcp_splice_read+0x8c0/0x8c0 [ 2224.699026] ? sock_has_perm+0x1ea/0x280 [ 2224.699373] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2224.699798] ? lock_downgrade+0x6d0/0x6d0 [ 2224.700142] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2224.700578] ? tcp_splice_read+0x8c0/0x8c0 [ 2224.700932] inet6_recvmsg+0x13b/0x6e0 [ 2224.701265] ? inet6_bind+0x120/0x120 [ 2224.701580] ? security_socket_recvmsg+0x95/0xc0 [ 2224.701969] ? inet6_bind+0x120/0x120 [ 2224.702288] sock_recvmsg+0xff/0x180 [ 2224.702595] __sys_recvfrom+0x1be/0x2f0 [ 2224.702932] ? __ia32_sys_send+0x100/0x100 [ 2224.703285] ? lock_downgrade+0x6d0/0x6d0 [ 2224.703643] ? wait_for_completion_io+0x270/0x270 [ 2224.704047] ? rcu_read_lock_any_held+0x75/0xa0 [ 2224.704430] ? vfs_write+0x354/0xa70 [ 2224.704739] ? fput_many+0x2f/0x1a0 [ 2224.705038] ? ksys_write+0x1a9/0x260 [ 2224.705361] ? __ia32_sys_read+0xb0/0xb0 [ 2224.705699] __x64_sys_recvfrom+0xdd/0x1b0 [ 2224.706044] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2224.706470] do_syscall_64+0x33/0x40 [ 2224.706773] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2224.707193] RIP: 0033:0x7fcd1f4c0b19 [ 2224.707496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2224.708993] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d 03:22:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x40000407ff, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2224.709637] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2224.710428] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2224.711001] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2224.711577] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2224.712151] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:22:39 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xd679000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:22:39 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:22:39 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:22:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:22:39 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000040800, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:22:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 14) 03:22:39 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 10) 03:22:39 executing program 6: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000180)) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)="69b1dc4ecac135e10f3ce4af2e2d450ddf91d8db6bab81c16214cbd0eef4305974e72eda06dfe3d1837f31175505ee45a8d07cbb47e44330f0a97eea59bc10f205a5a720147ede6d7d4e4b6d97f406b6b0b6c77b3f681c81d32eb6ae82c00f0e7c97cd03c47a8ea205feeffb0446d463c8bf4a7217b3c1b37f25", 0x7a}}, 0x8c4) [ 2237.900881] Unsupported ieee802154 address type: 0 [ 2237.904941] ieee802154 phy0 wpan0: encryption failed: -90 [ 2237.925039] Unsupported ieee802154 address type: 0 [ 2237.935041] ieee802154 phy0 wpan0: encryption failed: -90 03:22:40 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:22:40 executing program 6: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb50aff352f3e9c2e6bf0c95d5cc2cb586383b504feb79ac12f1e2734ed78", 0x28, 0x10, 0x1}, 0x0) close(0xffffffffffffffff) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5e, 0x82004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0xffff8001, 0x0, 0x0, 0x400000, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x11, &(0x7f00000010c0)={@empty}, 0x14) finit_module(r5, &(0x7f0000000040)='\'-.:\x00', 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = getpid() pidfd_open(r6, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:22:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000042181, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:22:40 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xd779000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:22:40 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2238.130737] FAULT_INJECTION: forcing a failure. [ 2238.130737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2238.132885] CPU: 0 PID: 52009 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2238.133865] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2238.135010] Call Trace: [ 2238.135398] dump_stack+0x107/0x167 [ 2238.135922] should_fail.cold+0x5/0xa [ 2238.136453] _copy_to_iter+0x264/0x12d0 [ 2238.137023] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2238.137768] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2238.138522] ? trace_hardirqs_on+0x5b/0x180 [ 2238.139124] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2238.139889] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2238.140566] ? __virt_addr_valid+0x128/0x350 [ 2238.141181] ? __check_object_size+0x319/0x440 [ 2238.141841] simple_copy_to_iter+0x4c/0x70 [ 2238.142428] __skb_datagram_iter+0x4f7/0x880 [ 2238.143053] ? zerocopy_sg_from_iter+0x110/0x110 [ 2238.143716] skb_copy_datagram_iter+0x88/0x190 [ 2238.144360] tcp_recvmsg+0x13b5/0x2930 [ 2238.144921] ? tcp_splice_read+0x8c0/0x8c0 [ 2238.145532] ? sock_has_perm+0x1ea/0x280 [ 2238.146101] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2238.146822] ? lock_downgrade+0x6d0/0x6d0 [ 2238.147406] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2238.148128] ? tcp_splice_read+0x8c0/0x8c0 [ 2238.148718] inet6_recvmsg+0x13b/0x6e0 [ 2238.149262] ? inet6_bind+0x120/0x120 [ 2238.149820] ? security_socket_recvmsg+0x95/0xc0 [ 2238.150480] ? inet6_bind+0x120/0x120 [ 2238.151019] sock_recvmsg+0xff/0x180 [ 2238.151539] __sys_recvfrom+0x1be/0x2f0 [ 2238.152097] ? __ia32_sys_send+0x100/0x100 [ 2238.152694] ? lock_downgrade+0x6d0/0x6d0 [ 2238.153300] ? wait_for_completion_io+0x270/0x270 [ 2238.153996] ? rcu_read_lock_any_held+0x75/0xa0 [ 2238.154654] ? vfs_write+0x354/0xa70 [ 2238.155178] ? fput_many+0x2f/0x1a0 [ 2238.155685] ? ksys_write+0x1a9/0x260 [ 2238.156219] ? __ia32_sys_read+0xb0/0xb0 [ 2238.156789] __x64_sys_recvfrom+0xdd/0x1b0 [ 2238.157404] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2238.158110] do_syscall_64+0x33/0x40 [ 2238.158633] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2238.159332] RIP: 0033:0x7f848888eb19 [ 2238.159856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2238.162391] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2238.163428] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2238.164416] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2238.165401] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2238.166403] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2238.166447] FAULT_INJECTION: forcing a failure. [ 2238.166447] name failslab, interval 1, probability 0, space 0, times 0 [ 2238.167371] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 [ 2238.169526] CPU: 1 PID: 52008 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2238.170227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2238.170959] Call Trace: [ 2238.171189] dump_stack+0x107/0x167 [ 2238.171501] should_fail.cold+0x5/0xa [ 2238.171832] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2238.172271] ? __alloc_skb+0x6d/0x5b0 [ 2238.172597] should_failslab+0x5/0x20 [ 2238.172924] kmem_cache_alloc_node+0x55/0x330 [ 2238.173299] ? kmem_cache_free+0xa7/0x2d0 [ 2238.173647] __alloc_skb+0x6d/0x5b0 [ 2238.173972] __tcp_send_ack.part.0+0x67/0x650 [ 2238.174367] ? kmem_cache_free+0x249/0x2d0 [ 2238.174721] tcp_send_ack+0x7d/0xa0 [ 2238.175019] tcp_cleanup_rbuf+0x468/0x5a0 [ 2238.175365] tcp_recvmsg+0xb85/0x2930 [ 2238.175694] ? tcp_splice_read+0x8c0/0x8c0 [ 2238.176053] ? sock_has_perm+0x1ea/0x280 [ 2238.176406] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2238.176838] ? lock_downgrade+0x6d0/0x6d0 [ 2238.177190] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2238.177655] ? tcp_splice_read+0x8c0/0x8c0 [ 2238.178009] inet6_recvmsg+0x13b/0x6e0 [ 2238.178329] ? inet6_bind+0x120/0x120 [ 2238.178644] ? security_socket_recvmsg+0x95/0xc0 [ 2238.179032] ? inet6_bind+0x120/0x120 [ 2238.179374] sock_recvmsg+0xff/0x180 [ 2238.179705] __sys_recvfrom+0x1be/0x2f0 [ 2238.180034] ? __ia32_sys_send+0x100/0x100 [ 2238.180397] ? lock_downgrade+0x6d0/0x6d0 [ 2238.180766] ? wait_for_completion_io+0x270/0x270 [ 2238.181170] ? rcu_read_lock_any_held+0x75/0xa0 [ 2238.181567] ? vfs_write+0x354/0xa70 [ 2238.181901] ? fput_many+0x2f/0x1a0 [ 2238.182215] ? ksys_write+0x1a9/0x260 [ 2238.182546] ? __ia32_sys_read+0xb0/0xb0 [ 2238.182886] __x64_sys_recvfrom+0xdd/0x1b0 [ 2238.183247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2238.183680] do_syscall_64+0x33/0x40 [ 2238.183994] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2238.184424] RIP: 0033:0x7fcd1f4c0b19 [ 2238.184760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2238.186334] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2238.186985] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2238.187587] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2238.188182] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2238.188769] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2238.189372] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:22:40 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xd879000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:22:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000042182, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:22:40 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:22:40 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:22:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 15) 03:22:52 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 11) 03:22:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x294, 0xcd08, 0x0, 0x0) 03:22:52 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xd979000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:22:52 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5e, 0x20100, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffff1f8}, 0x3001, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x300b4e2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r3, @ANYRES16, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="6d6e09ca044e459fc753aa7728297fa689f90e8b8ef0926627986bfba2d209000000000000b22211d6cc3f97cd8950088e1fd6d3d8554bb81c3261e804728fab2b561d1d3c03b4b091ee0aa949520b04223af6a5c19000e7ffffffffffffff00"], 0x1c}}, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) 03:22:52 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:22:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000042187, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:22:52 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:22:52 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:22:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000042188, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:22:52 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xda79000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:22:52 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:22:52 executing program 6: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) [ 2250.668609] FAULT_INJECTION: forcing a failure. [ 2250.668609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2250.670211] CPU: 0 PID: 52290 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2250.671022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2250.671986] Call Trace: [ 2250.672292] dump_stack+0x107/0x167 [ 2250.672735] should_fail.cold+0x5/0xa [ 2250.673180] _copy_to_iter+0x264/0x12d0 [ 2250.673670] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2250.674275] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2250.674894] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2250.675505] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2250.676074] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2250.676691] ? __virt_addr_valid+0x128/0x350 [ 2250.677213] ? __check_object_size+0x319/0x440 [ 2250.677762] simple_copy_to_iter+0x4c/0x70 [ 2250.678266] __skb_datagram_iter+0x4f7/0x880 [ 2250.678775] ? zerocopy_sg_from_iter+0x110/0x110 [ 2250.679331] skb_copy_datagram_iter+0x88/0x190 [ 2250.679874] tcp_recvmsg+0x13b5/0x2930 [ 2250.680345] ? tcp_splice_read+0x8c0/0x8c0 [ 2250.680851] ? sock_has_perm+0x7f/0x280 [ 2250.681317] ? sock_has_perm+0x92/0x280 [ 2250.681786] ? sock_has_perm+0x1ea/0x280 [ 2250.682271] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2250.682862] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2250.683480] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2250.684119] ? tcp_splice_read+0x8c0/0x8c0 [ 2250.684605] inet6_recvmsg+0x13b/0x6e0 [ 2250.685056] ? inet6_bind+0x120/0x120 [ 2250.685527] ? security_socket_recvmsg+0x95/0xc0 [ 2250.686074] ? inet6_bind+0x120/0x120 [ 2250.686525] sock_recvmsg+0xff/0x180 [ 2250.686959] __sys_recvfrom+0x1be/0x2f0 [ 2250.687434] ? __ia32_sys_send+0x100/0x100 [ 2250.687940] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2250.688448] ? clockevents_program_event+0x131/0x360 [ 2250.689037] ? tick_program_event+0xa8/0x140 [ 2250.689552] ? hrtimer_interrupt+0x771/0x9b0 [ 2250.690052] __x64_sys_recvfrom+0xdd/0x1b0 [ 2250.690515] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2250.691098] do_syscall_64+0x33/0x40 [ 2250.691533] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2250.692131] RIP: 0033:0x7f848888eb19 [ 2250.692577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2250.694349] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2250.695020] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2250.695679] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2250.696346] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2250.696972] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2250.697721] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 [ 2250.701470] FAULT_INJECTION: forcing a failure. [ 2250.701470] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.702840] CPU: 0 PID: 52328 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2250.703632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2250.704575] Call Trace: [ 2250.704881] dump_stack+0x107/0x167 [ 2250.705296] should_fail.cold+0x5/0xa [ 2250.705772] ? create_object.isra.0+0x3a/0xa20 [ 2250.706304] should_failslab+0x5/0x20 [ 2250.706752] kmem_cache_alloc+0x5b/0x310 [ 2250.707225] create_object.isra.0+0x3a/0xa20 [ 2250.707742] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2250.708331] kmem_cache_alloc_node+0x169/0x330 [ 2250.708867] ? kmem_cache_free+0xa7/0x2d0 [ 2250.709348] __alloc_skb+0x6d/0x5b0 [ 2250.709790] __tcp_send_ack.part.0+0x67/0x650 [ 2250.710309] ? kmem_cache_free+0x249/0x2d0 [ 2250.710790] tcp_send_ack+0x7d/0xa0 [ 2250.711218] tcp_cleanup_rbuf+0x468/0x5a0 [ 2250.711692] tcp_recvmsg+0xb85/0x2930 [ 2250.712161] ? tcp_splice_read+0x8c0/0x8c0 [ 2250.712655] ? sock_has_perm+0x1ea/0x280 [ 2250.713128] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2250.713751] ? lock_downgrade+0x6d0/0x6d0 [ 2250.714226] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2250.714842] ? tcp_splice_read+0x8c0/0x8c0 [ 2250.715328] inet6_recvmsg+0x13b/0x6e0 [ 2250.715793] ? inet6_bind+0x120/0x120 [ 2250.716233] ? security_socket_recvmsg+0x95/0xc0 [ 2250.716788] ? inet6_bind+0x120/0x120 [ 2250.717223] sock_recvmsg+0xff/0x180 [ 2250.717682] __sys_recvfrom+0x1be/0x2f0 [ 2250.718139] ? __ia32_sys_send+0x100/0x100 [ 2250.718619] ? lock_downgrade+0x6d0/0x6d0 [ 2250.719132] ? wait_for_completion_io+0x270/0x270 [ 2250.719682] ? rcu_read_lock_any_held+0x75/0xa0 [ 2250.720226] ? vfs_write+0x354/0xa70 [ 2250.720660] ? fput_many+0x2f/0x1a0 [ 2250.721096] ? ksys_write+0x1a9/0x260 [ 2250.721542] ? __ia32_sys_read+0xb0/0xb0 [ 2250.722024] __x64_sys_recvfrom+0xdd/0x1b0 [ 2250.722514] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2250.723109] do_syscall_64+0x33/0x40 [ 2250.723526] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2250.724103] RIP: 0033:0x7fcd1f4c0b19 [ 2250.724540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2250.726707] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2250.727393] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2250.728036] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2250.728697] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2250.729340] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2250.729991] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:22:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400004218d, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:22:52 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xdb79000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:23:05 executing program 6: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @mcast1, 0x9}, 0x1c) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 03:23:05 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400004218e, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:23:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x300, 0xcd08, 0x0, 0x0) 03:23:05 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 12) 03:23:05 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:23:05 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xdc79000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:23:05 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:23:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 16) 03:23:05 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000042199, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2263.526337] serio: Serial port tty33 03:23:05 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:23:05 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xdd79000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:23:05 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400004219a, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:23:05 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2263.716561] FAULT_INJECTION: forcing a failure. [ 2263.716561] name failslab, interval 1, probability 0, space 0, times 0 [ 2263.717943] CPU: 1 PID: 52677 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2263.718637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2263.719482] Call Trace: [ 2263.719758] dump_stack+0x107/0x167 [ 2263.720134] should_fail.cold+0x5/0xa [ 2263.720526] ? __alloc_skb+0x6d/0x5b0 [ 2263.720920] should_failslab+0x5/0x20 [ 2263.721312] kmem_cache_alloc_node+0x55/0x330 [ 2263.721782] __alloc_skb+0x6d/0x5b0 [ 2263.722158] __tcp_send_ack.part.0+0x67/0x650 [ 2263.722617] tcp_send_ack+0x7d/0xa0 [ 2263.722991] __tcp_ack_snd_check+0x156/0x9f0 [ 2263.723452] tcp_rcv_established+0x955/0x1e30 [ 2263.723909] ? tcp_check_space+0x6c0/0x6c0 [ 2263.724350] tcp_v6_do_rcv+0x7b3/0x1520 [ 2263.724759] __release_sock+0x139/0x3b0 [ 2263.725172] release_sock+0x54/0x1b0 [ 2263.725548] sk_wait_data+0x1a7/0x4d0 [ 2263.725951] ? sock_set_mark+0x130/0x130 [ 2263.726371] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2263.726891] tcp_recvmsg+0x17b2/0x2930 [ 2263.727297] ? tcp_splice_read+0x8c0/0x8c0 [ 2263.727733] ? sock_has_perm+0x1ea/0x280 [ 2263.728152] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2263.728677] ? lock_downgrade+0x6d0/0x6d0 [ 2263.729104] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2263.729641] ? tcp_splice_read+0x8c0/0x8c0 [ 2263.730084] inet6_recvmsg+0x13b/0x6e0 [ 2263.730484] ? inet6_bind+0x120/0x120 [ 2263.730877] ? security_socket_recvmsg+0x95/0xc0 [ 2263.731365] ? inet6_bind+0x120/0x120 [ 2263.731757] sock_recvmsg+0xff/0x180 [ 2263.732142] __sys_recvfrom+0x1be/0x2f0 [ 2263.732552] ? __ia32_sys_send+0x100/0x100 [ 2263.732983] ? lock_downgrade+0x6d0/0x6d0 [ 2263.733426] ? wait_for_completion_io+0x270/0x270 [ 2263.733977] ? rcu_read_lock_any_held+0x75/0xa0 [ 2263.734569] ? vfs_write+0x354/0xa70 [ 2263.735124] ? fput_many+0x2f/0x1a0 [ 2263.735559] ? ksys_write+0x1a9/0x260 [ 2263.735947] ? __ia32_sys_read+0xb0/0xb0 [ 2263.736377] __x64_sys_recvfrom+0xdd/0x1b0 [ 2263.736854] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2263.737575] do_syscall_64+0x33/0x40 [ 2263.737963] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2263.738479] RIP: 0033:0x7f848888eb19 [ 2263.738960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2263.740959] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2263.741662] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2263.742334] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2263.743030] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2263.743592] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2263.744160] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 [ 2263.746836] FAULT_INJECTION: forcing a failure. [ 2263.746836] name failslab, interval 1, probability 0, space 0, times 0 [ 2263.748422] CPU: 0 PID: 52701 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2263.749191] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 03:23:05 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400004219f, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2263.750212] Call Trace: [ 2263.750631] dump_stack+0x107/0x167 [ 2263.751040] should_fail.cold+0x5/0xa [ 2263.751463] ? create_object.isra.0+0x3a/0xa20 [ 2263.751965] should_failslab+0x5/0x20 [ 2263.752385] kmem_cache_alloc+0x5b/0x310 [ 2263.752841] create_object.isra.0+0x3a/0xa20 [ 2263.753331] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2263.753911] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2263.754470] ? __tcp_send_ack.part.0+0x67/0x650 [ 2263.754991] __alloc_skb+0xb1/0x5b0 [ 2263.755404] __tcp_send_ack.part.0+0x67/0x650 [ 2263.755898] tcp_send_ack+0x7d/0xa0 [ 2263.756305] __tcp_ack_snd_check+0x156/0x9f0 [ 2263.756800] tcp_rcv_established+0x955/0x1e30 [ 2263.757300] ? tcp_check_space+0x6c0/0x6c0 [ 2263.757789] tcp_v6_do_rcv+0x7b3/0x1520 [ 2263.758228] __release_sock+0x139/0x3b0 [ 2263.758668] release_sock+0x54/0x1b0 [ 2263.759077] sk_wait_data+0x1a7/0x4d0 [ 2263.759501] ? sock_set_mark+0x130/0x130 [ 2263.759960] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2263.760545] tcp_recvmsg+0x17b2/0x2930 [ 2263.760991] ? tcp_splice_read+0x8c0/0x8c0 [ 2263.761462] ? sock_has_perm+0x1ea/0x280 [ 2263.761920] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2263.762488] ? lock_downgrade+0x6d0/0x6d0 [ 2263.762951] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2263.763532] ? tcp_splice_read+0x8c0/0x8c0 [ 2263.764005] inet6_recvmsg+0x13b/0x6e0 [ 2263.764443] ? inet6_bind+0x120/0x120 [ 2263.764863] ? security_socket_recvmsg+0x95/0xc0 [ 2263.765379] ? inet6_bind+0x120/0x120 [ 2263.765829] sock_recvmsg+0xff/0x180 [ 2263.766251] __sys_recvfrom+0x1be/0x2f0 [ 2263.766707] ? __ia32_sys_send+0x100/0x100 [ 2263.767166] ? lock_downgrade+0x6d0/0x6d0 [ 2263.767633] ? wait_for_completion_io+0x270/0x270 [ 2263.768196] ? rcu_read_lock_any_held+0x75/0xa0 [ 2263.768730] ? vfs_write+0x354/0xa70 [ 2263.769143] ? fput_many+0x2f/0x1a0 [ 2263.769567] ? ksys_write+0x1a9/0x260 [ 2263.770002] ? __ia32_sys_read+0xb0/0xb0 [ 2263.770475] __x64_sys_recvfrom+0xdd/0x1b0 [ 2263.770938] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2263.771501] do_syscall_64+0x33/0x40 [ 2263.771940] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2263.772522] RIP: 0033:0x7fcd1f4c0b19 [ 2263.772955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2263.774958] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2263.775828] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2263.776603] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2263.777381] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2263.778165] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2263.778948] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:23:05 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xde79000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:23:05 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2264.291531] serio: Serial port tty33 03:23:18 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="fe", 0x1, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 03:23:18 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:23:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x318, 0xcd08, 0x0, 0x0) 03:23:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 17) 03:23:18 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 13) 03:23:18 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x40000421a0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:23:18 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:23:18 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xdf79000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:23:18 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x40000421ad, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:23:18 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1df}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/187, 0xe}], 0x1, 0x0, 0x0, 0x0) 03:23:18 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:23:18 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe079000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:23:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x40000421ae, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2276.935474] device veth0_vlan entered promiscuous mode [ 2276.980446] FAULT_INJECTION: forcing a failure. [ 2276.980446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2276.981418] device veth0_vlan entered promiscuous mode [ 2276.981898] CPU: 1 PID: 52984 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2276.981905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2276.981915] Call Trace: [ 2276.983564] dump_stack+0x107/0x167 [ 2276.983877] should_fail.cold+0x5/0xa [ 2276.984200] _copy_to_iter+0x264/0x12d0 [ 2276.984552] ? __schedule+0x82c/0x1ea0 [ 2276.984951] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2276.985356] ? __virt_addr_valid+0x128/0x350 [ 2276.985721] ? __check_object_size+0x319/0x440 [ 2276.986113] simple_copy_to_iter+0x4c/0x70 [ 2276.986462] __skb_datagram_iter+0x4f7/0x880 03:23:19 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2276.986824] ? zerocopy_sg_from_iter+0x110/0x110 [ 2276.987356] skb_copy_datagram_iter+0x88/0x190 [ 2276.987757] tcp_recvmsg+0x13b5/0x2930 [ 2276.988083] ? tcp_splice_read+0x8c0/0x8c0 [ 2276.988459] ? sock_has_perm+0x1ea/0x280 [ 2276.988794] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2276.989220] ? lock_downgrade+0x6d0/0x6d0 [ 2276.989558] ? perf_trace_lock+0xac/0x490 [ 2276.989906] ? tcp_splice_read+0x8c0/0x8c0 [ 2276.990256] inet6_recvmsg+0x13b/0x6e0 [ 2276.990571] ? inet6_bind+0x120/0x120 [ 2276.990887] ? security_socket_recvmsg+0x95/0xc0 [ 2276.991264] ? inet6_bind+0x120/0x120 [ 2276.991574] sock_recvmsg+0xff/0x180 [ 2276.991880] __sys_recvfrom+0x1be/0x2f0 [ 2276.992205] ? __ia32_sys_send+0x100/0x100 [ 2276.992547] ? lock_downgrade+0x6d0/0x6d0 [ 2276.992895] ? wait_for_completion_io+0x270/0x270 [ 2276.993285] ? rcu_read_lock_any_held+0x75/0xa0 [ 2276.993664] ? vfs_write+0x354/0xa70 [ 2276.993977] ? fput_many+0x2f/0x1a0 [ 2276.994272] ? ksys_write+0x1a9/0x260 [ 2276.994582] ? __ia32_sys_read+0xb0/0xb0 [ 2276.994914] __x64_sys_recvfrom+0xdd/0x1b0 [ 2276.995267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2276.995684] do_syscall_64+0x33/0x40 [ 2276.995988] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2276.996403] RIP: 0033:0x7f848888eb19 [ 2276.996710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2276.998189] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2276.998807] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2276.999385] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2276.999957] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2277.000537] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2277.001109] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 [ 2277.033379] FAULT_INJECTION: forcing a failure. [ 2277.033379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2277.034848] CPU: 1 PID: 53040 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2277.035425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2277.036113] Call Trace: [ 2277.036343] dump_stack+0x107/0x167 [ 2277.036644] should_fail.cold+0x5/0xa [ 2277.036971] _copy_to_iter+0x264/0x12d0 [ 2277.037313] ? sk_wait_data+0x353/0x4d0 [ 2277.037642] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2277.038054] ? mark_held_locks+0x9e/0xe0 [ 2277.038391] ? __virt_addr_valid+0x128/0x350 [ 2277.038752] ? __check_object_size+0x319/0x440 [ 2277.039135] simple_copy_to_iter+0x4c/0x70 [ 2277.039485] __skb_datagram_iter+0x122/0x880 [ 2277.039846] ? sock_set_mark+0x130/0x130 [ 2277.040180] ? zerocopy_sg_from_iter+0x110/0x110 [ 2277.040573] skb_copy_datagram_iter+0x88/0x190 [ 2277.040953] tcp_recvmsg+0x13b5/0x2930 [ 2277.041286] ? tcp_splice_read+0x8c0/0x8c0 [ 2277.041637] ? sock_has_perm+0x1ea/0x280 [ 2277.041987] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2277.042410] ? lock_downgrade+0x6d0/0x6d0 [ 2277.042760] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2277.043188] ? tcp_splice_read+0x8c0/0x8c0 [ 2277.043537] inet6_recvmsg+0x13b/0x6e0 [ 2277.043858] ? inet6_bind+0x120/0x120 03:23:19 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe179000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 2277.044173] ? security_socket_recvmsg+0x95/0xc0 [ 2277.044700] ? inet6_bind+0x120/0x120 [ 2277.045010] sock_recvmsg+0xff/0x180 [ 2277.045312] __sys_recvfrom+0x1be/0x2f0 [ 2277.045637] ? __ia32_sys_send+0x100/0x100 [ 2277.045990] ? lock_downgrade+0x6d0/0x6d0 [ 2277.046339] ? wait_for_completion_io+0x270/0x270 [ 2277.046737] ? rcu_read_lock_any_held+0x75/0xa0 [ 2277.047116] ? vfs_write+0x354/0xa70 [ 2277.047421] ? fput_many+0x2f/0x1a0 [ 2277.047716] ? ksys_write+0x1a9/0x260 [ 2277.048109] ? __ia32_sys_read+0xb0/0xb0 [ 2277.048440] __x64_sys_recvfrom+0xdd/0x1b0 [ 2277.048785] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2277.049208] do_syscall_64+0x33/0x40 [ 2277.049507] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2277.049935] RIP: 0033:0x7fcd1f4c0b19 [ 2277.050236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2277.051700] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2277.052318] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2277.052887] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2277.053453] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2277.054034] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2277.054603] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:23:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x40000421b6, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:23:19 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x81}}, './file1\x00'}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x8020}) dup(r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0xd, &(0x7f0000000080)={0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 03:23:31 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 14) 03:23:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x39c, 0xcd08, 0x0, 0x0) 03:23:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000080000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:23:31 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe279000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:23:31 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x81}}, './file1\x00'}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x8020}) dup(r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0xd, &(0x7f0000000080)={0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 03:23:31 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:23:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 18) 03:23:31 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:23:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000080400, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:23:32 executing program 6: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) unshare(0x48020200) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/84) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0xbc252660e294e87f) 03:23:32 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe379000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 2290.179866] FAULT_INJECTION: forcing a failure. [ 2290.179866] name failslab, interval 1, probability 0, space 0, times 0 [ 2290.182085] CPU: 0 PID: 53355 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2290.183360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2290.184888] Call Trace: [ 2290.185389] dump_stack+0x107/0x167 [ 2290.186091] should_fail.cold+0x5/0xa [ 2290.186806] ? create_object.isra.0+0x3a/0xa20 [ 2290.187660] should_failslab+0x5/0x20 [ 2290.188371] kmem_cache_alloc+0x5b/0x310 [ 2290.189136] create_object.isra.0+0x3a/0xa20 [ 2290.189958] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2290.190914] kmem_cache_alloc_node+0x169/0x330 [ 2290.191768] ? kmem_cache_free+0xa7/0x2d0 [ 2290.192549] __alloc_skb+0x6d/0x5b0 [ 2290.193248] __tcp_send_ack.part.0+0x67/0x650 [ 2290.194087] ? kmem_cache_free+0x249/0x2d0 [ 2290.194887] tcp_send_ack+0x7d/0xa0 [ 2290.195558] tcp_cleanup_rbuf+0x468/0x5a0 [ 2290.196336] tcp_recvmsg+0xb85/0x2930 [ 2290.197067] ? tcp_splice_read+0x8c0/0x8c0 [ 2290.197869] ? sock_has_perm+0x1ea/0x280 [ 2290.198633] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2290.199592] ? mark_lock+0xf5/0x2df0 [ 2290.200290] ? lock_downgrade+0x6d0/0x6d0 [ 2290.201070] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2290.202044] ? tcp_splice_read+0x8c0/0x8c0 [ 2290.202699] inet6_recvmsg+0x13b/0x6e0 [ 2290.203288] ? inet6_bind+0x120/0x120 [ 2290.203874] ? security_socket_recvmsg+0x95/0xc0 [ 2290.204591] ? inet6_bind+0x120/0x120 [ 2290.205174] sock_recvmsg+0xff/0x180 [ 2290.205857] __sys_recvfrom+0x1be/0x2f0 [ 2290.206476] ? __ia32_sys_send+0x100/0x100 [ 2290.207103] ? lock_downgrade+0x6d0/0x6d0 [ 2290.207745] ? vfs_write+0x881/0xa70 [ 2290.208302] ? wait_for_completion_io+0x270/0x270 [ 2290.209030] ? rcu_read_lock_any_held+0x75/0xa0 [ 2290.209716] ? vfs_write+0x354/0xa70 [ 2290.210290] ? fput_many+0x2f/0x1a0 [ 2290.210834] ? ksys_write+0x1a9/0x260 [ 2290.211409] ? __ia32_sys_read+0xb0/0xb0 [ 2290.212014] __x64_sys_recvfrom+0xdd/0x1b0 [ 2290.212654] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2290.213420] do_syscall_64+0x33/0x40 [ 2290.213979] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2290.214752] RIP: 0033:0x7fcd1f4c0b19 [ 2290.215320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2290.218033] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2290.219177] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2290.220233] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2290.221305] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2290.222366] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2290.223429] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:23:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x40000e0000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2290.234988] FAULT_INJECTION: forcing a failure. [ 2290.234988] name failslab, interval 1, probability 0, space 0, times 0 [ 2290.236814] CPU: 0 PID: 53350 Comm: syz-executor.5 Not tainted 5.10.209 #1 03:23:32 executing program 6: write(0xffffffffffffffff, &(0x7f0000000040)="254f2bf43546f8bed6530b63118d9170b605326d552c7ec1561bce4df87d", 0x1e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x13040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001d00210c00000000feffffffffffffff14001180809801a7b0c7dba09475f251c743092f"], 0x28}}, 0x0) [ 2290.237848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2290.239141] Call Trace: [ 2290.239545] dump_stack+0x107/0x167 [ 2290.240100] should_fail.cold+0x5/0xa [ 2290.240673] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2290.241460] ? __alloc_skb+0x6d/0x5b0 [ 2290.242042] should_failslab+0x5/0x20 [ 2290.242617] kmem_cache_alloc_node+0x55/0x330 [ 2290.243284] ? kmem_cache_free+0xa7/0x2d0 [ 2290.243912] __alloc_skb+0x6d/0x5b0 [ 2290.244466] __tcp_send_ack.part.0+0x67/0x650 [ 2290.245140] ? kmem_cache_free+0x249/0x2d0 [ 2290.245776] tcp_send_ack+0x7d/0xa0 [ 2290.246337] tcp_cleanup_rbuf+0x468/0x5a0 [ 2290.246957] tcp_recvmsg+0xb85/0x2930 [ 2290.247545] ? tcp_splice_read+0x8c0/0x8c0 [ 2290.248186] ? sock_has_perm+0x1ea/0x280 [ 2290.248802] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2290.249572] ? lock_downgrade+0x6d0/0x6d0 [ 2290.250212] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2290.250997] ? tcp_splice_read+0x8c0/0x8c0 [ 2290.251632] inet6_recvmsg+0x13b/0x6e0 [ 2290.252222] ? inet6_bind+0x120/0x120 [ 2290.252798] ? security_socket_recvmsg+0x95/0xc0 [ 2290.253506] ? inet6_bind+0x120/0x120 [ 2290.254087] sock_recvmsg+0xff/0x180 [ 2290.254645] __sys_recvfrom+0x1be/0x2f0 [ 2290.255245] ? __ia32_sys_send+0x100/0x100 [ 2290.255877] ? lock_downgrade+0x6d0/0x6d0 [ 2290.256524] ? wait_for_completion_io+0x270/0x270 [ 2290.257247] ? rcu_read_lock_any_held+0x75/0xa0 [ 2290.257947] ? vfs_write+0x354/0xa70 [ 2290.258515] ? fput_many+0x2f/0x1a0 [ 2290.259067] ? ksys_write+0x1a9/0x260 [ 2290.259638] ? __ia32_sys_read+0xb0/0xb0 [ 2290.260256] __x64_sys_recvfrom+0xdd/0x1b0 [ 2290.260889] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2290.261666] do_syscall_64+0x33/0x40 [ 2290.262235] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2290.263003] RIP: 0033:0x7f848888eb19 [ 2290.263562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2290.266409] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2290.267529] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2290.268589] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2290.269645] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2290.270709] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2290.271767] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 03:23:32 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) r1 = socket$unix(0x1, 0x0, 0x0) bind$unix(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) getdents64(r4, &(0x7f0000000240)=""/72, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x1104}, 0x1}, 0xadc) r5 = socket$nl_route(0x10, 0x3, 0x0) lseek(r5, 0x0, 0x3) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r3, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r7}}, 0x9) sendfile(r2, r6, 0x0, 0x100000001) 03:23:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x40001fffff, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:23:32 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe479000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:23:32 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 15) [ 2291.060870] FAULT_INJECTION: forcing a failure. [ 2291.060870] name failslab, interval 1, probability 0, space 0, times 0 [ 2291.062748] CPU: 0 PID: 53682 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2291.063710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2291.064849] Call Trace: [ 2291.065224] dump_stack+0x107/0x167 [ 2291.065737] should_fail.cold+0x5/0xa [ 2291.066271] ? create_object.isra.0+0x3a/0xa20 [ 2291.066904] should_failslab+0x5/0x20 [ 2291.067437] kmem_cache_alloc+0x5b/0x310 [ 2291.068001] create_object.isra.0+0x3a/0xa20 [ 2291.068610] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2291.069318] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2291.070036] ? __tcp_send_ack.part.0+0x67/0x650 [ 2291.070683] __alloc_skb+0xb1/0x5b0 [ 2291.071196] __tcp_send_ack.part.0+0x67/0x650 [ 2291.071826] tcp_send_ack+0x7d/0xa0 [ 2291.072331] __tcp_ack_snd_check+0x156/0x9f0 [ 2291.072940] tcp_rcv_established+0x955/0x1e30 [ 2291.073571] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2291.074312] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2291.075059] ? tcp_check_space+0x6c0/0x6c0 [ 2291.075660] tcp_v6_do_rcv+0x7b3/0x1520 [ 2291.076215] __release_sock+0x139/0x3b0 [ 2291.076778] release_sock+0x54/0x1b0 [ 2291.077293] sk_wait_data+0x1a7/0x4d0 [ 2291.077826] ? sock_set_mark+0x130/0x130 [ 2291.078402] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2291.079113] tcp_recvmsg+0x17b2/0x2930 [ 2291.079666] ? tcp_splice_read+0x8c0/0x8c0 [ 2291.080262] ? sock_has_perm+0x1ea/0x280 [ 2291.080825] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2291.081540] ? lock_downgrade+0x6d0/0x6d0 [ 2291.082127] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2291.082850] ? tcp_splice_read+0x8c0/0x8c0 [ 2291.083443] inet6_recvmsg+0x13b/0x6e0 [ 2291.083986] ? inet6_bind+0x120/0x120 [ 2291.084520] ? security_socket_recvmsg+0x95/0xc0 [ 2291.085179] ? inet6_bind+0x120/0x120 [ 2291.085707] sock_recvmsg+0xff/0x180 [ 2291.086236] __sys_recvfrom+0x1be/0x2f0 [ 2291.086790] ? __ia32_sys_send+0x100/0x100 [ 2291.087382] ? lock_downgrade+0x6d0/0x6d0 [ 2291.087976] ? wait_for_completion_io+0x270/0x270 [ 2291.088653] ? rcu_read_lock_any_held+0x75/0xa0 [ 2291.089297] ? vfs_write+0x354/0xa70 [ 2291.089825] ? fput_many+0x2f/0x1a0 [ 2291.090346] ? ksys_write+0x1a9/0x260 [ 2291.090879] ? __ia32_sys_read+0xb0/0xb0 [ 2291.091449] __x64_sys_recvfrom+0xdd/0x1b0 [ 2291.092044] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2291.092765] do_syscall_64+0x33/0x40 [ 2291.093279] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2291.093987] RIP: 0033:0x7f848888eb19 [ 2291.094516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2291.097048] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2291.098102] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2291.099073] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2291.100059] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2291.101045] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2291.102037] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 03:23:48 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:23:48 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 16) 03:23:48 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe4ffffff00000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:23:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x420, 0xcd08, 0x0, 0x0) 03:23:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r1) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x81, 0x3ff, 0x28, @mcast1, @private1, 0x0, 0x10, 0x3, 0xffff}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="44030000", @ANYRES16=r2, @ANYBLOB="000229bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004007526000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000500000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff07000008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="400002803c000100240001b467f18174785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400210000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x344}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r5, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/94, 0x5e}], 0x1, 0xfffffffd, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x8, &(0x7f0000000680)=0x2, 0x4) sendfile(r1, r0, 0x0, 0x4000007ffffffc) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r7, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/94, 0x5e}], 0x1, 0xfffffffd, 0x0) openat$incfs(r7, &(0x7f0000000640)='.log\x00', 0x95b299b3a8558e2, 0x21) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0xe6}}, './file0\x00'}) 03:23:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 19) 03:23:48 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:23:48 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000300000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:23:48 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4001000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:23:48 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe579000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 2306.972843] FAULT_INJECTION: forcing a failure. [ 2306.972843] name failslab, interval 1, probability 0, space 0, times 0 [ 2306.974765] CPU: 1 PID: 53735 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2306.975749] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2306.976939] Call Trace: [ 2306.977326] dump_stack+0x107/0x167 [ 2306.977858] should_fail.cold+0x5/0xa [ 2306.978424] should_failslab+0x5/0x20 [ 2306.978965] __kmalloc_node_track_caller+0x74/0x3b0 [ 2306.979683] ? __tcp_send_ack.part.0+0x67/0x650 [ 2306.980351] ? kmem_cache_free+0xa7/0x2d0 [ 2306.980949] __alloc_skb+0xb1/0x5b0 [ 2306.981480] __tcp_send_ack.part.0+0x67/0x650 [ 2306.982113] ? kmem_cache_free+0x249/0x2d0 [ 2306.982730] tcp_send_ack+0x7d/0xa0 [ 2306.983247] tcp_cleanup_rbuf+0x468/0x5a0 [ 2306.983837] tcp_recvmsg+0xb85/0x2930 [ 2306.984401] ? tcp_splice_read+0x8c0/0x8c0 [ 2306.985007] ? sock_has_perm+0x1ea/0x280 [ 2306.985594] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2306.986341] ? lock_downgrade+0x6d0/0x6d0 [ 2306.986933] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2306.987688] ? tcp_splice_read+0x8c0/0x8c0 [ 2306.988295] inet6_recvmsg+0x13b/0x6e0 [ 2306.988862] ? inet6_bind+0x120/0x120 [ 2306.989410] ? security_socket_recvmsg+0x95/0xc0 [ 2306.990078] ? inet6_bind+0x120/0x120 [ 2306.990632] sock_recvmsg+0xff/0x180 [ 2306.991161] __sys_recvfrom+0x1be/0x2f0 [ 2306.991730] ? __ia32_sys_send+0x100/0x100 [ 2306.992338] ? lock_downgrade+0x6d0/0x6d0 [ 2306.992958] ? wait_for_completion_io+0x270/0x270 [ 2306.993652] ? rcu_read_lock_any_held+0x75/0xa0 [ 2306.994328] ? vfs_write+0x354/0xa70 [ 2306.994869] ? fput_many+0x2f/0x1a0 [ 2306.995395] ? ksys_write+0x1a9/0x260 [ 2306.995944] ? __ia32_sys_read+0xb0/0xb0 [ 2306.996529] __x64_sys_recvfrom+0xdd/0x1b0 [ 2306.997139] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2306.997878] do_syscall_64+0x33/0x40 [ 2306.998416] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2306.999144] RIP: 0033:0x7f848888eb19 [ 2306.999681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2307.002298] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2307.003384] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2307.004403] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2307.005417] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2307.006441] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2307.007452] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 [ 2307.026123] FAULT_INJECTION: forcing a failure. [ 2307.026123] name failslab, interval 1, probability 0, space 0, times 0 [ 2307.029068] CPU: 0 PID: 53776 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2307.030298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2307.031741] Call Trace: [ 2307.032210] dump_stack+0x107/0x167 [ 2307.032854] should_fail.cold+0x5/0xa [ 2307.033615] ? create_object.isra.0+0x3a/0xa20 [ 2307.034427] should_failslab+0x5/0x20 [ 2307.035095] kmem_cache_alloc+0x5b/0x310 [ 2307.035813] create_object.isra.0+0x3a/0xa20 [ 2307.036583] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2307.037475] kmem_cache_alloc_node+0x169/0x330 [ 2307.038288] __alloc_skb+0x6d/0x5b0 [ 2307.038937] tcp_collapse+0x42c/0xf20 [ 2307.039621] ? tcp_queue_rcv+0x7c0/0x7c0 [ 2307.040336] ? tcp_xmit_retransmit_queue+0x57/0x70 [ 2307.041189] ? tcp_xmit_recovery+0x86/0x180 [ 2307.041946] ? tcp_ack+0xeef/0x5690 [ 2307.042604] tcp_try_rmem_schedule+0xb8a/0x1690 [ 2307.043436] tcp_data_queue+0x16ba/0x47f0 [ 2307.044175] ? mark_held_locks+0x9e/0xe0 [ 2307.044888] ? tcp_data_ready+0x500/0x500 [ 2307.045610] ? tcp_urg.part.0+0x157/0x2e0 [ 2307.046341] ? tcp_try_keep_open+0x2f0/0x2f0 [ 2307.047109] ? tcp_validate_incoming+0x431/0x16a0 [ 2307.047932] ? tcp_check_urg.isra.0+0x1db/0x720 [ 2307.048753] tcp_rcv_established+0x868/0x1e30 [ 2307.049541] ? tcp_check_space+0x6c0/0x6c0 [ 2307.050303] tcp_v6_do_rcv+0x7b3/0x1520 [ 2307.051006] __release_sock+0x139/0x3b0 [ 2307.051711] release_sock+0x54/0x1b0 [ 2307.052361] sk_wait_data+0x1a7/0x4d0 [ 2307.053030] ? sock_set_mark+0x130/0x130 [ 2307.053744] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2307.054639] ? tcp_send_ack+0x7d/0xa0 [ 2307.055307] tcp_recvmsg+0x17b2/0x2930 [ 2307.056004] ? tcp_splice_read+0x8c0/0x8c0 [ 2307.056738] ? sock_has_perm+0x7f/0x280 [ 2307.057432] ? sock_has_perm+0x92/0x280 [ 2307.058132] ? sock_has_perm+0x1ea/0x280 [ 2307.058858] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2307.059770] ? tcp_splice_read+0x8c0/0x8c0 [ 2307.060508] inet6_recvmsg+0x13b/0x6e0 [ 2307.061188] ? inet6_bind+0x120/0x120 [ 2307.061859] ? security_socket_recvmsg+0x95/0xc0 [ 2307.062698] ? inet6_bind+0x120/0x120 [ 2307.063365] sock_recvmsg+0xff/0x180 [ 2307.064016] __sys_recvfrom+0x1be/0x2f0 [ 2307.064714] ? __ia32_sys_send+0x100/0x100 [ 2307.065458] ? _raw_spin_unlock_irq+0x27/0x30 [ 2307.066256] ? __switch_to_asm+0x34/0x60 [ 2307.066970] ? __schedule+0x82c/0x1ea0 [ 2307.067662] ? io_schedule_timeout+0x140/0x140 [ 2307.068460] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2307.069257] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2307.070201] ? ksys_write+0x1a9/0x260 [ 2307.070892] __x64_sys_recvfrom+0xdd/0x1b0 [ 2307.071635] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2307.072539] do_syscall_64+0x33/0x40 [ 2307.073182] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2307.074075] RIP: 0033:0x7fcd1f4c0b19 [ 2307.074738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2307.077945] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2307.079287] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2307.080529] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2307.081772] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2307.083024] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2307.084268] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:23:49 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4001010000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:23:49 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe679000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:23:49 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4002000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:23:49 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe779000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:24:01 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe879000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:24:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4003000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:24:01 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001400)=""/53, 0x35) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000940)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_loose}]}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x145003, 0x0) tee(r1, 0xffffffffffffffff, 0x81, 0xd) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = pidfd_getfd(r2, r1, 0x0) tee(r3, r0, 0x4, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000240)='nomand\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r2) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/94, 0x5e}], 0x1, 0xfffffffd, 0x0) getdents(r4, &(0x7f0000001440)=""/4096, 0x1000) r5 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58af, 0x0, 0x2, 0x0, 0x0) fgetxattr(r5, &(0x7f0000000000)=@random={'btrfs.', '\',{[[(\x00'}, &(0x7f0000000380)=""/234, 0xea) 03:24:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x4a4, 0xcd08, 0x0, 0x0) 03:24:01 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 17) 03:24:01 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:24:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 20) 03:24:01 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2319.135036] 9pnet: Insufficient options for proto=fd [ 2319.165812] 9pnet: Insufficient options for proto=fd 03:24:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1256e3, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_enter(r0, 0x100009d3, 0x65a9, 0x2, &(0x7f0000000080)={[0x8]}, 0x8) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6628) 03:24:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4004000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:24:01 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xe979000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:24:01 executing program 6: r0 = socket$netlink(0x10, 0x3, 0xe) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/94, 0x5e}], 0x1, 0xfffffffd, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x10, 0x4) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) [ 2319.379848] FAULT_INJECTION: forcing a failure. [ 2319.379848] name failslab, interval 1, probability 0, space 0, times 0 [ 2319.380876] CPU: 1 PID: 54227 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2319.381455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2319.382161] Call Trace: [ 2319.382398] dump_stack+0x107/0x167 [ 2319.382708] should_fail.cold+0x5/0xa [ 2319.383044] ? create_object.isra.0+0x3a/0xa20 [ 2319.383431] should_failslab+0x5/0x20 [ 2319.383751] kmem_cache_alloc+0x5b/0x310 [ 2319.384114] create_object.isra.0+0x3a/0xa20 [ 2319.384488] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2319.384920] kmem_cache_alloc_node+0x169/0x330 [ 2319.385318] __alloc_skb+0x6d/0x5b0 [ 2319.385629] tcp_collapse+0x42c/0xf20 [ 2319.385970] ? tcp_queue_rcv+0x7c0/0x7c0 [ 2319.386317] ? tcp_xmit_retransmit_queue+0x57/0x70 [ 2319.386756] ? tcp_xmit_recovery+0x86/0x180 [ 2319.387127] ? tcp_ack+0xeef/0x5690 [ 2319.387462] tcp_try_rmem_schedule+0xa6c/0x1690 [ 2319.387882] tcp_data_queue+0x16ba/0x47f0 [ 2319.388258] ? tcp_data_ready+0x500/0x500 [ 2319.388610] ? tcp_urg.part.0+0x157/0x2e0 [ 2319.388984] ? tcp_try_keep_open+0x2f0/0x2f0 [ 2319.389353] ? tcp_validate_incoming+0x431/0x16a0 [ 2319.389779] ? tcp_check_urg.isra.0+0x1db/0x720 [ 2319.390171] tcp_rcv_established+0x868/0x1e30 [ 2319.390582] ? tcp_check_space+0x6c0/0x6c0 [ 2319.390964] tcp_v6_do_rcv+0x7b3/0x1520 [ 2319.391306] __release_sock+0x139/0x3b0 [ 2319.391647] release_sock+0x54/0x1b0 [ 2319.391953] sk_wait_data+0x1a7/0x4d0 [ 2319.392267] ? sock_set_mark+0x130/0x130 [ 2319.392604] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2319.393046] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2319.393479] ? tcp_recvmsg+0x6f0/0x2930 [ 2319.393812] tcp_recvmsg+0x17b2/0x2930 [ 2319.394145] ? tcp_splice_read+0x8c0/0x8c0 [ 2319.394502] ? sock_has_perm+0x1ea/0x280 [ 2319.394846] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2319.395263] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2319.395705] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2319.396152] ? trace_hardirqs_on+0x5b/0x180 [ 2319.396507] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2319.396949] ? tcp_splice_read+0x8c0/0x8c0 [ 2319.397307] inet6_recvmsg+0x13b/0x6e0 [ 2319.397620] ? inet6_bind+0x120/0x120 [ 2319.397948] ? security_socket_recvmsg+0x95/0xc0 [ 2319.398330] ? inet6_bind+0x120/0x120 [ 2319.398664] sock_recvmsg+0xff/0x180 [ 2319.398986] __sys_recvfrom+0x1be/0x2f0 [ 2319.399324] ? __ia32_sys_send+0x100/0x100 [ 2319.399682] ? lock_downgrade+0x6d0/0x6d0 [ 2319.400049] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2319.400500] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2319.400965] ? trace_hardirqs_on+0x5b/0x180 [ 2319.401332] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2319.401783] __x64_sys_recvfrom+0xdd/0x1b0 [ 2319.402143] do_syscall_64+0x33/0x40 [ 2319.402461] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2319.402894] RIP: 0033:0x7f848888eb19 [ 2319.403209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2319.404747] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2319.405394] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2319.405984] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2319.406616] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2319.407220] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2319.407835] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 [ 2319.419034] FAULT_INJECTION: forcing a failure. [ 2319.419034] name failslab, interval 1, probability 0, space 0, times 0 [ 2319.420394] CPU: 1 PID: 54253 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2319.421009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2319.421752] Call Trace: [ 2319.421998] dump_stack+0x107/0x167 [ 2319.422295] should_fail.cold+0x5/0xa [ 2319.422625] should_failslab+0x5/0x20 [ 2319.422933] __kmalloc_node_track_caller+0x74/0x3b0 [ 2319.423335] ? tcp_collapse+0x42c/0xf20 [ 2319.423658] __alloc_skb+0xb1/0x5b0 [ 2319.423984] tcp_collapse+0x42c/0xf20 [ 2319.424298] ? tcp_queue_rcv+0x7c0/0x7c0 [ 2319.424632] ? tcp_xmit_retransmit_queue+0x57/0x70 [ 2319.425004] ? tcp_xmit_recovery+0x86/0x180 [ 2319.425361] ? tcp_ack+0xeef/0x5690 [ 2319.425685] tcp_try_rmem_schedule+0xb8a/0x1690 [ 2319.426068] tcp_data_queue+0x16ba/0x47f0 [ 2319.426425] ? tcp_data_ready+0x500/0x500 [ 2319.426783] ? tcp_urg.part.0+0x157/0x2e0 [ 2319.427112] ? tcp_try_keep_open+0x2f0/0x2f0 [ 2319.427491] ? tcp_validate_incoming+0x431/0x16a0 [ 2319.427882] ? tcp_check_urg.isra.0+0x1db/0x720 [ 2319.428291] tcp_rcv_established+0x868/0x1e30 [ 2319.428706] ? tcp_check_space+0x6c0/0x6c0 [ 2319.429058] tcp_v6_do_rcv+0x7b3/0x1520 [ 2319.429389] __release_sock+0x139/0x3b0 [ 2319.429717] release_sock+0x54/0x1b0 [ 2319.430016] sk_wait_data+0x1a7/0x4d0 [ 2319.430342] ? sock_set_mark+0x130/0x130 [ 2319.430697] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2319.431107] ? tcp_send_ack+0x7d/0xa0 [ 2319.431438] tcp_recvmsg+0x17b2/0x2930 [ 2319.431768] ? tcp_splice_read+0x8c0/0x8c0 [ 2319.432148] ? sock_has_perm+0x1ea/0x280 [ 2319.432489] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2319.432885] ? lock_downgrade+0x6d0/0x6d0 [ 2319.433216] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2319.433624] ? tcp_splice_read+0x8c0/0x8c0 [ 2319.433968] inet6_recvmsg+0x13b/0x6e0 [ 2319.434283] ? inet6_bind+0x120/0x120 [ 2319.434608] ? security_socket_recvmsg+0x95/0xc0 [ 2319.435005] ? inet6_bind+0x120/0x120 [ 2319.435316] sock_recvmsg+0xff/0x180 [ 2319.435611] __sys_recvfrom+0x1be/0x2f0 [ 2319.435926] ? __ia32_sys_send+0x100/0x100 [ 2319.436289] ? lock_downgrade+0x6d0/0x6d0 [ 2319.436650] ? wait_for_completion_io+0x270/0x270 [ 2319.437032] ? rcu_read_lock_any_held+0x75/0xa0 [ 2319.437427] ? vfs_write+0x354/0xa70 [ 2319.437731] ? fput_many+0x2f/0x1a0 [ 2319.438023] ? ksys_write+0x1a9/0x260 [ 2319.438354] ? __ia32_sys_read+0xb0/0xb0 [ 2319.438688] __x64_sys_recvfrom+0xdd/0x1b0 [ 2319.439059] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2319.439513] do_syscall_64+0x33/0x40 [ 2319.439845] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2319.440258] RIP: 0033:0x7fcd1f4c0b19 [ 2319.440611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2319.442045] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2319.442673] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2319.443220] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2319.443751] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2319.444286] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2319.444832] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:24:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4005000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:24:01 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xea79000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:24:01 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xffff, @empty, 0xb0e}, 0x1c) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x20000844) 03:24:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4006000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:24:01 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xeb79000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:24:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4006050000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:24:14 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:24:14 executing program 6: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000000ffff00000000000000000007"], 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x44000, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, r1, r5], 0x3) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/94, 0x5e}], 0x1, 0xfffffffd, 0x0) openat(r3, &(0x7f0000000140)='./file0\x00', 0x200000, 0x24) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x4, 0xf8, 0x0, 0x7ef3, 0x42, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x10, 0x40, 0x1ff, 0x82ad}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) 03:24:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 21) 03:24:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4007000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:24:14 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xec79000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:24:14 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 18) 03:24:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x500, 0xcd08, 0x0, 0x0) 03:24:14 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:24:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4008000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:24:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={r2, 0x6, 0x0, 0x80000001}) openat(r4, &(0x7f0000000180)='./file0\x00', 0x101200, 0x80) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x8802) r6 = fcntl$dupfd(r5, 0x0, r3) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000240)=0x8) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x1, 0x5, 0x80, 0x0, 0x0, 0x1ff, 0x10420, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000001c0), 0x6}, 0x68a80, 0x4, 0x80000000, 0x0, 0xe95, 0x94c, 0x6, 0x0, 0x0, 0x0, 0x154}, 0x0, 0x6, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x58, 0x8, 0x1, 0x3f, 0x0, 0x0, 0xb08e0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x7202, 0x3f, 0xc3, 0x5, 0x3, 0xae4, 0x1, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x5, r1, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 03:24:15 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xed79000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:24:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4008050000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:24:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000004c0)={0x9000000a}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000200), 0x8000, 0x20000) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x81, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x240, 0x0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}, 0x1c) listen(r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240), 0x0, &(0x7f00000002c0), &(0x7f0000000440)={[0x41]}, 0x8) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10}) [ 2333.152246] FAULT_INJECTION: forcing a failure. [ 2333.152246] name failslab, interval 1, probability 0, space 0, times 0 [ 2333.153280] CPU: 1 PID: 54695 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2333.153999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2333.154870] Call Trace: [ 2333.155156] dump_stack+0x107/0x167 [ 2333.155543] should_fail.cold+0x5/0xa [ 2333.155950] ? create_object.isra.0+0x3a/0xa20 [ 2333.156428] should_failslab+0x5/0x20 [ 2333.156835] kmem_cache_alloc+0x5b/0x310 [ 2333.157252] create_object.isra.0+0x3a/0xa20 [ 2333.157705] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2333.158227] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2333.158744] ? tcp_collapse+0x42c/0xf20 [ 2333.159151] __alloc_skb+0xb1/0x5b0 [ 2333.159529] tcp_collapse+0x42c/0xf20 [ 2333.160116] ? tcp_queue_rcv+0x7c0/0x7c0 [ 2333.160525] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2333.161254] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2333.161888] tcp_try_rmem_schedule+0xb8a/0x1690 [ 2333.162366] tcp_data_queue+0x16ba/0x47f0 [ 2333.162817] ? tcp_data_ready+0x500/0x500 [ 2333.163232] ? tcp_urg.part.0+0x157/0x2e0 [ 2333.163643] ? tcp_try_keep_open+0x2f0/0x2f0 [ 2333.164084] ? tcp_validate_incoming+0x431/0x16a0 [ 2333.164567] ? tcp_check_urg.isra.0+0x1db/0x720 [ 2333.165038] tcp_rcv_established+0x868/0x1e30 [ 2333.165489] ? tcp_check_space+0x6c0/0x6c0 [ 2333.165969] tcp_v6_do_rcv+0x7b3/0x1520 [ 2333.166435] __release_sock+0x139/0x3b0 [ 2333.166852] release_sock+0x54/0x1b0 [ 2333.167352] sk_wait_data+0x1a7/0x4d0 [ 2333.167862] ? sock_set_mark+0x130/0x130 [ 2333.168278] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2333.168790] ? tcp_send_ack+0x7d/0xa0 [ 2333.169184] tcp_recvmsg+0x17b2/0x2930 [ 2333.169586] ? tcp_splice_read+0x8c0/0x8c0 [ 2333.170020] ? sock_has_perm+0x1ea/0x280 [ 2333.170436] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2333.170970] ? lock_downgrade+0x6d0/0x6d0 [ 2333.171385] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2333.171925] ? tcp_splice_read+0x8c0/0x8c0 [ 2333.172353] inet6_recvmsg+0x13b/0x6e0 [ 2333.172705] ? inet6_bind+0x120/0x120 [ 2333.173147] ? security_socket_recvmsg+0x95/0xc0 [ 2333.173619] ? inet6_bind+0x120/0x120 [ 2333.174006] sock_recvmsg+0xff/0x180 [ 2333.174473] __sys_recvfrom+0x1be/0x2f0 [ 2333.175009] ? __ia32_sys_send+0x100/0x100 [ 2333.175469] ? lock_downgrade+0x6d0/0x6d0 [ 2333.175862] ? wait_for_completion_io+0x270/0x270 [ 2333.176408] ? rcu_read_lock_any_held+0x75/0xa0 [ 2333.176929] ? vfs_write+0x354/0xa70 [ 2333.177409] ? fput_many+0x2f/0x1a0 [ 2333.177929] ? ksys_write+0x1a9/0x260 [ 2333.178343] ? __ia32_sys_read+0xb0/0xb0 [ 2333.178736] __x64_sys_recvfrom+0xdd/0x1b0 [ 2333.179167] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2333.179640] do_syscall_64+0x33/0x40 [ 2333.180053] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2333.180555] RIP: 0033:0x7fcd1f4c0b19 [ 2333.180962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2333.182788] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2333.183713] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2333.184675] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2333.185397] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2333.186113] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2333.186880] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 [ 2333.192949] FAULT_INJECTION: forcing a failure. [ 2333.192949] name failslab, interval 1, probability 0, space 0, times 0 [ 2333.195194] CPU: 0 PID: 54713 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2333.196427] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2333.197881] Call Trace: [ 2333.198354] dump_stack+0x107/0x167 [ 2333.199047] should_fail.cold+0x5/0xa [ 2333.199805] should_failslab+0x5/0x20 [ 2333.200503] __kmalloc_node_track_caller+0x74/0x3b0 [ 2333.201378] ? tcp_collapse+0x42c/0xf20 [ 2333.202080] __alloc_skb+0xb1/0x5b0 [ 2333.202757] tcp_collapse+0x42c/0xf20 [ 2333.203460] ? tcp_queue_rcv+0x7c0/0x7c0 [ 2333.204177] ? tcp_xmit_retransmit_queue+0x57/0x70 [ 2333.205051] ? tcp_xmit_recovery+0x86/0x180 [ 2333.205807] ? tcp_ack+0xeef/0x5690 [ 2333.206461] tcp_try_rmem_schedule+0xb8a/0x1690 [ 2333.207307] tcp_data_queue+0x16ba/0x47f0 [ 2333.208052] ? tcp_data_ready+0x500/0x500 [ 2333.208770] ? tcp_urg.part.0+0x157/0x2e0 [ 2333.209493] ? tcp_try_keep_open+0x2f0/0x2f0 [ 2333.210259] ? tcp_validate_incoming+0x431/0x16a0 [ 2333.211112] ? tcp_check_urg.isra.0+0x1db/0x720 [ 2333.211930] tcp_rcv_established+0x868/0x1e30 [ 2333.212720] ? tcp_check_space+0x6c0/0x6c0 [ 2333.213474] tcp_v6_do_rcv+0x7b3/0x1520 [ 2333.214181] __release_sock+0x139/0x3b0 [ 2333.214896] release_sock+0x54/0x1b0 [ 2333.215586] sk_wait_data+0x1a7/0x4d0 [ 2333.216255] ? sock_set_mark+0x130/0x130 [ 2333.216968] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2333.217863] tcp_recvmsg+0x17b2/0x2930 [ 2333.218578] ? tcp_splice_read+0x8c0/0x8c0 [ 2333.219334] ? sock_has_perm+0x1ea/0x280 [ 2333.220068] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2333.220974] ? lock_downgrade+0x6d0/0x6d0 [ 2333.221706] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2333.222662] ? tcp_splice_read+0x8c0/0x8c0 [ 2333.223405] inet6_recvmsg+0x13b/0x6e0 [ 2333.224110] ? inet6_bind+0x120/0x120 [ 2333.224786] ? security_socket_recvmsg+0x95/0xc0 [ 2333.225624] ? inet6_bind+0x120/0x120 [ 2333.226293] sock_recvmsg+0xff/0x180 [ 2333.226969] __sys_recvfrom+0x1be/0x2f0 [ 2333.227671] ? __ia32_sys_send+0x100/0x100 [ 2333.228411] ? lock_downgrade+0x6d0/0x6d0 [ 2333.229169] ? wait_for_completion_io+0x270/0x270 [ 2333.230021] ? rcu_read_lock_any_held+0x75/0xa0 [ 2333.230869] ? vfs_write+0x354/0xa70 [ 2333.231527] ? fput_many+0x2f/0x1a0 [ 2333.232166] ? ksys_write+0x1a9/0x260 [ 2333.232836] ? __ia32_sys_read+0xb0/0xb0 [ 2333.233554] __x64_sys_recvfrom+0xdd/0x1b0 [ 2333.234296] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2333.235220] do_syscall_64+0x33/0x40 [ 2333.235880] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2333.236778] RIP: 0033:0x7f848888eb19 [ 2333.237436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2333.240638] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2333.241962] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2333.243202] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2333.244430] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2333.245658] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2333.246892] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 03:24:15 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xee79000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 2333.355609] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 03:24:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4009000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:24:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400a000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:24:27 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x1e, 0xc0b12afe4b722e85, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x8, 0x0, 0x0, @pid=r2}]}, 0x24}}, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = getpgid(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="1afe0010", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000015c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="40000000daa0978d872f9eaef0cb41bf5bb49e5bb3d3c5ac566cb82d65569d06dc8fc76fb531634ec61fb0e4d5d93b7a34d3dbca9eccd7be8de45d8e9b696828ceade931a6f3277789530954f6cd41ae0c8a003063fbd91339c821461306adc8c794af5cb8af7ed09d33df08f8c007534f30ef1accb218799fd4449c1ac7ad1b17691785bcae44f6fb53f50c5d3bcf2cce2ddd8daf7691d84b6e7ede7db6ec2ceffab9eccf", @ANYRES16=0x0, @ANYBLOB="00ebdf255400000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000000000a00060008021100000000000a000600ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000400)='macsec0\x00', 0x10) clone3(&(0x7f0000001500)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x2f}, &(0x7f00000002c0)=""/197, 0xc5, &(0x7f0000001440)=""/134, &(0x7f00000003c0)=[r3, 0x0], 0x2, {r1}}, 0x58) socket$nl_audit(0x10, 0x3, 0x9) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r5, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) preadv(r6, &(0x7f0000000440)=[{&(0x7f0000000080)=""/13, 0xd}], 0x1, 0x7, 0x6) fcntl$getown(0xffffffffffffffff, 0x9) 03:24:27 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xef79000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:24:27 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:24:27 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 19) 03:24:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 22) 03:24:27 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:24:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x528, 0xcd08, 0x0, 0x0) [ 2345.834471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41178 sclass=netlink_route_socket pid=54986 comm=syz-executor.6 03:24:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400b000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:24:28 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xf103000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 2346.087744] FAULT_INJECTION: forcing a failure. [ 2346.087744] name failslab, interval 1, probability 0, space 0, times 0 [ 2346.090320] CPU: 0 PID: 55018 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2346.091797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2346.093566] Call Trace: [ 2346.094150] dump_stack+0x107/0x167 [ 2346.094991] should_fail.cold+0x5/0xa [ 2346.095815] ? ___slab_alloc+0x360/0x700 [ 2346.096717] ? create_object.isra.0+0x3a/0xa20 [ 2346.097740] should_failslab+0x5/0x20 [ 2346.098601] kmem_cache_alloc+0x5b/0x310 [ 2346.099538] create_object.isra.0+0x3a/0xa20 [ 2346.100531] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2346.101679] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2346.101964] FAULT_INJECTION: forcing a failure. [ 2346.101964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2346.102789] ? tcp_collapse+0x42c/0xf20 [ 2346.102832] __alloc_skb+0xb1/0x5b0 [ 2346.102870] tcp_collapse+0x42c/0xf20 [ 2346.102921] ? tcp_queue_rcv+0x7c0/0x7c0 [ 2346.102955] ? tcp_xmit_retransmit_queue+0x57/0x70 [ 2346.102982] ? tcp_xmit_recovery+0x86/0x180 [ 2346.103011] ? tcp_ack+0xeef/0x5690 [ 2346.103067] tcp_try_rmem_schedule+0xb8a/0x1690 [ 2346.112299] tcp_data_queue+0x16ba/0x47f0 [ 2346.113236] ? tcp_data_ready+0x500/0x500 [ 2346.114133] ? tcp_urg.part.0+0x157/0x2e0 [ 2346.115060] ? tcp_try_keep_open+0x2f0/0x2f0 [ 2346.116025] ? tcp_validate_incoming+0x431/0x16a0 [ 2346.117080] ? tcp_check_urg.isra.0+0x1db/0x720 [ 2346.118110] tcp_rcv_established+0x868/0x1e30 [ 2346.119118] ? tcp_check_space+0x6c0/0x6c0 [ 2346.120073] tcp_v6_do_rcv+0x7b3/0x1520 [ 2346.120975] __release_sock+0x139/0x3b0 [ 2346.121877] release_sock+0x54/0x1b0 [ 2346.122722] sk_wait_data+0x1a7/0x4d0 [ 2346.123581] ? sock_set_mark+0x130/0x130 [ 2346.124490] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2346.125625] tcp_recvmsg+0x17b2/0x2930 [ 2346.126519] ? tcp_splice_read+0x8c0/0x8c0 [ 2346.127479] ? sock_has_perm+0x1ea/0x280 [ 2346.128378] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2346.129539] ? tcp_splice_read+0x8c0/0x8c0 [ 2346.130471] inet6_recvmsg+0x13b/0x6e0 [ 2346.131336] ? inet6_bind+0x120/0x120 [ 2346.132184] ? security_socket_recvmsg+0x95/0xc0 [ 2346.133230] ? inet6_bind+0x120/0x120 [ 2346.134075] sock_recvmsg+0xff/0x180 [ 2346.134924] __sys_recvfrom+0x1be/0x2f0 [ 2346.135814] ? __ia32_sys_send+0x100/0x100 [ 2346.136768] ? _raw_spin_unlock_irq+0x27/0x30 [ 2346.137768] ? __switch_to_asm+0x34/0x60 [ 2346.138679] ? __schedule+0x82c/0x1ea0 [ 2346.139575] ? io_schedule_timeout+0x140/0x140 [ 2346.140579] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2346.141582] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2346.142772] ? ksys_write+0x1a9/0x260 [ 2346.143636] __x64_sys_recvfrom+0xdd/0x1b0 [ 2346.144573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2346.145703] do_syscall_64+0x33/0x40 [ 2346.146536] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2346.147666] RIP: 0033:0x7f848888eb19 [ 2346.148499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2346.152494] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2346.154154] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2346.155734] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2346.157285] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2346.158849] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2346.160418] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 [ 2346.162024] CPU: 1 PID: 55009 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2346.163219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2346.164552] Call Trace: [ 2346.165014] dump_stack+0x107/0x167 [ 2346.165620] should_fail.cold+0x5/0xa [ 2346.166257] _copy_to_iter+0x264/0x12d0 [ 2346.166944] ? sk_wait_data+0x353/0x4d0 [ 2346.167593] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2346.168394] ? mark_held_locks+0x9e/0xe0 [ 2346.169083] ? __virt_addr_valid+0x128/0x350 [ 2346.169823] ? __check_object_size+0x319/0x440 [ 2346.170577] simple_copy_to_iter+0x4c/0x70 [ 2346.171305] __skb_datagram_iter+0x122/0x880 [ 2346.172037] ? sock_set_mark+0x130/0x130 [ 2346.172741] ? zerocopy_sg_from_iter+0x110/0x110 [ 2346.173541] skb_copy_datagram_iter+0x88/0x190 [ 2346.174293] tcp_recvmsg+0x13b5/0x2930 [ 2346.174982] ? tcp_splice_read+0x8c0/0x8c0 [ 2346.175688] ? sock_has_perm+0x1ea/0x280 [ 2346.176367] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2346.177213] ? lock_downgrade+0x6d0/0x6d0 [ 2346.177905] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2346.178801] ? tcp_splice_read+0x8c0/0x8c0 [ 2346.179507] inet6_recvmsg+0x13b/0x6e0 [ 2346.180159] ? inet6_bind+0x120/0x120 [ 2346.180793] ? security_socket_recvmsg+0x95/0xc0 [ 2346.181572] ? inet6_bind+0x120/0x120 [ 2346.182198] sock_recvmsg+0xff/0x180 [ 2346.182824] __sys_recvfrom+0x1be/0x2f0 [ 2346.183482] ? __ia32_sys_send+0x100/0x100 [ 2346.184182] ? lock_downgrade+0x6d0/0x6d0 [ 2346.184887] ? wait_for_completion_io+0x270/0x270 [ 2346.185902] ? rcu_read_lock_any_held+0x75/0xa0 [ 2346.186669] ? vfs_write+0x354/0xa70 [ 2346.187299] ? fput_many+0x2f/0x1a0 [ 2346.187896] ? ksys_write+0x1a9/0x260 [ 2346.188518] ? __ia32_sys_read+0xb0/0xb0 [ 2346.189319] __x64_sys_recvfrom+0xdd/0x1b0 [ 2346.190163] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2346.191028] do_syscall_64+0x33/0x40 [ 2346.191640] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2346.192471] RIP: 0033:0x7fcd1f4c0b19 [ 2346.193086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2346.196031] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2346.197258] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2346.198528] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2346.199860] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2346.201069] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2346.202309] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:24:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400d000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:24:28 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xf6ffffff00000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:24:28 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000001540)='net/rt_cache\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r1 = clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0xfffffffffffffd21, 0x0, 0x0}, 0x58) r2 = syz_open_procfs(r1, &(0x7f0000000200)='net/nfsfs\x00') getpriority(0x1, r1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000440)=0x0) memfd_create(&(0x7f0000000100)='&*\x00', 0x0) kcmp(r1, r3, 0x0, r0, r0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r4, 0x0) preadv(r4, &(0x7f0000001700)=[{&(0x7f0000000000)=""/86, 0xfffffffffffffc71}, {&(0x7f0000000080)=""/114, 0x72}, {&(0x7f00000017c0)=""/95, 0x5f}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f00000001c0)=""/185, 0xb9}, {&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f0000001640)=""/159, 0x9f}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/20, 0x14}], 0xa, 0x7ffdffff, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r6, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/94, 0x5e}], 0x1, 0xfffffffd, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001580)=0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f00000015c0)=0x8) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x6500, 0x0) execveat(r8, &(0x7f0000001840)='./file0\x00', &(0x7f0000001a80)=[&(0x7f0000001880)='\x00', &(0x7f00000018c0)='&*\x00', &(0x7f0000001900)='&*\x00', &(0x7f0000001940)='{\x00', &(0x7f0000001980)='net/nfsfs\x00', &(0x7f00000019c0)='net/nfsfs\x00', &(0x7f0000001a00)='net/nfsfs\x00', &(0x7f0000001a40)='&*\x00'], &(0x7f0000001b00)=[&(0x7f0000001ac0)='+[$!^-\x00'], 0x800) r9 = dup2(r0, r2) sendfile(r9, r4, 0x0, 0x64) perf_event_open(&(0x7f00000014c0)={0x3, 0x80, 0x4, 0x0, 0x7, 0x7, 0x0, 0x100000000, 0x80000, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x6, 0x1ff}, 0xc000, 0x101, 0x6, 0x5, 0x2b3e, 0x2, 0x0, 0x0, 0x5, 0x0, 0x800}, r7, 0x4, 0xffffffffffffffff, 0x2) 03:24:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400d050000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:24:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 23) 03:24:28 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 20) 03:24:28 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:24:28 executing program 6: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:24:28 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:24:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x5ac, 0xcd08, 0x0, 0x0) 03:24:28 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xfa03000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 2347.054223] FAULT_INJECTION: forcing a failure. [ 2347.054223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2347.056657] CPU: 0 PID: 55325 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2347.057464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2347.058409] Call Trace: [ 2347.058727] dump_stack+0x107/0x167 [ 2347.059172] should_fail.cold+0x5/0xa [ 2347.059618] _copy_to_iter+0x264/0x12d0 [ 2347.060090] ? sk_wait_data+0x353/0x4d0 [ 2347.060542] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2347.061114] ? mark_held_locks+0x9e/0xe0 [ 2347.061570] ? __virt_addr_valid+0x128/0x350 [ 2347.062086] ? __check_object_size+0x319/0x440 [ 2347.062612] simple_copy_to_iter+0x4c/0x70 [ 2347.063134] __skb_datagram_iter+0x4f7/0x880 [ 2347.063637] ? zerocopy_sg_from_iter+0x110/0x110 [ 2347.064208] skb_copy_datagram_iter+0x88/0x190 [ 2347.064724] tcp_recvmsg+0x13b5/0x2930 [ 2347.065201] ? tcp_splice_read+0x8c0/0x8c0 [ 2347.065686] ? sock_has_perm+0x1ea/0x280 [ 2347.066166] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2347.066758] ? lock_downgrade+0x6d0/0x6d0 [ 2347.067250] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2347.067843] ? tcp_splice_read+0x8c0/0x8c0 [ 2347.068337] inet6_recvmsg+0x13b/0x6e0 [ 2347.068779] ? inet6_bind+0x120/0x120 [ 2347.069223] ? security_socket_recvmsg+0x95/0xc0 [ 2347.069763] ? inet6_bind+0x120/0x120 [ 2347.070205] sock_recvmsg+0xff/0x180 [ 2347.070633] __sys_recvfrom+0x1be/0x2f0 [ 2347.071107] ? __ia32_sys_send+0x100/0x100 [ 2347.071589] ? lock_downgrade+0x6d0/0x6d0 [ 2347.072089] ? wait_for_completion_io+0x270/0x270 [ 2347.072642] ? rcu_read_lock_any_held+0x75/0xa0 [ 2347.073183] ? vfs_write+0x354/0xa70 [ 2347.073607] ? fput_many+0x2f/0x1a0 [ 2347.074024] ? ksys_write+0x1a9/0x260 [ 2347.074468] ? __ia32_sys_read+0xb0/0xb0 [ 2347.074953] __x64_sys_recvfrom+0xdd/0x1b0 [ 2347.075449] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2347.076041] do_syscall_64+0x33/0x40 [ 2347.076474] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2347.077059] RIP: 0033:0x7fcd1f4c0b19 [ 2347.077494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2347.079609] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2347.080487] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2347.081298] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2347.082112] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2347.082935] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2347.083756] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 [ 2347.123782] FAULT_INJECTION: forcing a failure. [ 2347.123782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2347.125795] CPU: 0 PID: 55345 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2347.126774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2347.127923] Call Trace: [ 2347.128300] dump_stack+0x107/0x167 [ 2347.128814] should_fail.cold+0x5/0xa [ 2347.129356] _copy_to_iter+0x264/0x12d0 [ 2347.129931] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2347.130626] ? __virt_addr_valid+0x128/0x350 [ 2347.131268] ? __check_object_size+0x319/0x440 [ 2347.131916] simple_copy_to_iter+0x4c/0x70 [ 2347.132517] __skb_datagram_iter+0x4f7/0x880 [ 2347.133146] ? zerocopy_sg_from_iter+0x110/0x110 [ 2347.133821] skb_copy_datagram_iter+0x88/0x190 [ 2347.134469] tcp_recvmsg+0x13b5/0x2930 [ 2347.135044] ? tcp_splice_read+0x8c0/0x8c0 [ 2347.135655] ? sock_has_perm+0x1ea/0x280 [ 2347.136232] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2347.136962] ? lock_downgrade+0x6d0/0x6d0 [ 2347.137555] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2347.138290] ? tcp_splice_read+0x8c0/0x8c0 [ 2347.138888] inet6_recvmsg+0x13b/0x6e0 [ 2347.139440] ? inet6_bind+0x120/0x120 [ 2347.139973] ? security_socket_recvmsg+0x95/0xc0 [ 2347.140635] ? inet6_bind+0x120/0x120 [ 2347.141170] sock_recvmsg+0xff/0x180 [ 2347.141693] __sys_recvfrom+0x1be/0x2f0 [ 2347.142259] ? __ia32_sys_send+0x100/0x100 [ 2347.142861] ? lock_downgrade+0x6d0/0x6d0 [ 2347.143473] ? wait_for_completion_io+0x270/0x270 [ 2347.144151] ? rcu_read_lock_any_held+0x75/0xa0 [ 2347.144794] ? vfs_write+0x354/0xa70 [ 2347.145325] ? fput_many+0x2f/0x1a0 [ 2347.145836] ? ksys_write+0x1a9/0x260 [ 2347.146373] ? __ia32_sys_read+0xb0/0xb0 [ 2347.146953] __x64_sys_recvfrom+0xdd/0x1b0 [ 2347.147549] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2347.148267] do_syscall_64+0x33/0x40 [ 2347.148785] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2347.149501] RIP: 0033:0x7f848888eb19 [ 2347.150025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2347.152576] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2347.153643] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2347.154633] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2347.155640] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2347.156638] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2347.157636] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 03:24:41 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:24:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x600, 0xcd08, 0x0, 0x0) 03:24:41 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:24:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 24) 03:24:41 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 21) 03:24:41 executing program 6: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:24:42 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xffff000000000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:24:42 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400e300000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:24:42 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400f000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:24:42 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xffffffff84400000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 2360.204837] FAULT_INJECTION: forcing a failure. [ 2360.204837] name failslab, interval 1, probability 0, space 0, times 0 [ 2360.206523] CPU: 0 PID: 55562 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2360.207319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2360.208274] Call Trace: [ 2360.208603] dump_stack+0x107/0x167 [ 2360.209037] should_fail.cold+0x5/0xa [ 2360.209475] ? create_object.isra.0+0x3a/0xa20 [ 2360.210021] should_failslab+0x5/0x20 [ 2360.210456] kmem_cache_alloc+0x5b/0x310 [ 2360.210943] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2360.211548] create_object.isra.0+0x3a/0xa20 [ 2360.212052] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2360.212626] kmem_cache_alloc_node+0x169/0x330 [ 2360.213159] __alloc_skb+0x6d/0x5b0 [ 2360.213603] __tcp_send_ack.part.0+0x67/0x650 [ 2360.214142] tcp_send_ack+0x7d/0xa0 [ 2360.214565] __tcp_ack_snd_check+0x156/0x9f0 [ 2360.215112] tcp_rcv_established+0x955/0x1e30 [ 2360.215637] ? tcp_check_space+0x6c0/0x6c0 [ 2360.216163] tcp_v6_do_rcv+0x7b3/0x1520 [ 2360.216634] __release_sock+0x139/0x3b0 [ 2360.217126] release_sock+0x54/0x1b0 [ 2360.217571] sk_wait_data+0x1a7/0x4d0 [ 2360.218032] ? sock_set_mark+0x130/0x130 [ 2360.218535] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2360.219150] tcp_recvmsg+0x17b2/0x2930 [ 2360.219648] ? tcp_splice_read+0x8c0/0x8c0 [ 2360.220152] ? sock_has_perm+0x1ea/0x280 [ 2360.220665] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2360.221270] ? lock_downgrade+0x6d0/0x6d0 [ 2360.221780] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2360.222396] ? tcp_splice_read+0x8c0/0x8c0 [ 2360.222923] inet6_recvmsg+0x13b/0x6e0 [ 2360.223384] ? inet6_bind+0x120/0x120 [ 2360.223864] ? security_socket_recvmsg+0x95/0xc0 [ 2360.224408] ? inet6_bind+0x120/0x120 [ 2360.224893] sock_recvmsg+0xff/0x180 [ 2360.225324] __sys_recvfrom+0x1be/0x2f0 [ 2360.225802] ? __ia32_sys_send+0x100/0x100 [ 2360.226300] ? lock_downgrade+0x6d0/0x6d0 [ 2360.226824] ? wait_for_completion_io+0x270/0x270 [ 2360.227406] ? rcu_read_lock_any_held+0x75/0xa0 [ 2360.227953] ? vfs_write+0x354/0xa70 [ 2360.228401] ? fput_many+0x2f/0x1a0 [ 2360.228850] ? ksys_write+0x1a9/0x260 [ 2360.229300] ? __ia32_sys_read+0xb0/0xb0 [ 2360.229784] __x64_sys_recvfrom+0xdd/0x1b0 [ 2360.230287] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2360.230907] do_syscall_64+0x33/0x40 [ 2360.231353] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2360.231964] RIP: 0033:0x7f848888eb19 [ 2360.232411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2360.234561] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2360.235495] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2360.236341] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2360.237215] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2360.238071] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2360.238942] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 [ 2360.247398] FAULT_INJECTION: forcing a failure. [ 2360.247398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2360.248898] CPU: 0 PID: 55553 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2360.249687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2360.250640] Call Trace: [ 2360.250963] dump_stack+0x107/0x167 [ 2360.251429] should_fail.cold+0x5/0xa [ 2360.251879] _copy_to_iter+0x264/0x12d0 [ 2360.252362] ? sk_wait_data+0x353/0x4d0 [ 2360.252833] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2360.253416] ? mark_held_locks+0x9e/0xe0 [ 2360.253906] ? __virt_addr_valid+0x128/0x350 [ 2360.254423] ? __check_object_size+0x319/0x440 [ 2360.254997] simple_copy_to_iter+0x4c/0x70 [ 2360.255489] __skb_datagram_iter+0x4f7/0x880 [ 2360.256031] ? zerocopy_sg_from_iter+0x110/0x110 [ 2360.256584] skb_copy_datagram_iter+0x88/0x190 [ 2360.257151] tcp_recvmsg+0x13b5/0x2930 [ 2360.257615] ? tcp_splice_read+0x8c0/0x8c0 [ 2360.258140] ? sock_has_perm+0x1ea/0x280 [ 2360.258613] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2360.259251] ? lock_downgrade+0x6d0/0x6d0 [ 2360.259734] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2360.260370] ? tcp_splice_read+0x8c0/0x8c0 [ 2360.260857] inet6_recvmsg+0x13b/0x6e0 [ 2360.261356] ? inet6_bind+0x120/0x120 [ 2360.261800] ? security_socket_recvmsg+0x95/0xc0 [ 2360.262386] ? inet6_bind+0x120/0x120 [ 2360.262840] sock_recvmsg+0xff/0x180 [ 2360.263321] __sys_recvfrom+0x1be/0x2f0 [ 2360.263807] ? __ia32_sys_send+0x100/0x100 [ 2360.264304] ? lock_downgrade+0x6d0/0x6d0 [ 2360.264851] ? wait_for_completion_io+0x270/0x270 [ 2360.265401] ? rcu_read_lock_any_held+0x75/0xa0 [ 2360.265933] ? vfs_write+0x354/0xa70 [ 2360.266357] ? fput_many+0x2f/0x1a0 [ 2360.266776] ? ksys_write+0x1a9/0x260 [ 2360.267241] ? __ia32_sys_read+0xb0/0xb0 [ 2360.267712] __x64_sys_recvfrom+0xdd/0x1b0 [ 2360.268218] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2360.268807] do_syscall_64+0x33/0x40 [ 2360.269252] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2360.269827] RIP: 0033:0x7fcd1f4c0b19 [ 2360.270294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2360.272428] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2360.273297] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2360.274144] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2360.275003] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2360.275856] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2360.276677] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:24:54 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:24:54 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400f050000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:24:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 25) 03:24:54 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000200)=""/95, 0x5f}], 0x1, 0xfffffffd, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='adfs\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x8, 0x2, 0x0, {0x0, 0x0, r5}}, 0x7ff) 03:24:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x630, 0xcd08, 0x0, 0x0) 03:24:54 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xffffffffffffffc0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:24:54 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:24:54 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 22) 03:24:54 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:24:54 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4010000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2372.591990] 9pnet: Insufficient options for proto=fd 03:24:54 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4011000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:24:54 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:24:54 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x9, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000140)="4c3639a078e59da4f8611d98028b4ff99ed5fbccffcae388fc44b6c1309b7004a72720192f9a573a49abc42354010777238b6ab1ccb55043b171bb106d1f92c114cabfd9e342fd899b37658fe37b3fb6f865a743a641721e6d8e7556d96482a5fc8f9c85cf752f3e6acf55", 0x6b, 0x1}, {&(0x7f0000000200)="a6bc59fda8d97b34e4a8c0a1092e7d32f8f9a615e006472dabd14a1077fea4fb02c745b83fe4706b3eb1117e30556b7caee754af4ff9d7d6d8b62af5393652f140e73df2c8d33ebff46aeb75f45eab546bb5ffe76b91d84b4b817a9e868adcde643ffcfb1644bad5467b7e", 0x6b, 0x2}], 0x800, &(0x7f0000000280)={[{}, {'@(-)\x98!:[{,#-'}, {}, {'{'}, {'&'}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x35}}, {@seclabel}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x42) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./mnt\x00') mknodat(r0, &(0x7f0000000300)='./file0\x00', 0x8000, 0xac) [ 2372.718816] FAULT_INJECTION: forcing a failure. [ 2372.718816] name failslab, interval 1, probability 0, space 0, times 0 [ 2372.720417] CPU: 0 PID: 55796 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2372.721197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2372.722125] Call Trace: [ 2372.722431] dump_stack+0x107/0x167 [ 2372.722851] should_fail.cold+0x5/0xa [ 2372.723301] ? __alloc_skb+0x6d/0x5b0 [ 2372.723733] should_failslab+0x5/0x20 [ 2372.724160] kmem_cache_alloc_node+0x55/0x330 [ 2372.724673] __alloc_skb+0x6d/0x5b0 [ 2372.725088] ? ktime_get+0x158/0x1f0 [ 2372.725516] __tcp_send_ack.part.0+0x67/0x650 [ 2372.726027] tcp_send_ack+0x7d/0xa0 [ 2372.726439] tcp_cleanup_rbuf+0x468/0x5a0 [ 2372.726901] tcp_recvmsg+0x868/0x2930 [ 2372.727413] ? tcp_splice_read+0x8c0/0x8c0 [ 2372.727833] ? sock_has_perm+0x1ea/0x280 [ 2372.728229] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2372.728755] ? lock_downgrade+0x6d0/0x6d0 [ 2372.729141] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2372.729768] ? tcp_splice_read+0x8c0/0x8c0 [ 2372.730146] inet6_recvmsg+0x13b/0x6e0 [ 2372.730503] ? inet6_bind+0x120/0x120 [ 2372.730879] ? security_socket_recvmsg+0x95/0xc0 [ 2372.731321] ? inet6_bind+0x120/0x120 [ 2372.731689] sock_recvmsg+0xff/0x180 [ 2372.732025] __sys_recvfrom+0x1be/0x2f0 [ 2372.732369] ? __ia32_sys_send+0x100/0x100 [ 2372.732732] ? lock_downgrade+0x6d0/0x6d0 [ 2372.733106] ? wait_for_completion_io+0x270/0x270 [ 2372.733521] ? rcu_read_lock_any_held+0x75/0xa0 [ 2372.733919] ? vfs_write+0x354/0xa70 [ 2372.734242] ? fput_many+0x2f/0x1a0 [ 2372.734554] ? ksys_write+0x1a9/0x260 [ 2372.734881] ? __ia32_sys_read+0xb0/0xb0 [ 2372.735245] __x64_sys_recvfrom+0xdd/0x1b0 [ 2372.735610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2372.736076] do_syscall_64+0x33/0x40 [ 2372.736402] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2372.736842] RIP: 0033:0x7fcd1f4c0b19 [ 2372.737165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2372.738730] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2372.739393] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2372.740024] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2372.740634] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2372.741260] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2372.741868] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 [ 2372.747592] FAULT_INJECTION: forcing a failure. [ 2372.747592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2372.748900] CPU: 0 PID: 55794 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2372.749494] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2372.750186] Call Trace: [ 2372.750413] dump_stack+0x107/0x167 [ 2372.750743] should_fail.cold+0x5/0xa [ 2372.751083] _copy_to_iter+0x264/0x12d0 [ 2372.751423] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2372.751881] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2372.752307] ? __check_object_size+0x136/0x440 [ 2372.752687] ? __check_object_size+0x180/0x440 [ 2372.753081] ? __check_object_size+0x319/0x440 [ 2372.753483] simple_copy_to_iter+0x4c/0x70 [ 2372.753839] __skb_datagram_iter+0x122/0x880 [ 2372.754208] ? sock_set_mark+0x130/0x130 [ 2372.754566] ? zerocopy_sg_from_iter+0x110/0x110 [ 2372.754993] skb_copy_datagram_iter+0x88/0x190 [ 2372.755397] tcp_recvmsg+0x13b5/0x2930 [ 2372.755735] ? tcp_splice_read+0x8c0/0x8c0 [ 2372.756103] ? sock_has_perm+0x1ea/0x280 [ 2372.756448] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2372.756893] ? lock_downgrade+0x6d0/0x6d0 [ 2372.757247] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2372.757694] ? tcp_splice_read+0x8c0/0x8c0 [ 2372.758051] inet6_recvmsg+0x13b/0x6e0 [ 2372.758388] ? inet6_bind+0x120/0x120 [ 2372.758739] ? security_socket_recvmsg+0x95/0xc0 [ 2372.759166] ? inet6_bind+0x120/0x120 [ 2372.759489] sock_recvmsg+0xff/0x180 [ 2372.759814] __sys_recvfrom+0x1be/0x2f0 [ 2372.760156] ? __ia32_sys_send+0x100/0x100 [ 2372.760518] ? lock_downgrade+0x6d0/0x6d0 [ 2372.760906] ? wait_for_completion_io+0x270/0x270 [ 2372.761316] ? rcu_read_lock_any_held+0x75/0xa0 [ 2372.761714] ? vfs_write+0x354/0xa70 [ 2372.762030] ? fput_many+0x2f/0x1a0 [ 2372.762346] ? ksys_write+0x1a9/0x260 [ 2372.762669] ? __ia32_sys_read+0xb0/0xb0 [ 2372.763031] __x64_sys_recvfrom+0xdd/0x1b0 [ 2372.763401] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2372.763846] do_syscall_64+0x33/0x40 [ 2372.764164] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2372.764604] RIP: 0033:0x7f848888eb19 [ 2372.764942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2372.766498] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2372.767151] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2372.767770] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2372.768366] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2372.768965] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2372.769566] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 [ 2372.800512] 9pnet: Insufficient options for proto=fd [ 2372.807582] nfs4: Unknown parameter '@(-)˜!:[{' [ 2372.822272] nfs4: Unknown parameter '@(-)˜!:[{' 03:24:54 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4012010000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:24:54 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x9d50a1, &(0x7f0000000240)=ANY=[]) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000002c0)="81", 0x1}], 0x1, 0x7fdd, 0x0, 0x18) lseek(0xffffffffffffffff, 0x8000, 0x1) fcntl$addseals(r1, 0x409, 0xe) fallocate(r1, 0x0, 0x0, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x10000, 0xff, 0x0, 0x6, 0x0, 0x2, 0x5, 0x0, 0xfffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000100)='./file2\x00', 0x12) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20800, 0x30) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') creat(&(0x7f0000000200)='./file1\x00', 0x2) chroot(&(0x7f0000000280)='./file2\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x509441, 0x18e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write(r3, &(0x7f00000003c0)="0289819eecd945439d8a8b16bf2bf2b67eefb591f4cf4db9ead300c6ac8ba94f7d4a804292338b2abd8472d8beffa0ce3669f0087fe6e41dd4cf60d158da85532ae8", 0x42) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r5, 0x0, 0x4, 0x0, &(0x7f0000000340)) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000340)) sendfile(r2, r4, 0x0, 0x100000001) 03:24:54 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 2372.963994] 9pnet: Insufficient options for proto=fd 03:25:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 26) 03:25:07 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00faf18adf38021b87f9267632a885e33d1960dd25d511b9e2fd9fdbb20cf14a7b589163f927f75e53ee3191128b4ecdc739ea871a581ef817adb7b1ce900f6c21d7357cf61be6ea33290b17982c649bbfb8d750647f81f364a629a72f57cc707373"]) 03:25:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x6b4, 0xcd08, 0x0, 0x0) 03:25:07 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:25:07 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:25:07 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 23) 03:25:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4016000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:25:07 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 2385.445214] 9pnet: Insufficient options for proto=fd [ 2385.483006] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 2385.487777] EXT4-fs (loop6): get root inode failed [ 2385.488347] EXT4-fs (loop6): mount failed 03:25:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4018000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:25:07 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:25:07 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x1f, 0x8, 0x5, 0x7f, 0x0, 0x200, 0x8000, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x81, 0x1, @perf_config_ext={0x7f, 0x100000000}, 0x0, 0x80000001, 0x8, 0x6, 0x2, 0x7ff, 0x81, 0x0, 0x7fffffff, 0x0, 0x878}, 0x0, 0x4, r0, 0x3) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x8) 03:25:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4020000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2385.685585] 9pnet: Insufficient options for proto=fd [ 2385.724584] FAULT_INJECTION: forcing a failure. [ 2385.724584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2385.725856] CPU: 0 PID: 56181 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2385.726543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2385.727298] Call Trace: [ 2385.727544] dump_stack+0x107/0x167 [ 2385.727880] should_fail.cold+0x5/0xa [ 2385.728226] _copy_to_iter+0x264/0x12d0 [ 2385.728584] ? sk_wait_data+0x353/0x4d0 [ 2385.728939] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2385.729382] ? mark_held_locks+0x9e/0xe0 [ 2385.729744] ? __virt_addr_valid+0x128/0x350 [ 2385.730145] ? __check_object_size+0x319/0x440 [ 2385.730555] simple_copy_to_iter+0x4c/0x70 [ 2385.730934] __skb_datagram_iter+0x4f7/0x880 [ 2385.731339] ? zerocopy_sg_from_iter+0x110/0x110 [ 2385.731765] skb_copy_datagram_iter+0x88/0x190 [ 2385.732174] tcp_recvmsg+0x13b5/0x2930 [ 2385.732531] ? tcp_splice_read+0x8c0/0x8c0 [ 2385.732912] ? sock_has_perm+0x1ea/0x280 [ 2385.733282] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2385.733742] ? lock_downgrade+0x6d0/0x6d0 [ 2385.734116] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2385.734582] ? tcp_splice_read+0x8c0/0x8c0 [ 2385.734963] inet6_recvmsg+0x13b/0x6e0 [ 2385.735321] ? inet6_bind+0x120/0x120 [ 2385.735664] ? security_socket_recvmsg+0x95/0xc0 [ 2385.736088] ? inet6_bind+0x120/0x120 [ 2385.736429] sock_recvmsg+0xff/0x180 [ 2385.736765] __sys_recvfrom+0x1be/0x2f0 [ 2385.737122] ? __ia32_sys_send+0x100/0x100 [ 2385.737497] ? lock_downgrade+0x6d0/0x6d0 [ 2385.737887] ? wait_for_completion_io+0x270/0x270 [ 2385.738323] ? rcu_read_lock_any_held+0x75/0xa0 [ 2385.738732] ? vfs_write+0x354/0xa70 [ 2385.739073] ? fput_many+0x2f/0x1a0 [ 2385.739406] ? ksys_write+0x1a9/0x260 [ 2385.739746] ? __ia32_sys_read+0xb0/0xb0 [ 2385.740121] __x64_sys_recvfrom+0xdd/0x1b0 [ 2385.740499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2385.740958] do_syscall_64+0x33/0x40 [ 2385.741290] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2385.741746] RIP: 0033:0x7f848888eb19 [ 2385.742079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2385.743717] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2385.744395] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2385.745032] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2385.745659] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2385.746288] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2385.746924] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 [ 2385.751831] FAULT_INJECTION: forcing a failure. [ 2385.751831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2385.753466] CPU: 0 PID: 56189 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2385.754176] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2385.754912] Call Trace: [ 2385.755150] dump_stack+0x107/0x167 [ 2385.755537] should_fail.cold+0x5/0xa [ 2385.755990] _copy_to_iter+0x264/0x12d0 [ 2385.756378] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2385.756870] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2385.757314] ? __check_object_size+0x136/0x440 [ 2385.757727] ? __check_object_size+0x136/0x440 [ 2385.758140] ? __check_object_size+0x319/0x440 [ 2385.758559] simple_copy_to_iter+0x4c/0x70 [ 2385.758944] __skb_datagram_iter+0x4f7/0x880 [ 2385.759358] ? zerocopy_sg_from_iter+0x110/0x110 [ 2385.759799] skb_copy_datagram_iter+0x88/0x190 [ 2385.760219] tcp_recvmsg+0x13b5/0x2930 [ 2385.760580] ? tcp_splice_read+0x8c0/0x8c0 [ 2385.760968] ? sock_has_perm+0x1ea/0x280 [ 2385.761345] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2385.761827] ? lock_downgrade+0x6d0/0x6d0 [ 2385.762211] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2385.762695] ? tcp_splice_read+0x8c0/0x8c0 [ 2385.763089] inet6_recvmsg+0x13b/0x6e0 [ 2385.763451] ? inet6_bind+0x120/0x120 [ 2385.763801] ? security_socket_recvmsg+0x95/0xc0 [ 2385.764228] ? inet6_bind+0x120/0x120 [ 2385.764574] sock_recvmsg+0xff/0x180 [ 2385.764913] __sys_recvfrom+0x1be/0x2f0 [ 2385.765275] ? __ia32_sys_send+0x100/0x100 [ 2385.765657] ? lock_downgrade+0x6d0/0x6d0 [ 2385.766057] ? wait_for_completion_io+0x270/0x270 [ 2385.766486] ? rcu_read_lock_any_held+0x75/0xa0 [ 2385.766908] ? vfs_write+0x354/0xa70 [ 2385.767260] ? fput_many+0x2f/0x1a0 [ 2385.767593] ? ksys_write+0x1a9/0x260 [ 2385.767938] ? __ia32_sys_read+0xb0/0xb0 [ 2385.768306] __x64_sys_recvfrom+0xdd/0x1b0 [ 2385.768692] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2385.769166] do_syscall_64+0x33/0x40 [ 2385.769500] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2385.769971] RIP: 0033:0x7fcd1f4c0b19 [ 2385.770309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2385.771965] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2385.772652] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2385.773296] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2385.773937] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2385.774576] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2385.775248] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 03:25:07 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x22, {[{@uname={'uname', 0x3d, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:25:07 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x800040, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 03:25:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4020100000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2385.916793] 9pnet: Insufficient options for proto=fd 03:25:08 executing program 6: r0 = getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x1, 0x2, 0x0, 0x8, r0}) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000009, 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x334}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x608f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) dup2(r3, r2) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x17c0ba75be9b2547) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0xffffffffffffffff) close(r4) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000780)=""/105, 0x69, 0x0, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x1, 0xea, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/242, 0xf2}, {&(0x7f00000002c0)=""/133, 0x85}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/162, 0xa2}, {&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/26, 0x1a}], 0x7) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000100)={0xec2, 0x18, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) 03:25:20 executing program 6: prlimit64(0x0, 0x6, &(0x7f0000000080), 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f0000000000)='./file0\x00') setreuid(r0, 0x0) fork() 03:25:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x402e000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:25:20 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x22, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:25:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 27) 03:25:20 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 03:25:20 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:25:20 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 24) 03:25:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x700, 0xcd08, 0x0, 0x0) 03:25:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x402f000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:25:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0x971, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x268, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000240)={0x0, 0x0, 0x2, {0x8000, 0x713}, 0x7, 0x1ff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000500)={0x1, 0x10001}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x8058ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x2}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x80000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '\x00'}}, {@posixacl}, {@uname={'uname', 0x3d, '\x00'}}, {@access_client}, {@uname={'uname', 0x3d, '+&)(,:[}-'}}, {@cache_mmap}, {@privport}, {@debug}, {@access_any}], [{@audit}]}}) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) sendfile(r6, r5, &(0x7f0000000540)=0x80000001, 0x6) 03:25:20 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x2c, 'wfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:25:20 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r4 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x8) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x28, {0x2, 0x0, @empty}}) r5 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x28, {0x2, 0x0, @empty}}) bind(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e20, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}, 0x80) fsmount(r2, 0x1, 0x4) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2832020, &(0x7f0000000400)=ANY=[@ANYBLOB="6e616d653d2f6465762f736e617c16b8aa5e777076af2db2d1ba948e9ce65873686f74002c6370757365745f76325f6d6f64652c616c6c2c6e6f6e652c6370757365745f76325f6d6f64652c78617474722c6e6f7072656669782c636c6f6e655f6368696c6472656e2c68756765746c622c666465762f7a65726f002c736d61636b6673666c6f6f72"]) [ 2398.781669] FAULT_INJECTION: forcing a failure. [ 2398.781669] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.783005] CPU: 0 PID: 56517 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2398.783779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2398.784693] Call Trace: [ 2398.784998] dump_stack+0x107/0x167 [ 2398.785416] should_fail.cold+0x5/0xa [ 2398.785847] ? create_object.isra.0+0x3a/0xa20 [ 2398.786364] should_failslab+0x5/0x20 [ 2398.786796] kmem_cache_alloc+0x5b/0x310 [ 2398.787255] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2398.787855] create_object.isra.0+0x3a/0xa20 [ 2398.788357] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2398.788926] kmem_cache_alloc_node+0x169/0x330 [ 2398.789446] __alloc_skb+0x6d/0x5b0 [ 2398.789855] __tcp_send_ack.part.0+0x67/0x650 [ 2398.790361] tcp_send_ack+0x7d/0xa0 [ 2398.790767] __tcp_ack_snd_check+0x156/0x9f0 [ 2398.791254] tcp_rcv_established+0x955/0x1e30 [ 2398.791770] ? tcp_check_space+0x6c0/0x6c0 [ 2398.792248] tcp_v6_do_rcv+0x7b3/0x1520 [ 2398.792704] __release_sock+0x139/0x3b0 [ 2398.793160] release_sock+0x54/0x1b0 [ 2398.793579] sk_wait_data+0x1a7/0x4d0 [ 2398.794016] ? sock_set_mark+0x130/0x130 [ 2398.794474] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2398.795080] tcp_recvmsg+0x17b2/0x2930 [ 2398.795537] ? tcp_splice_read+0x8c0/0x8c0 [ 2398.796014] ? sock_has_perm+0x1ea/0x280 [ 2398.796468] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2398.797035] ? lock_downgrade+0x6d0/0x6d0 [ 2398.797497] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2398.798067] ? tcp_splice_read+0x8c0/0x8c0 [ 2398.798540] inet6_recvmsg+0x13b/0x6e0 [ 2398.798971] ? inet6_bind+0x120/0x120 [ 2398.799418] ? security_socket_recvmsg+0x95/0xc0 [ 2398.799942] ? inet6_bind+0x120/0x120 [ 2398.800363] sock_recvmsg+0xff/0x180 [ 2398.800779] __sys_recvfrom+0x1be/0x2f0 [ 2398.801218] ? __ia32_sys_send+0x100/0x100 [ 2398.801691] ? lock_downgrade+0x6d0/0x6d0 [ 2398.802184] ? wait_for_completion_io+0x270/0x270 [ 2398.802722] ? rcu_read_lock_any_held+0x75/0xa0 [ 2398.803233] ? vfs_write+0x354/0xa70 [ 2398.803660] ? fput_many+0x2f/0x1a0 [ 2398.804065] ? ksys_write+0x1a9/0x260 [ 2398.804488] ? __ia32_sys_read+0xb0/0xb0 [ 2398.804945] __x64_sys_recvfrom+0xdd/0x1b0 [ 2398.805412] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.805986] do_syscall_64+0x33/0x40 [ 2398.806406] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2398.806976] RIP: 0033:0x7fcd1f4c0b19 [ 2398.807408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.809399] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2398.810229] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2398.811016] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2398.811827] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.812614] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2398.813409] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 [ 2398.824331] FAULT_INJECTION: forcing a failure. [ 2398.824331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2398.825505] CPU: 1 PID: 56520 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2398.826154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2398.826939] Call Trace: [ 2398.827199] dump_stack+0x107/0x167 [ 2398.827567] should_fail.cold+0x5/0xa [ 2398.827942] _copy_to_iter+0x264/0x12d0 [ 2398.828342] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2398.828832] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2398.829331] ? trace_hardirqs_on+0x5b/0x180 [ 2398.829734] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2398.830204] ? __virt_addr_valid+0x128/0x350 [ 2398.830628] ? __check_object_size+0x319/0x440 [ 2398.831065] simple_copy_to_iter+0x4c/0x70 [ 2398.831482] __skb_datagram_iter+0x4f7/0x880 [ 2398.831909] ? zerocopy_sg_from_iter+0x110/0x110 [ 2398.832349] skb_copy_datagram_iter+0x88/0x190 [ 2398.832782] tcp_recvmsg+0x13b5/0x2930 [ 2398.833160] ? tcp_splice_read+0x8c0/0x8c0 [ 2398.833569] ? sock_has_perm+0x7f/0x280 [ 2398.833941] ? sock_has_perm+0xdc/0x280 [ 2398.834314] ? sock_has_perm+0x1ea/0x280 [ 2398.834694] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2398.835188] ? tcp_splice_read+0x8c0/0x8c0 [ 2398.835592] inet6_recvmsg+0x13b/0x6e0 [ 2398.835955] ? inet6_bind+0x120/0x120 [ 2398.836325] ? security_socket_recvmsg+0x95/0xc0 [ 2398.836772] ? inet6_bind+0x120/0x120 [ 2398.837127] sock_recvmsg+0xff/0x180 [ 2398.837476] __sys_recvfrom+0x1be/0x2f0 [ 2398.837865] ? __ia32_sys_send+0x100/0x100 [ 2398.838276] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2398.838678] ? clockevents_program_event+0x131/0x360 [ 2398.839154] ? tick_program_event+0xa8/0x140 [ 2398.839583] ? hrtimer_interrupt+0x771/0x9b0 [ 2398.840006] __x64_sys_recvfrom+0xdd/0x1b0 [ 2398.840414] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.840900] do_syscall_64+0x33/0x40 [ 2398.841252] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2398.841725] RIP: 0033:0x7f848888eb19 [ 2398.842072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.843792] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2398.844491] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2398.845161] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2398.845834] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.846504] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2398.847179] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 03:25:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4032300000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:25:21 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\"fdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) [ 2398.973037] cgroup: Invalid name 03:25:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x403f000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:25:21 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = timerfd_create(0x6, 0x800) fcntl$getown(r1, 0x9) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000020000000b"], 0x537e02) 03:25:38 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, ',fdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:25:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4040000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:25:38 executing program 6: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000000)) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) r2 = syz_io_uring_complete(0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000140)=0xc) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x800, 0x2, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000130001000000000000000000000000000000000000ff02000000000000000000000000000100000000000000000a00403c00000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$CDROM_SEND_PACKET(r1, 0x5393, 0x0) dup2(r0, 0xffffffffffffffff) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0, r3}) 03:25:38 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 03:25:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 28) 03:25:38 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 25) 03:25:38 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 03:25:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x738, 0xcd08, 0x0, 0x0) 03:25:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4048000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:25:38 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'Afdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:25:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x404c000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:25:38 executing program 6: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000000)) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) r2 = syz_io_uring_complete(0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000140)=0xc) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x800, 0x2, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000130001000000000000000000000000000000000000ff02000000000000000000000000000100000000000000000a00403c00000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$CDROM_SEND_PACKET(r1, 0x5393, 0x0) dup2(r0, 0xffffffffffffffff) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0, r3}) [ 2416.576812] FAULT_INJECTION: forcing a failure. [ 2416.576812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2416.577436] FAULT_INJECTION: forcing a failure. [ 2416.577436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2416.578534] CPU: 0 PID: 56775 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2416.580270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2416.581200] Call Trace: [ 2416.581522] dump_stack+0x107/0x167 [ 2416.581928] should_fail.cold+0x5/0xa [ 2416.582388] _copy_to_iter+0x264/0x12d0 [ 2416.582836] ? __schedule+0x82c/0x1ea0 [ 2416.583289] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2416.583856] ? __virt_addr_valid+0x128/0x350 [ 2416.584381] ? __check_object_size+0x319/0x440 [ 2416.584893] simple_copy_to_iter+0x4c/0x70 [ 2416.585400] __skb_datagram_iter+0x4f7/0x880 [ 2416.585893] ? zerocopy_sg_from_iter+0x110/0x110 [ 2416.586465] skb_copy_datagram_iter+0x88/0x190 [ 2416.586974] tcp_recvmsg+0x13b5/0x2930 [ 2416.587454] ? tcp_splice_read+0x8c0/0x8c0 [ 2416.587926] ? sock_has_perm+0x1ea/0x280 [ 2416.588415] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2416.588972] ? lock_downgrade+0x6d0/0x6d0 [ 2416.589475] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2416.590037] ? tcp_splice_read+0x8c0/0x8c0 [ 2416.590545] inet6_recvmsg+0x13b/0x6e0 [ 2416.590970] ? inet6_bind+0x120/0x120 [ 2416.591429] ? security_socket_recvmsg+0x95/0xc0 [ 2416.591952] ? inet6_bind+0x120/0x120 [ 2416.592417] sock_recvmsg+0xff/0x180 [ 2416.592822] __sys_recvfrom+0x1be/0x2f0 [ 2416.593275] ? __ia32_sys_send+0x100/0x100 [ 2416.593762] ? lock_downgrade+0x6d0/0x6d0 [ 2416.594259] ? wait_for_completion_io+0x270/0x270 [ 2416.594801] ? rcu_read_lock_any_held+0x75/0xa0 [ 2416.595339] ? vfs_write+0x354/0xa70 [ 2416.595767] ? fput_many+0x2f/0x1a0 [ 2416.596172] ? ksys_write+0x1a9/0x260 [ 2416.596615] ? __ia32_sys_read+0xb0/0xb0 [ 2416.597059] __x64_sys_recvfrom+0xdd/0x1b0 [ 2416.597553] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2416.598113] do_syscall_64+0x33/0x40 [ 2416.598559] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2416.599114] RIP: 0033:0x7fcd1f4c0b19 [ 2416.599567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2416.601595] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2416.602458] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2416.603247] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2416.604039] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2416.604862] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2416.605683] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 [ 2416.606534] CPU: 1 PID: 56776 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2416.607310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2416.608138] Call Trace: [ 2416.608414] dump_stack+0x107/0x167 [ 2416.608781] should_fail.cold+0x5/0xa [ 2416.609177] _copy_to_iter+0x264/0x12d0 [ 2416.609578] ? __schedule+0x878/0x1ea0 [ 2416.609978] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2416.610479] ? __virt_addr_valid+0x128/0x350 [ 2416.610929] ? __check_object_size+0x319/0x440 [ 2416.611392] simple_copy_to_iter+0x4c/0x70 [ 2416.611835] __skb_datagram_iter+0x4f7/0x880 [ 2416.612282] ? zerocopy_sg_from_iter+0x110/0x110 [ 2416.612762] skb_copy_datagram_iter+0x88/0x190 [ 2416.613227] tcp_recvmsg+0x13b5/0x2930 [ 2416.613632] ? tcp_splice_read+0x8c0/0x8c0 [ 2416.614083] ? sock_has_perm+0x1ea/0x280 [ 2416.614490] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2416.615002] ? lock_downgrade+0x6d0/0x6d0 [ 2416.615418] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2416.615962] ? tcp_splice_read+0x8c0/0x8c0 [ 2416.616388] inet6_recvmsg+0x13b/0x6e0 [ 2416.616785] ? inet6_bind+0x120/0x120 [ 2416.617178] ? security_socket_recvmsg+0x95/0xc0 [ 2416.617693] ? inet6_bind+0x120/0x120 [ 2416.618253] sock_recvmsg+0xff/0x180 [ 2416.618641] __sys_recvfrom+0x1be/0x2f0 [ 2416.619040] ? __ia32_sys_send+0x100/0x100 [ 2416.619497] ? lock_downgrade+0x6d0/0x6d0 [ 2416.620078] ? wait_for_completion_io+0x270/0x270 [ 2416.620840] ? rcu_read_lock_any_held+0x75/0xa0 [ 2416.621311] ? vfs_write+0x354/0xa70 [ 2416.621682] ? fput_many+0x2f/0x1a0 [ 2416.622233] ? ksys_write+0x1a9/0x260 [ 2416.622703] ? __ia32_sys_read+0xb0/0xb0 [ 2416.623257] __x64_sys_recvfrom+0xdd/0x1b0 [ 2416.623690] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2416.624329] do_syscall_64+0x33/0x40 [ 2416.624764] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2416.625575] RIP: 0033:0x7f848888eb19 [ 2416.625950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2416.628155] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2416.629000] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2416.629696] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2416.630428] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2416.631126] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2416.631829] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 03:25:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4068000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:25:38 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=0x0, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="340056f16fbe75cad5c3aa009844a0dd7c2014a7c50d9ec0f743e60da2f08a11da49daf6dad2160bdf39de343dbb72c47a11855714fa3c8f721dafc7a17dbc5d63", @ANYRES16=r0, @ANYBLOB="010000000000000000008900000008000300806c335df852817c246a6f34cea63a2e082ff4d7b71f3b49c0621d0a55678ef882b8f446581397540de1f1e12fca98", @ANYRES32], 0x34}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6461df45"]) [ 2416.835843] EXT4-fs (loop6): Unrecognized mount option "daßE" or missing value 03:25:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x406c000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:25:38 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'Dfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:25:39 executing program 6: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r2, 0xa}) r3 = request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r1) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000640), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x800) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000600)=0x1e) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="54b20ffdfb6aa09f8fd9", 0xa, 0x40081, &(0x7f00000005c0)={0x2, 0x4e24, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x14}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000680)={'syz', 0x0}, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000000000000616161405d199c10847f6a06902a9866f04cee605083af0910616161616161616161616161616161616161616161313131313131313131313131313131313131"], 0x48, 0x0) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, r0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x900, 0xcd08, 0x0, 0x0) 03:25:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 29) 03:25:53 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 03:25:53 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'Ifdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:25:53 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x1ff, 0x1, 0x0, 0x1}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:25:53 executing program 3: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x5a6, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}}, 0x0, 0x0, 0x0, 0x0, "2eff4e70e2ecffdcbfafb764edef40c44eee32454b20d97466899f9916ac67cdf36a3f38f9f8da161bcad0e0dafcd35bee6a5923fe310dd12c60ad1603de740a991be93d6e1c98be335876714a8a8b90"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x101002) 03:25:53 executing program 5: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x5a6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x40, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 26) 03:25:53 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4074000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2431.684195] [ 2431.684402] ====================================================== [ 2431.685013] WARNING: possible circular locking dependency detected [ 2431.685626] 5.10.209 #1 Not tainted [ 2431.685980] ------------------------------------------------------ [ 2431.686583] syz-executor.6/57130 is trying to acquire lock: [ 2431.687128] ffff888018308b78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 2431.688185] [ 2431.688185] but task is already holding lock: [ 2431.688755] ffffffff85619668 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2431.689621] [ 2431.689621] which lock already depends on the new lock. [ 2431.689621] [ 2431.690387] [ 2431.690387] the existing dependency chain (in reverse order) is: [ 2431.691113] [ 2431.691113] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 2431.691795] __mutex_lock+0x13d/0x10b0 [ 2431.692225] rfkill_register+0x36/0xa10 [ 2431.692685] hci_register_dev+0x42e/0xc00 [ 2431.693148] __vhci_create_device+0x2c8/0x5c0 [ 2431.693639] vhci_open_timeout+0x38/0x50 [ 2431.694092] process_one_work+0x9a9/0x14b0 [ 2431.694559] worker_thread+0x61d/0x1310 [ 2431.695006] kthread+0x38f/0x470 [ 2431.695402] ret_from_fork+0x22/0x30 [ 2431.695836] [ 2431.695836] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 2431.698933] __mutex_lock+0x13d/0x10b0 [ 2431.699363] vhci_send_frame+0x63/0xa0 [ 2431.699809] hci_send_frame+0x1b9/0x320 [ 2431.700251] hci_tx_work+0x10af/0x1660 [ 2431.700681] process_one_work+0x9a9/0x14b0 [ 2431.701144] worker_thread+0x61d/0x1310 [ 2431.701592] kthread+0x38f/0x470 [ 2431.701974] ret_from_fork+0x22/0x30 [ 2431.702376] [ 2431.702376] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 2431.703143] __flush_work+0x105/0xa90 [ 2431.703569] hci_dev_do_close+0x131/0x1240 [ 2431.704039] hci_unregister_dev+0x149/0x430 [ 2431.704518] vhci_release+0x70/0xf0 [ 2431.704928] __fput+0x285/0x980 [ 2431.705300] task_work_run+0xe2/0x1a0 [ 2431.705717] do_exit+0xb6f/0x2600 [ 2431.706104] do_group_exit+0x125/0x310 [ 2431.706538] get_signal+0x4bc/0x22e0 [ 2431.706956] arch_do_signal_or_restart+0x2b7/0x1990 [ 2431.707492] exit_to_user_mode_prepare+0x10f/0x190 [ 2431.708034] syscall_exit_to_user_mode+0x38/0x1e0 [ 2431.708558] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2431.709101] [ 2431.709101] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 2431.709721] __mutex_lock+0x13d/0x10b0 [ 2431.710157] bg_scan_update+0x82/0x500 [ 2431.710585] process_one_work+0x9a9/0x14b0 [ 2431.711054] worker_thread+0x61d/0x1310 [ 2431.711492] kthread+0x38f/0x470 [ 2431.711880] ret_from_fork+0x22/0x30 [ 2431.712290] [ 2431.712290] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 2431.713160] __lock_acquire+0x29e7/0x5b00 [ 2431.713633] lock_acquire+0x197/0x470 [ 2431.714050] __flush_work+0x105/0xa90 [ 2431.714490] __cancel_work_timer+0x368/0x4c0 [ 2431.714996] hci_request_cancel_all+0x73/0x230 [ 2431.715504] hci_dev_do_close+0xd9/0x1240 [ 2431.715984] hci_rfkill_set_block+0x166/0x1a0 [ 2431.716477] rfkill_set_block+0x1fd/0x540 [ 2431.716932] rfkill_fop_write+0x253/0x4b0 [ 2431.717385] vfs_write+0x29a/0xa70 [ 2431.717784] ksys_write+0x1f6/0x260 [ 2431.718206] do_syscall_64+0x33/0x40 [ 2431.718633] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2431.719201] [ 2431.719201] other info that might help us debug this: [ 2431.719201] [ 2431.719980] Chain exists of: [ 2431.719980] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 2431.719980] [ 2431.721303] Possible unsafe locking scenario: [ 2431.721303] [ 2431.721884] CPU0 CPU1 [ 2431.722332] ---- ---- [ 2431.722769] lock(rfkill_global_mutex); [ 2431.723170] lock(&data->open_mutex); [ 2431.723797] lock(rfkill_global_mutex); [ 2431.724430] lock((work_completion)(&hdev->bg_scan_update)); [ 2431.725004] [ 2431.725004] *** DEADLOCK *** [ 2431.725004] [ 2431.725585] 1 lock held by syz-executor.6/57130: [ 2431.726047] #0: ffffffff85619668 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2431.726958] [ 2431.726958] stack backtrace: [ 2431.727393] CPU: 1 PID: 57130 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 2431.728065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2431.728868] Call Trace: [ 2431.729138] dump_stack+0x107/0x167 [ 2431.729499] check_noncircular+0x263/0x2e0 [ 2431.729916] ? register_lock_class+0xbb/0x17b0 [ 2431.730369] ? print_circular_bug+0x470/0x470 [ 2431.730809] ? find_first_zero_bit+0x94/0xb0 [ 2431.731243] ? alloc_chain_hlocks+0x342/0x5a0 [ 2431.731681] __lock_acquire+0x29e7/0x5b00 [ 2431.732112] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2431.732643] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2431.733154] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2431.733689] lock_acquire+0x197/0x470 [ 2431.734062] ? __flush_work+0xdd/0xa90 [ 2431.734451] ? lock_release+0x680/0x680 [ 2431.734836] ? __flush_work+0x78c/0xa90 [ 2431.735233] ? lock_downgrade+0x6d0/0x6d0 [ 2431.735640] __flush_work+0x105/0xa90 [ 2431.736017] ? __flush_work+0xdd/0xa90 [ 2431.736382] ? lock_chain_count+0x20/0x20 [ 2431.736781] ? queue_delayed_work_on+0xe0/0xe0 [ 2431.737230] ? mark_lock+0xf5/0x2df0 [ 2431.737597] ? mark_lock+0xf5/0x2df0 [ 2431.737964] ? lock_chain_count+0x20/0x20 [ 2431.738371] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2431.738891] ? lock_chain_count+0x20/0x20 [ 2431.739296] ? lock_acquire+0x197/0x470 [ 2431.739680] ? rfkill_send_events+0x1e8/0x390 [ 2431.740142] ? mark_held_locks+0x9e/0xe0 [ 2431.740541] __cancel_work_timer+0x368/0x4c0 [ 2431.740971] ? cancel_delayed_work+0x20/0x20 [ 2431.741407] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2431.741919] ? __cancel_work+0x250/0x2b0 [ 2431.742321] ? trace_hardirqs_on+0x5b/0x180 [ 2431.742749] ? __cancel_work+0x1bb/0x2b0 [ 2431.743150] ? try_to_grab_pending+0xe0/0xe0 [ 2431.743588] hci_request_cancel_all+0x73/0x230 [ 2431.744051] hci_dev_do_close+0xd9/0x1240 [ 2431.744455] ? rfkill_set_block+0x18f/0x540 [ 2431.744873] ? hci_dev_open+0x350/0x350 [ 2431.745263] ? mark_held_locks+0x9e/0xe0 [ 2431.745666] hci_rfkill_set_block+0x166/0x1a0 [ 2431.746110] ? hci_power_off+0x20/0x20 [ 2431.746493] rfkill_set_block+0x1fd/0x540 [ 2431.746907] rfkill_fop_write+0x253/0x4b0 [ 2431.747322] ? rfkill_sync_work+0xa0/0xa0 [ 2431.747759] ? security_file_permission+0x24e/0x570 [ 2431.748253] ? rfkill_sync_work+0xa0/0xa0 [ 2431.748658] vfs_write+0x29a/0xa70 [ 2431.749010] ksys_write+0x1f6/0x260 [ 2431.749371] ? __ia32_sys_read+0xb0/0xb0 [ 2431.749775] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2431.750311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.750815] do_syscall_64+0x33/0x40 [ 2431.751186] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2431.751681] RIP: 0033:0x7f9a3a52db19 [ 2431.752058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2431.753828] RSP: 002b:00007f9a37aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2431.754573] RAX: ffffffffffffffda RBX: 00007f9a3a640f60 RCX: 00007f9a3a52db19 [ 2431.755265] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2431.755969] RBP: 00007f9a3a587f6d R08: 0000000000000000 R09: 0000000000000000 [ 2431.756658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2431.757350] R13: 00007ffcb903894f R14: 00007f9a37aa3300 R15: 0000000000022000 03:25:53 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4078000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:25:53 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'Qfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:25:53 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x407a000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) [ 2431.929931] FAULT_INJECTION: forcing a failure. [ 2431.929931] name failslab, interval 1, probability 0, space 0, times 0 [ 2431.931364] CPU: 1 PID: 57141 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2431.932049] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2431.932881] Call Trace: [ 2431.933150] dump_stack+0x107/0x167 [ 2431.933518] should_fail.cold+0x5/0xa [ 2431.933891] ? __alloc_skb+0x6d/0x5b0 [ 2431.934264] should_failslab+0x5/0x20 [ 2431.934642] kmem_cache_alloc_node+0x55/0x330 [ 2431.935079] ? tcp_trim_head+0x470/0x470 [ 2431.935481] __alloc_skb+0x6d/0x5b0 [ 2431.935853] ? irqentry_enter+0x26/0x60 [ 2431.936242] tcp_collapse+0x42c/0xf20 [ 2431.936619] ? tcp_queue_rcv+0x7c0/0x7c0 [ 2431.937008] ? tcp_xmit_retransmit_queue+0x57/0x70 [ 2431.937486] ? tcp_xmit_recovery+0x86/0x180 [ 2431.937914] ? tcp_ack+0xeef/0x5690 [ 2431.938274] ? irqentry_enter+0x26/0x60 [ 2431.938655] tcp_try_rmem_schedule+0xb8a/0x1690 [ 2431.939115] tcp_data_queue+0x4eb/0x47f0 [ 2431.939512] ? perf_event_sched_in.isra.0+0x80/0x80 [ 2431.940012] ? tcp_data_ready+0x500/0x500 [ 2431.940431] ? tcp_urg.part.0+0x157/0x2e0 [ 2431.940860] ? tcp_try_keep_open+0x2f0/0x2f0 [ 2431.941627] ? tcp_validate_incoming+0x431/0x16a0 [ 2431.942183] ? tcp_check_urg.isra.0+0x1db/0x720 [ 2431.942665] tcp_rcv_established+0x868/0x1e30 [ 2431.943113] ? tcp_check_space+0x6c0/0x6c0 [ 2431.943529] tcp_v6_do_rcv+0x7b3/0x1520 [ 2431.943930] __release_sock+0x139/0x3b0 [ 2431.944322] release_sock+0x54/0x1b0 [ 2431.944687] tcp_recvmsg+0x870/0x2930 [ 2431.945074] ? tcp_splice_read+0x8c0/0x8c0 [ 2431.945490] ? lock_acquire+0x3ef/0x470 [ 2431.945890] ? lock_release+0x4d1/0x680 [ 2431.946285] ? sock_has_perm+0x1ea/0x280 [ 2431.946684] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2431.947201] ? __might_fault+0xd3/0x180 [ 2431.947595] ? lock_downgrade+0x6d0/0x6d0 [ 2431.948016] ? tcp_splice_read+0x8c0/0x8c0 [ 2431.948428] inet6_recvmsg+0x13b/0x6e0 [ 2431.948800] ? inet6_bind+0x120/0x120 [ 2431.949172] ? security_socket_recvmsg+0x95/0xc0 [ 2431.949629] ? inet6_bind+0x120/0x120 [ 2431.950007] sock_recvmsg+0xff/0x180 [ 2431.950376] __sys_recvfrom+0x1be/0x2f0 [ 2431.950773] ? __ia32_sys_send+0x100/0x100 [ 2431.951192] ? lock_downgrade+0x6d0/0x6d0 [ 2431.951598] ? lock_release+0x4d1/0x680 [ 2431.952011] ? wait_for_completion_io+0x270/0x270 [ 2431.952479] ? vfs_write+0x354/0xa70 [ 2431.952849] ? fput_many+0x2f/0x1a0 [ 2431.953209] ? ksys_write+0x1a9/0x260 [ 2431.953581] ? __ia32_sys_read+0xb0/0xb0 [ 2431.953987] __x64_sys_recvfrom+0xdd/0x1b0 [ 2431.954405] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.954912] do_syscall_64+0x33/0x40 [ 2431.955278] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2431.955782] RIP: 0033:0x7fcd1f4c0b19 [ 2431.956168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2431.957704] FAULT_INJECTION: forcing a failure. [ 2431.957704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2431.958025] RSP: 002b:00007fcd1ca15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2431.958041] RAX: ffffffffffffffda RBX: 00007fcd1f5d4020 RCX: 00007fcd1f4c0b19 [ 2431.958049] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2431.958066] RBP: 00007fcd1ca151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2431.962234] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2431.962948] R13: 00007ffd8043b62f R14: 00007fcd1ca15300 R15: 0000000000022000 [ 2431.963684] CPU: 0 PID: 57135 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2431.964476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2431.965396] Call Trace: [ 2431.965702] dump_stack+0x107/0x167 [ 2431.966111] should_fail.cold+0x5/0xa [ 2431.966528] _copy_to_iter+0x264/0x12d0 [ 2431.967187] ? __virt_addr_valid+0x76/0x350 [ 2431.967670] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2431.968241] ? __virt_addr_valid+0x128/0x350 [ 2431.968739] ? __check_object_size+0x319/0x440 [ 2431.969261] simple_copy_to_iter+0x4c/0x70 [ 2431.969731] __skb_datagram_iter+0x4f7/0x880 [ 2431.970213] ? zerocopy_sg_from_iter+0x110/0x110 [ 2431.970732] skb_copy_datagram_iter+0x88/0x190 [ 2431.971237] tcp_recvmsg+0x13b5/0x2930 [ 2431.971632] ? tcp_splice_read+0x8c0/0x8c0 [ 2431.972074] ? lock_acquire+0x3ef/0x470 [ 2431.972482] ? lock_release+0x4d1/0x680 [ 2431.972896] ? sock_has_perm+0x1ea/0x280 [ 2431.973323] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2431.973851] ? __might_fault+0xd3/0x180 [ 2431.974263] ? lock_downgrade+0x6d0/0x6d0 [ 2431.974691] ? tcp_splice_read+0x8c0/0x8c0 [ 2431.975150] inet6_recvmsg+0x13b/0x6e0 [ 2431.975571] ? inet6_bind+0x120/0x120 [ 2431.975993] ? security_socket_recvmsg+0x95/0xc0 [ 2431.976509] ? inet6_bind+0x120/0x120 [ 2431.976924] sock_recvmsg+0xff/0x180 [ 2431.977331] __sys_recvfrom+0x1be/0x2f0 [ 2431.977762] ? __ia32_sys_send+0x100/0x100 [ 2431.978215] ? lock_downgrade+0x6d0/0x6d0 [ 2431.978668] ? lock_release+0x4d1/0x680 [ 2431.979111] ? wait_for_completion_io+0x270/0x270 [ 2431.979642] ? vfs_write+0x354/0xa70 [ 2431.980060] ? fput_many+0x2f/0x1a0 [ 2431.980461] ? ksys_write+0x1a9/0x260 [ 2431.980877] ? __ia32_sys_read+0xb0/0xb0 [ 2431.981327] __x64_sys_recvfrom+0xdd/0x1b0 [ 2431.981790] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.982354] do_syscall_64+0x33/0x40 [ 2431.982764] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2431.983315] RIP: 0033:0x7f848888eb19 [ 2431.983716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2431.985712] RSP: 002b:00007f8485de3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2431.986525] RAX: ffffffffffffffda RBX: 00007f84889a2020 RCX: 00007f848888eb19 [ 2431.987298] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2431.988087] RBP: 00007f8485de31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2431.988855] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2431.989622] R13: 00007ffd400f6b2f R14: 00007f8485de3300 R15: 0000000000022000 03:25:54 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4081210400, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:25:54 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'Rfdno'}}], [{@fsname={'fsname', 0x3d, 'privport'}}]}}) 03:25:54 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4082210400, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@quiet}]}) 03:25:54 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x1ff, 0x1, 0x0, 0x1}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:25:54 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x1ff, 0x1, 0x0, 0x1}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) VM DIAGNOSIS: 03:25:53 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff85a0e504 RDX=ffff8880088bf9b8 RSI=0000000000000000 RDI=ffffffff85a0e506 RBP=ffff8880088bf9ad RSP=ffff8880088bf8a0 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000032042 R11=1ffff11001117f1c R12=ffff8880088bfda0 R13=ffff8880088bf978 R14=1ffff11001117f1c R15=ffffffff85a0e508 RIP=ffffffff81108403 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcfbe04e900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020001000 CR3=00000000096ea000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=000000000ddd062a EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000ff000000ff00 XMM02=6f6d656d0070756f72672e6d6f6f2e79 XMM03=726f6d656d0078616d2e79726f6d656d XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000000000000000000055b0047b4e30 XMM06=000055b00478b620000055b00487cdb0 XMM07=00000000000000000000000000000000 XMM08=4c4b4a4948474645444342417a797877 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000006d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822cbe31 RDI=ffffffff879e8240 RBP=ffffffff879e8200 RSP=ffff88805738f1e0 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=000000000000006d R13=000000000000006d R14=ffffffff879e8200 R15=dffffc0000000000 RIP=ffffffff822cbe88 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9a37aa3700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f430b733fe8 CR3=0000000050620000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000