, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:34:42 executing program 7: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r2, 0x4, 0xc00) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="d126f7f324b2ffdfa7", 0x9}, {0x0}, {&(0x7f00000009c0)}], 0x3}}, {{&(0x7f0000000a40)={0xa, 0x0, 0x0, @local, 0x7f}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000a80)="f5", 0x1}], 0x1}}, {{&(0x7f0000000f40)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x3, 0x0) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ppoll(&(0x7f0000000040)=[{r1, 0x4424}, {r1}], 0x2, 0x0, 0x0, 0x0) 03:34:42 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x44, 0xfc, 0x0, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc5bdd1cdfeeafff8}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x2b0, 0x0, 0x82}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='fei'], 0x1020) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) 03:34:42 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 26) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) [ 1978.157154] FAULT_INJECTION: forcing a failure. [ 1978.157154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1978.159722] CPU: 0 PID: 12561 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 1978.160833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1978.162152] Call Trace: [ 1978.162592] dump_stack+0x107/0x167 [ 1978.163190] should_fail.cold+0x5/0xa [ 1978.163829] __alloc_pages_nodemask+0x182/0x600 [ 1978.164581] ? lock_chain_count+0x20/0x20 [ 1978.165259] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1978.166241] ? perf_trace_lock+0xac/0x490 [ 1978.166921] alloc_pages_vma+0xbb/0x410 [ 1978.167587] wp_page_copy+0xee7/0x1f00 [ 1978.168242] ? print_bad_pte+0x5a0/0x5a0 [ 1978.168901] ? lock_downgrade+0x6d0/0x6d0 [ 1978.169572] ? vm_normal_page+0x162/0x2e0 [ 1978.170250] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1978.171112] do_wp_page+0x27b/0x1390 [ 1978.171741] handle_mm_fault+0x1cc7/0x3500 [ 1978.172440] ? simple_copy_to_iter+0x54/0x70 [ 1978.173161] ? __pmd_alloc+0x5e0/0x5e0 [ 1978.173813] ? vmacache_find+0x55/0x2a0 [ 1978.174483] do_user_addr_fault+0x56e/0xc60 [ 1978.175197] exc_page_fault+0xa2/0x1a0 [ 1978.175841] asm_exc_page_fault+0x1e/0x30 [ 1978.176519] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1978.177324] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca e9 41 44 1d 02 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca e9 22 44 1d 02 66 90 48 bb f9 ef ff ff ff 7f [ 1978.180277] RSP: 0018:ffff8880501779c8 EFLAGS: 00050206 [ 1978.181326] RAX: 0000000000000028 RBX: ffffffff8310eeb0 RCX: 0000000020002030 [ 1978.182538] RDX: 1ffff1100a02efc3 RSI: ffffffff83104a7a RDI: 0000000000000005 [ 1978.183695] RBP: ffff888050177dc8 R08: 0000000000000001 R09: ffff88804de0f0df [ 1978.184838] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000020002030 [ 1978.185976] R13: 0000000020002000 R14: 0000000000000062 R15: 0000000000000004 [ 1978.187140] ? sock_common_getsockopt+0xb0/0xb0 [ 1978.187906] ? ____sys_recvmsg+0x2aa/0x590 [ 1978.188601] ____sys_recvmsg+0x2dd/0x590 [ 1978.189271] ? kernel_recvmsg+0x80/0x80 [ 1978.189923] ? __import_iovec+0x458/0x590 [ 1978.190612] ? import_iovec+0x83/0xb0 [ 1978.191243] ___sys_recvmsg+0x127/0x200 [ 1978.191910] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1978.192709] ? __lockdep_reset_lock+0x180/0x180 [ 1978.193624] ? __fget_files+0x2cf/0x520 [ 1978.194289] ? lock_acquire+0x197/0x470 [ 1978.195073] ? find_held_lock+0x2c/0x110 [ 1978.195757] ? __might_fault+0xd3/0x180 [ 1978.196412] ? lock_downgrade+0x6d0/0x6d0 [ 1978.197112] do_recvmmsg+0x24c/0x6d0 [ 1978.197729] ? ___sys_recvmsg+0x200/0x200 [ 1978.198403] ? lock_downgrade+0x6d0/0x6d0 [ 1978.199087] ? ksys_write+0x12d/0x260 [ 1978.199740] ? wait_for_completion_io+0x270/0x270 [ 1978.200525] ? rcu_read_lock_any_held+0x75/0xa0 [ 1978.201282] ? vfs_write+0x354/0xb10 [ 1978.201895] __x64_sys_recvmmsg+0x20f/0x260 [ 1978.202735] ? ksys_write+0x1a9/0x260 [ 1978.203364] ? __do_sys_socketcall+0x600/0x600 [ 1978.204172] do_syscall_64+0x33/0x40 [ 1978.204778] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1978.205605] RIP: 0033:0x7fb290a1fb19 [ 1978.206218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1978.209150] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1978.210376] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 1978.211527] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 1978.212691] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1978.213836] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1978.214982] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:34:42 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x81, 0x7, 0x7c, 0x1, 0x0, 0x2, 0x44, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x81, 0x1, @perf_config_ext={0xef, 0xffffffffffff8001}, 0x24, 0xe8, 0x2, 0x1, 0x2, 0x0, 0x4, 0x0, 0xfffffffa, 0x0, 0x401}, 0x0, 0x9, 0xffffffffffffffff, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r3 = fcntl$dupfd(r2, 0x0, r1) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04", 0x66, 0xffffffffffff8001}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="06", @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESOCT=r3]) 03:34:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x94, 0x10062, 0x0) [ 1978.277889] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1978.279507] EXT4-fs (loop2): group descriptors corrupted! [ 1978.288046] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:34:42 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r2, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180), &(0x7f0000000240)=0x4) read(r2, &(0x7f0000000300)=""/209, 0xd1) r5 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r6 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r6, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'}) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:34:42 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x7516, &(0x7f0000000180)={0x0, 0xb99f, 0x8, 0x1, 0x1de}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r4 = fcntl$dupfd(r3, 0x0, r2) fcntl$getflags(r3, 0x1) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r4, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x30000, 0x12345}, 0x8000) sendmsg$nl_xfrm(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000040)=@flushsa={0x4c, 0x1c, 0x10, 0x70bd2b, 0x25dfdbfd, {0x25}}, 0x4c}}, 0x0) 03:34:42 executing program 1: r0 = fork() kcmp(0x0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x80000001}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r1, &(0x7f0000000680)='./file0\x00') renameat(r1, &(0x7f00000000c0)='./file0/file1\x00', r1, 0x0) inotify_init1(0x80000) 03:34:42 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:34:42 executing program 6: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:34:42 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:34:42 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 27) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:34:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYBLOB="7c9fe20c234c23fd18304ec3a73702000000203d431d707a6b67aec2293d6fe9094aa2d235e1edce3892104e69bec56d56172300"/65], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x38, r4, 0x401, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000540)=ANY=[@ANYRES16, @ANYRESDEC=r1, @ANYBLOB="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", @ANYRES32=r3]}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) recvmsg$unix(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f0000000680)=""/76, 0x4c}, {&(0x7f0000000700)=""/131, 0x83}, {&(0x7f00000007c0)=""/185, 0xb9}, {&(0x7f0000000880)=""/188, 0xbc}, {&(0x7f0000000240)=""/7, 0x7}], 0x6, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}, 0x10000) ioctl$SCSI_IOCTL_STOP_UNIT(r6, 0x6) socket$packet(0x11, 0x2, 0x300) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) unshare(0x48020200) [ 1978.605489] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1978.630671] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1978.632559] EXT4-fs (loop2): group descriptors corrupted! [ 1978.658583] FAULT_INJECTION: forcing a failure. [ 1978.658583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1978.660581] CPU: 0 PID: 12791 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 1978.661722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1978.663087] Call Trace: [ 1978.663544] dump_stack+0x107/0x167 [ 1978.664168] should_fail.cold+0x5/0xa [ 1978.664817] _copy_from_user+0x2e/0x1b0 [ 1978.665498] __copy_msghdr_from_user+0x91/0x4b0 [ 1978.666273] ? __ia32_sys_shutdown+0x80/0x80 [ 1978.667007] ? __lock_acquire+0x1657/0x5b00 [ 1978.667756] ___sys_recvmsg+0xd5/0x200 [ 1978.668411] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1978.669224] ? __lockdep_reset_lock+0x180/0x180 [ 1978.670009] ? lock_acquire+0x197/0x470 [ 1978.670671] ? find_held_lock+0x2c/0x110 [ 1978.671359] ? __might_fault+0xd3/0x180 [ 1978.672035] ? lock_downgrade+0x6d0/0x6d0 [ 1978.672757] do_recvmmsg+0x24c/0x6d0 [ 1978.673390] ? ___sys_recvmsg+0x200/0x200 [ 1978.674089] ? lock_downgrade+0x6d0/0x6d0 [ 1978.674789] ? ksys_write+0x12d/0x260 [ 1978.675445] ? wait_for_completion_io+0x270/0x270 [ 1978.676410] ? rcu_read_lock_any_held+0x75/0xa0 [ 1978.677244] ? vfs_write+0x354/0xb10 [ 1978.677979] __x64_sys_recvmmsg+0x20f/0x260 [ 1978.678715] ? ksys_write+0x1a9/0x260 [ 1978.679462] ? __do_sys_socketcall+0x600/0x600 [ 1978.680284] do_syscall_64+0x33/0x40 [ 1978.681025] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1978.681867] RIP: 0033:0x7fb290a1fb19 [ 1978.682610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1978.685616] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1978.687108] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 1978.688314] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 1978.689488] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1978.690672] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1978.691851] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:34:59 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x254300, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000180)='./file0\x00', 0x701000, 0xf1) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:34:59 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x95, 0x10062, 0x0) 03:34:59 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = getpgrp(0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x1, 0x40, 0xfa, 0x81, 0x0, 0x40, 0x8080, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd9, 0x4, @perf_config_ext={0x51, 0x3}, 0x5290, 0x0, 0x7, 0x1, 0x2, 0x9, 0x7, 0x0, 0x2, 0x0, 0x96e}, r3, 0x8, 0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x2004, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x9, 0x6, "68bd09f35aa4a169347b894b3b77f236c83b9f65abe9212314cd8df1dc20aa2c433b24a6999fa09021e87118e9498f8e64a72dbdee1719beef82e3b6265651"}, 0x80, &(0x7f0000000240)=[{0x0}], 0x1}}, 0x7fff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000940)={0x3, 0x80, 0x5, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext, 0x9000, 0x3, 0x7, 0x4, 0x61, 0x0, 0x5, 0x0, 0x5f}, 0x0, 0x0, 0xffffffffffffffff, 0x9) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index, 0x0, 0x0, 0x0, 0x2}, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) accept$unix(0xffffffffffffffff, 0x0, 0x0) 03:34:59 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 28) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:34:59 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0xed, 0x0) dup2(r1, r0) inotify_init1(0x0) 03:34:59 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:34:59 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:34:59 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x80010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x5, 0x9, 0x4, 0x7f, 0x0, 0x80000000, 0x820, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x7fff, 0xfffffffffffffff7}, 0x0, 0x7, 0x0, 0x6, 0x9, 0x4, 0x81, 0x0, 0x5b, 0x0, 0x385}, 0x0, 0xa, r1, 0x9) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x1a) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0xc0189436, &(0x7f0000000180)={@loopback}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/locks\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x799) dup3(r3, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x72ac75c52e5014df, r3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/kexec_crash_size', 0x0, 0x0) copy_file_range(r4, 0x0, r4, &(0x7f00000000c0)=0x6, 0x6, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x82602, 0x0) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000140)=""/248, 0xf8}, {&(0x7f0000000240)}], 0x3) [ 1995.128539] FAULT_INJECTION: forcing a failure. [ 1995.128539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1995.130128] CPU: 1 PID: 12825 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 1995.131007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1995.132073] Call Trace: [ 1995.132420] dump_stack+0x107/0x167 [ 1995.132894] should_fail.cold+0x5/0xa [ 1995.133391] _copy_from_user+0x2e/0x1b0 [ 1995.133905] __copy_msghdr_from_user+0x91/0x4b0 [ 1995.134492] ? __ia32_sys_shutdown+0x80/0x80 [ 1995.135053] ? __lock_acquire+0x1657/0x5b00 [ 1995.135616] ___sys_recvmsg+0xd5/0x200 [ 1995.136122] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1995.136738] ? __lockdep_reset_lock+0x180/0x180 [ 1995.137330] ? __fget_files+0x2cf/0x520 [ 1995.137840] ? lock_acquire+0x197/0x470 [ 1995.138345] ? find_held_lock+0x2c/0x110 [ 1995.138868] ? __might_fault+0xd3/0x180 [ 1995.139372] ? lock_downgrade+0x6d0/0x6d0 [ 1995.139923] do_recvmmsg+0x24c/0x6d0 [ 1995.140404] ? ___sys_recvmsg+0x200/0x200 [ 1995.140925] ? lock_downgrade+0x6d0/0x6d0 [ 1995.141462] ? ksys_write+0x12d/0x260 [ 1995.141960] ? wait_for_completion_io+0x270/0x270 [ 1995.142573] ? rcu_read_lock_any_held+0x75/0xa0 [ 1995.143156] ? vfs_write+0x354/0xb10 [ 1995.143635] __x64_sys_recvmmsg+0x20f/0x260 [ 1995.144201] ? ksys_write+0x1a9/0x260 [ 1995.144703] ? __do_sys_socketcall+0x600/0x600 [ 1995.145292] do_syscall_64+0x33/0x40 [ 1995.145785] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1995.146433] RIP: 0033:0x7fb290a1fb19 [ 1995.146922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1995.149284] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1995.150279] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 1995.151198] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 1995.152119] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1995.153045] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1995.153951] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 1995.183486] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1995.184818] EXT4-fs (loop2): group descriptors corrupted! [ 1995.214940] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:34:59 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x96, 0x10062, 0x0) 03:34:59 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 29) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:34:59 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 1995.384107] FAULT_INJECTION: forcing a failure. [ 1995.384107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1995.386730] CPU: 0 PID: 12955 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 1995.388060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1995.389642] Call Trace: [ 1995.390156] dump_stack+0x107/0x167 [ 1995.390872] should_fail.cold+0x5/0xa [ 1995.391624] _copy_from_user+0x2e/0x1b0 [ 1995.392420] __copy_msghdr_from_user+0x91/0x4b0 [ 1995.393329] ? __ia32_sys_shutdown+0x80/0x80 [ 1995.394181] ? __lock_acquire+0x1657/0x5b00 [ 1995.395043] ___sys_recvmsg+0xd5/0x200 [ 1995.395815] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1995.396780] ? __lockdep_reset_lock+0x180/0x180 [ 1995.397693] ? __fget_files+0x2cf/0x520 [ 1995.398480] ? lock_acquire+0x197/0x470 [ 1995.399259] ? find_held_lock+0x2c/0x110 [ 1995.400072] ? __might_fault+0xd3/0x180 [ 1995.400858] ? lock_downgrade+0x6d0/0x6d0 [ 1995.401676] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1995.402776] do_recvmmsg+0x24c/0x6d0 [ 1995.403538] ? ___sys_recvmsg+0x200/0x200 [ 1995.404377] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1995.405422] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1995.406483] ? trace_hardirqs_on+0x5b/0x180 [ 1995.407225] __x64_sys_recvmmsg+0x20f/0x260 [ 1995.407954] ? __do_sys_socketcall+0x600/0x600 [ 1995.408739] do_syscall_64+0x33/0x40 [ 1995.409344] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1995.410177] RIP: 0033:0x7fb290a1fb19 [ 1995.410805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1995.413804] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1995.415072] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 1995.416265] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 1995.417427] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1995.418614] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1995.419803] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 1995.452085] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1995.453733] EXT4-fs (loop2): group descriptors corrupted! 03:35:14 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:35:14 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x80010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x5, 0x9, 0x4, 0x7f, 0x0, 0x80000000, 0x820, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x7fff, 0xfffffffffffffff7}, 0x0, 0x7, 0x0, 0x6, 0x9, 0x4, 0x81, 0x0, 0x5b, 0x0, 0x385}, 0x0, 0xa, r1, 0x9) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x1a) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0xc0189436, &(0x7f0000000180)={@loopback}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/locks\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x799) dup3(r3, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x72ac75c52e5014df, r3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/kexec_crash_size', 0x0, 0x0) copy_file_range(r4, 0x0, r4, &(0x7f00000000c0)=0x6, 0x6, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x82602, 0x0) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000140)=""/248, 0xf8}, {&(0x7f0000000240)}], 0x3) 03:35:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 30) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:35:14 executing program 7: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x122902, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs\x00') openat(r5, &(0x7f0000000380)='./file1\x00', 0x101002, 0x0) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000180)="647732419e007299a0527d51dc496437e692665510d40d35b770fd8d702d121d997dc90d08763cc1ed88ba0f538cb17d600a", 0x32}], 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 03:35:14 executing program 0: r0 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r1, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) read(r1, &(0x7f0000000300)=""/209, 0xd1) r3 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) r5 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x22400, 0x0) memfd_create(0x0, 0x0) r6 = accept$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x1c) recvmmsg(r6, &(0x7f000000b100)=[{{&(0x7f0000000500)=@un=@abs, 0x80, &(0x7f0000000700)=[{&(0x7f0000000580)=""/67, 0x43}, {&(0x7f0000000280)=""/53, 0x35}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000000600)=""/232, 0xe8}], 0x4}, 0x7}, {{&(0x7f0000000740)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/100, 0x64}, {&(0x7f0000000840)=""/179, 0xb3}, {&(0x7f0000000900)}, {&(0x7f0000000940)=""/88, 0x58}, {&(0x7f00000009c0)=""/194, 0xc2}, {&(0x7f0000000ac0)=""/169, 0xa9}, {&(0x7f0000000b80)=""/116, 0x74}], 0x7, &(0x7f0000004100)=""/4096, 0x1000}, 0x80}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000c80)=""/44, 0x2c}, {&(0x7f0000000cc0)=""/113, 0x71}, {&(0x7f0000000d40)=""/217, 0xd9}, {&(0x7f0000000e40)=""/218, 0xda}, {&(0x7f0000005100)=""/4096, 0x1000}, {&(0x7f0000006100)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/50, 0x32}, {&(0x7f0000000f80)=""/219, 0xdb}], 0x8, &(0x7f0000007100)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000001100)=@can, 0x80, &(0x7f0000001240)=[{&(0x7f0000001180)=""/18, 0x12}, {&(0x7f00000011c0)=""/13, 0xd}, {&(0x7f0000001200)=""/35, 0x23}, {&(0x7f00000012c0)=""/207, 0xcf}], 0x4, &(0x7f00000013c0)=""/70, 0x46}, 0x7}, {{&(0x7f0000001440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/31, 0x1f}, {&(0x7f0000008100)=""/4096, 0x1000}, {&(0x7f0000001500)=""/209, 0xd1}, {&(0x7f0000001600)=""/109, 0x6d}], 0x4, &(0x7f0000009100)=""/4096, 0x1000}, 0x2}, {{&(0x7f00000016c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001740)=""/14, 0xe}, {&(0x7f0000001780)=""/231, 0xe7}, {&(0x7f0000001880)=""/26, 0x1a}, {&(0x7f00000018c0)=""/174, 0xae}, {&(0x7f0000001980)=""/4, 0x4}, {&(0x7f00000019c0)=""/206, 0xce}, {&(0x7f0000001ac0)=""/243, 0xf3}, {&(0x7f0000001bc0)=""/149, 0x95}, {&(0x7f0000001c80)=""/53, 0x35}, {&(0x7f0000001cc0)=""/35, 0x23}], 0xa, &(0x7f0000001ec0)=""/232, 0xe8}, 0xff}, {{&(0x7f0000001d00)=@can, 0x80, &(0x7f0000002040)=[{&(0x7f0000001fc0)=""/102, 0x66}], 0x1, &(0x7f000000a100)=""/4096, 0x1000}, 0x200}], 0x7, 0x40012040, &(0x7f0000002080)) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:35:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x4, 0xffee, 0x6f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0xcd2}, 0x0, 0x8, 0x0, 0x0, 0x200, 0xffffffff, 0x3, 0x0, 0x4, 0x0, 0x8000000000000001}, 0xffffffffffffffff, 0x40000000000, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x0) 03:35:15 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x97, 0x10062, 0x0) 03:35:15 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2010.692073] FAULT_INJECTION: forcing a failure. [ 2010.692073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2010.693437] CPU: 0 PID: 12972 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2010.694176] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2010.695069] Call Trace: [ 2010.695367] dump_stack+0x107/0x167 [ 2010.695770] should_fail.cold+0x5/0xa [ 2010.696200] _copy_from_user+0x2e/0x1b0 [ 2010.696644] __copy_msghdr_from_user+0x91/0x4b0 [ 2010.697144] ? __ia32_sys_shutdown+0x80/0x80 [ 2010.697623] ? __lock_acquire+0x1657/0x5b00 [ 2010.698103] ___sys_recvmsg+0xd5/0x200 [ 2010.698531] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2010.699063] ? __lockdep_reset_lock+0x180/0x180 [ 2010.699572] ? __fget_files+0x2cf/0x520 [ 2010.700014] ? lock_acquire+0x197/0x470 [ 2010.700450] ? find_held_lock+0x2c/0x110 [ 2010.700901] ? __might_fault+0xd3/0x180 [ 2010.701338] ? lock_downgrade+0x6d0/0x6d0 [ 2010.701810] do_recvmmsg+0x24c/0x6d0 [ 2010.702225] ? ___sys_recvmsg+0x200/0x200 [ 2010.702691] ? lock_downgrade+0x6d0/0x6d0 [ 2010.703155] ? ksys_write+0x12d/0x260 [ 2010.703586] ? wait_for_completion_io+0x270/0x270 [ 2010.704113] ? rcu_read_lock_any_held+0x75/0xa0 [ 2010.704613] ? vfs_write+0x354/0xb10 [ 2010.705020] __x64_sys_recvmmsg+0x20f/0x260 [ 2010.705506] ? ksys_write+0x1a9/0x260 [ 2010.705919] ? __do_sys_socketcall+0x600/0x600 [ 2010.706440] do_syscall_64+0x33/0x40 [ 2010.706847] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2010.707414] RIP: 0033:0x7fb290a1fb19 [ 2010.707817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2010.709800] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2010.710648] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2010.711402] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2010.712171] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2010.712937] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2010.713721] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2010.718469] SELinux: duplicate or incompatible mount options [ 2010.749797] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2010.751289] EXT4-fs (loop2): group descriptors corrupted! [ 2010.765674] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:35:15 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x80010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x5, 0x9, 0x4, 0x7f, 0x0, 0x80000000, 0x820, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x7fff, 0xfffffffffffffff7}, 0x0, 0x7, 0x0, 0x6, 0x9, 0x4, 0x81, 0x0, 0x5b, 0x0, 0x385}, 0x0, 0xa, r1, 0x9) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x1a) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0xc0189436, &(0x7f0000000180)={@loopback}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/locks\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x799) dup3(r3, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x72ac75c52e5014df, r3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/kexec_crash_size', 0x0, 0x0) copy_file_range(r4, 0x0, r4, &(0x7f00000000c0)=0x6, 0x6, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x82602, 0x0) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000140)=""/248, 0xf8}, {&(0x7f0000000240)}], 0x3) 03:35:15 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2010.857605] SELinux: duplicate or incompatible mount options 03:35:15 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x98, 0x10062, 0x0) 03:35:15 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x99, 0x10062, 0x0) 03:35:15 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 31) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) [ 2010.960239] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2010.961263] EXT4-fs (loop2): group descriptors corrupted! [ 2011.005775] FAULT_INJECTION: forcing a failure. [ 2011.005775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2011.006994] CPU: 0 PID: 13110 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2011.007629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2011.008390] Call Trace: [ 2011.008638] dump_stack+0x107/0x167 [ 2011.008971] should_fail.cold+0x5/0xa [ 2011.009325] _copy_from_user+0x2e/0x1b0 [ 2011.009698] __copy_msghdr_from_user+0x91/0x4b0 [ 2011.010135] ? __ia32_sys_shutdown+0x80/0x80 [ 2011.010552] ? __lock_acquire+0x1657/0x5b00 [ 2011.010962] ___sys_recvmsg+0xd5/0x200 [ 2011.011322] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2011.011774] ? __lockdep_reset_lock+0x180/0x180 [ 2011.012217] ? __fget_files+0x2cf/0x520 [ 2011.012592] ? lock_acquire+0x197/0x470 [ 2011.012961] ? find_held_lock+0x2c/0x110 [ 2011.013346] ? __might_fault+0xd3/0x180 [ 2011.013715] ? lock_downgrade+0x6d0/0x6d0 [ 2011.014110] do_recvmmsg+0x24c/0x6d0 [ 2011.014459] ? ___sys_recvmsg+0x200/0x200 [ 2011.014845] ? lock_downgrade+0x6d0/0x6d0 [ 2011.015239] ? ksys_write+0x12d/0x260 [ 2011.015602] ? wait_for_completion_io+0x270/0x270 [ 2011.016057] ? rcu_read_lock_any_held+0x75/0xa0 [ 2011.016487] ? vfs_write+0x354/0xb10 [ 2011.016832] __x64_sys_recvmmsg+0x20f/0x260 [ 2011.017229] ? ksys_write+0x1a9/0x260 [ 2011.017581] ? __do_sys_socketcall+0x600/0x600 [ 2011.018015] do_syscall_64+0x33/0x40 [ 2011.018360] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2011.018831] RIP: 0033:0x7fb290a1fb19 [ 2011.019177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2011.020853] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2011.021548] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2011.022201] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2011.022853] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2011.023568] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2011.024232] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:35:15 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:35:15 executing program 7: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x122902, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs\x00') openat(r5, &(0x7f0000000380)='./file1\x00', 0x101002, 0x0) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000180)="647732419e007299a0527d51dc496437e692665510d40d35b770fd8d702d121d997dc90d08763cc1ed88ba0f538cb17d600a", 0x32}], 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) [ 2011.047334] SELinux: duplicate or incompatible mount options 03:35:15 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x80010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x5, 0x9, 0x4, 0x7f, 0x0, 0x80000000, 0x820, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x7fff, 0xfffffffffffffff7}, 0x0, 0x7, 0x0, 0x6, 0x9, 0x4, 0x81, 0x0, 0x5b, 0x0, 0x385}, 0x0, 0xa, r1, 0x9) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x1a) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0xc0189436, &(0x7f0000000180)={@loopback}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/locks\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x799) dup3(r3, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x72ac75c52e5014df, r3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/kexec_crash_size', 0x0, 0x0) copy_file_range(r4, 0x0, r4, &(0x7f00000000c0)=0x6, 0x6, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x82602, 0x0) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000140)=""/248, 0xf8}, {&(0x7f0000000240)}], 0x3) 03:35:15 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x9a, 0x10062, 0x0) 03:35:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() kcmp(0x0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x19, 0x47, 0x54, 0x9, 0x0, 0x470, 0x41240, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf7, 0x4, @perf_config_ext={0x7f, 0x100000000}, 0x8030, 0x5, 0x9, 0x5, 0x9, 0x4, 0xfff9, 0x0, 0x44e0, 0x0, 0x401}, r0, 0x9, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r3, 0x0, r2) dup(r2) r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r4, &(0x7f0000000680)='./file0\x00') renameat(r4, &(0x7f00000000c0)='./file0/file1\x00', r4, 0x0) inotify_init1(0x0) 03:35:15 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:35:15 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x9b, 0x10062, 0x0) 03:35:15 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2011.172179] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2011.173712] EXT4-fs (loop2): group descriptors corrupted! [ 2011.268601] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:35:31 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 32) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:35:31 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:35:31 executing program 7: openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r4, 0x0, r3) sendfile(r2, r3, &(0x7f00000000c0)=0x7fff, 0xff) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) 03:35:31 executing program 1: r0 = fork() kcmp(0x0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x1f, 0xc5c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, r0, 0x4, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r3, &(0x7f0000000680)='./file0\x00') renameat(r3, &(0x7f00000000c0)='./file0/file1\x00', r3, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000001c0)=r6) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000006c0)={{r2}, r6, 0x0, @unused=[0x4, 0x101, 0x5f6], @name="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"}) inotify_init1(0x0) 03:35:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000104010140000000000000000000000005000100014000000600060000000000080003"], 0x2c}}, 0x0) r1 = fork() kcmp(0x0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000000000)='loginuid\x00') r2 = getpid() r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r5 = fcntl$dupfd(r4, 0x0, r3) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xdc, 0x1, 0x40, 0x81, 0x0, 0x3, 0x80c, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x2, 0x8001}, 0x10, 0x7, 0x4, 0x3, 0x86c, 0x200, 0x3, 0x0, 0x4, 0x0, 0x62b00000000}, r2, 0x4, r5, 0xa) 03:35:31 executing program 0: r0 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r1, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) read(r1, &(0x7f0000000300)=""/209, 0xd1) r3 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r4 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, 0x0}, &(0x7f0000000a80)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000500)="d3e0a1c3e14a1ec61647dca9b9f34fb7dfbf2f40e6dac09dac59a6242dd0af8f281b19419c8550bc37b09a22f46ecdc78d3c5ea4025d24c04f8cd8b31d8079152ed489948e9197a6556e1ef3f8bc42f4c76300cbc2982b3c72d66d58c13e597b42c01003555d0315461282ed8bb2d0bdda72a4eed46ba931595bc28b068d2611d2795b0d5eca7801725b95209f9a198a5c495658407b769226abb3a425bb0f864124faf427acb4bda3272317f7cf929a32164a3cff8e8362230a595a9b439f77aca9e2e8a11aa5439d18827b504881ef7cc5bf17c65deea11072b3889d54d3f41a0f815f8abda20e1d722f1cb779bb9bbf", 0xf1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000a09da77518eaee55d806dcc3b24fed47653e1fb4b62bc06ed8bec9f638a39680ab908e1b7aa4055538df526e2d5a7c38b8994f29edeb6ac1654be57b143808f8dc0ceae4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x8084}, 0x4000004) sendmsg$unix(r4, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:35:31 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x9c, 0x10062, 0x0) 03:35:31 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2027.150454] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5 [ 2027.150454] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2027.150454] [ 2027.165251] FAULT_INJECTION: forcing a failure. [ 2027.165251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2027.167581] CPU: 1 PID: 13243 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2027.168665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2027.169783] Call Trace: [ 2027.170151] dump_stack+0x107/0x167 [ 2027.170651] should_fail.cold+0x5/0xa [ 2027.171178] _copy_from_user+0x2e/0x1b0 [ 2027.171728] __copy_msghdr_from_user+0x91/0x4b0 [ 2027.172368] ? __ia32_sys_shutdown+0x80/0x80 [ 2027.172969] ? __lock_acquire+0x1657/0x5b00 [ 2027.173581] ___sys_recvmsg+0xd5/0x200 [ 2027.174118] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2027.174787] ? __lockdep_reset_lock+0x180/0x180 [ 2027.175426] ? __fget_files+0x2cf/0x520 [ 2027.175979] ? lock_acquire+0x197/0x470 [ 2027.176528] ? find_held_lock+0x2c/0x110 [ 2027.177089] ? __might_fault+0xd3/0x180 [ 2027.177635] ? lock_downgrade+0x6d0/0x6d0 [ 2027.178201] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2027.178967] do_recvmmsg+0x24c/0x6d0 [ 2027.179486] ? ___sys_recvmsg+0x200/0x200 [ 2027.180050] ? lock_downgrade+0x6d0/0x6d0 [ 2027.180629] ? ksys_write+0x12d/0x260 [ 2027.181171] ? wait_for_completion_io+0x270/0x270 [ 2027.181830] ? rcu_read_lock_any_held+0x75/0xa0 [ 2027.182463] ? vfs_write+0x354/0xb10 [ 2027.182979] __x64_sys_recvmmsg+0x20f/0x260 [ 2027.183563] ? ksys_write+0x1a9/0x260 [ 2027.184084] ? __do_sys_socketcall+0x600/0x600 [ 2027.184355] EXT4-fs (loop7): mounted filesystem without journal. Opts: noacl,,errors=continue [ 2027.184728] do_syscall_64+0x33/0x40 [ 2027.186139] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2027.186839] RIP: 0033:0x7fb290a1fb19 [ 2027.187351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2027.189818] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2027.190851] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2027.191818] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2027.192791] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2027.193752] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2027.194714] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2027.210221] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2027.211612] EXT4-fs (loop2): group descriptors corrupted! 03:35:31 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x9d, 0x10062, 0x0) [ 2027.278216] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:35:31 executing program 6: ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0x2) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x54}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xf7, &(0x7f0000000000)) io_setup(0x735, &(0x7f0000000040)=0x0) io_destroy(r0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000140)=r2, 0x1) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x4000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ptype\x00') open_tree(r4, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000700)=ANY=[@ANYRES32=r1]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) 03:35:31 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x9e, 0x10062, 0x0) 03:35:47 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 33) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:35:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x40000, 0x11) getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=r1, @ANYBLOB="def85a58395d44a536e68ee4bc5147f65daadd25b0ce8f61e03ec4231bd29baf35bd49b440ba32c216215e372a76369aa6a924e9dcaf0c60420ec9afd82265"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000002c0)=@v1={0x0, @aes256, 0x1, @desc3}) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="00009900", @ANYRES16=r1, @ANYBLOB="00012cbd7000fcdbdf2502000000080006003f00000008000600000400000800040003000000080006000000008008000400000200007c00038005000800010000001400020076657468315f6d61637674617000000014000600fc0200000000000000000000000000000500080009000000140002006e657464657673696d30000000000000060007004e2000000500080080000000080003000400000014000200626f6e643000"/178], 0xb8}, 0x1, 0x0, 0x0, 0x4008800}, 0x8810) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0001, 0x0, @perf_config_ext, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r3, 0x0, r2) bind(r3, &(0x7f0000000100)=@sco={0x1f, @none}, 0x80) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x6, 0x0, &(0x7f0000001640), 0x3, &(0x7f0000000280)=ANY=[]) 03:35:47 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:35:47 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfffffffffffff801}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r1, &(0x7f0000000680)='./file0\x00') renameat(r1, &(0x7f00000000c0)='./file0/file1\x00', r1, 0x0) r2 = fork() kcmp(0x0, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x3a93de1522cbe87f, 0x80, 0xfe, 0x7, 0x1, 0x0, 0x0, 0xf28, 0xc10c0, 0x7, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x4, @perf_bp={&(0x7f0000000340), 0x6}, 0x8201, 0x3ff, 0x9, 0x8, 0xffffffff, 0x1, 0x1, 0x0, 0x44dc, 0x0, 0x9}, r2, 0xe, r0, 0xa) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000002c0)=@v1={0x0, @aes256, 0x3, @desc4}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, @in_args={0x4}}, './file0/file1\x00'}) inotify_init1(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r5, 0x0, r4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'hsr0\x00', &(0x7f0000000200)=@ethtool_dump={0x3e, 0x5, 0x4, 0x4f, "b0416b37c3ace04f336b476605ef17f1ea8d4c91c3a794323020cc9a78de32a6f082583b3033e512ff7eadc1e10a3296971fda18ed696cb15d88e22928dddb4f336d90f9f46836594ac2e4590f6082"}}) renameat(r3, &(0x7f0000000180)='./file0/file1\x00', r3, &(0x7f00000001c0)='./file0/file1/file0\x00') openat(0xffffffffffffffff, &(0x7f0000000300)='./file0/file1/file0\x00', 0x2400, 0xc) [ 2042.790941] FAULT_INJECTION: forcing a failure. [ 2042.790941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2042.792069] CPU: 0 PID: 13398 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2042.792710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2042.793463] Call Trace: [ 2042.793701] dump_stack+0x107/0x167 [ 2042.794036] should_fail.cold+0x5/0xa [ 2042.794378] _copy_from_user+0x2e/0x1b0 [ 2042.794753] __copy_msghdr_from_user+0x91/0x4b0 [ 2042.795178] ? __ia32_sys_shutdown+0x80/0x80 [ 2042.795594] ? __lock_acquire+0x1657/0x5b00 [ 2042.795986] ___sys_recvmsg+0xd5/0x200 [ 2042.796351] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2042.796787] ? __lockdep_reset_lock+0x180/0x180 [ 2042.797233] ? __fget_files+0x2cf/0x520 [ 2042.797608] ? lock_acquire+0x197/0x470 [ 2042.797958] ? find_held_lock+0x2c/0x110 [ 2042.798338] ? __might_fault+0xd3/0x180 [ 2042.798703] ? lock_downgrade+0x6d0/0x6d0 [ 2042.799094] do_recvmmsg+0x24c/0x6d0 [ 2042.799441] ? ___sys_recvmsg+0x200/0x200 [ 2042.799805] ? lock_downgrade+0x6d0/0x6d0 [ 2042.800195] ? ksys_write+0x12d/0x260 [ 2042.800557] ? wait_for_completion_io+0x270/0x270 [ 2042.801013] ? rcu_read_lock_any_held+0x75/0xa0 [ 2042.801442] ? vfs_write+0x354/0xb10 [ 2042.801799] __x64_sys_recvmmsg+0x20f/0x260 [ 2042.802189] ? ksys_write+0x1a9/0x260 [ 2042.802547] ? __do_sys_socketcall+0x600/0x600 [ 2042.802955] do_syscall_64+0x33/0x40 [ 2042.803297] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2042.803746] RIP: 0033:0x7fb290a1fb19 [ 2042.804071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2042.805742] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2042.806437] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2042.807089] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2042.807738] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2042.808397] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2042.809052] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:35:47 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) dup3(r0, r2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r3 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:35:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x9f, 0x10062, 0x0) 03:35:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000001010000ff0f0000000100000000000006000000000000000200000000000000010400000000000000000000000000000000000000000000000000000000000008000000ff03000007000000000000001a0d00000000000004000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000525d1b2d95dca84ec95db7b9a269a69315fceee50fd871f7e0866c44a97854c0710763dc3bcba444f8d2cef290df5e"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000700)={0x50}) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0xe7) writev(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000003c0)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000280)=0x4) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d00210c000000000000000004000200080017000000000034ce68d67e30ef35101502b804a07df3e221ecb650e5531d6315236ac07d62b2afb63fb19c137089999b612cd05a92"], 0x1c}}, 0x40000) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x40, 0x0, 0x40, 0x2, 0x0, 0x0, 0x6cd1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x5, @perf_bp={&(0x7f00000002c0), 0xb}, 0x8000, 0x8, 0x9, 0x0, 0x1000, 0x8, 0x7, 0x0, 0xffff}, 0x0, 0xb, r1, 0x8) openat(r0, &(0x7f0000000380)='./file2\x00', 0xc8680, 0x0) creat(&(0x7f0000000000)='./file2\x00', 0x0) 03:35:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xa0, 0x10062, 0x0) 03:35:47 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2042.898633] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2042.919724] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2042.921451] EXT4-fs (loop2): group descriptors corrupted! 03:35:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xa1, 0x10062, 0x0) 03:35:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r0, &(0x7f00000001c0)=""/15, 0xf, 0x2020, &(0x7f0000000280)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x1}, 0x80) setxattr$incfs_id(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x2, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xf1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x8c}}, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000000101010210000000000000000000000004001980"], 0x18}}, 0x0) 03:35:47 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 34) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:35:47 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2042.998880] FAULT_INJECTION: forcing a failure. [ 2042.998880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2042.999865] CPU: 1 PID: 13530 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2043.000500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2043.001191] Call Trace: [ 2043.001422] dump_stack+0x107/0x167 [ 2043.001725] should_fail.cold+0x5/0xa [ 2043.002058] _copy_from_user+0x2e/0x1b0 [ 2043.002402] __copy_msghdr_from_user+0x91/0x4b0 [ 2043.002753] ? __ia32_sys_shutdown+0x80/0x80 [ 2043.003121] ? __lock_acquire+0x1657/0x5b00 [ 2043.003455] ___sys_recvmsg+0xd5/0x200 [ 2043.003777] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2043.004139] ? __lockdep_reset_lock+0x180/0x180 [ 2043.004540] ? __fget_files+0x2cf/0x520 [ 2043.004840] ? lock_acquire+0x197/0x470 [ 2043.005170] ? find_held_lock+0x2c/0x110 [ 2043.005522] ? __might_fault+0xd3/0x180 [ 2043.005848] ? lock_downgrade+0x6d0/0x6d0 [ 2043.006204] do_recvmmsg+0x24c/0x6d0 [ 2043.006517] ? ___sys_recvmsg+0x200/0x200 [ 2043.006861] ? lock_downgrade+0x6d0/0x6d0 [ 2043.007216] ? ksys_write+0x12d/0x260 [ 2043.007548] ? wait_for_completion_io+0x270/0x270 [ 2043.007951] ? rcu_read_lock_any_held+0x75/0xa0 [ 2043.008339] ? vfs_write+0x354/0xb10 [ 2043.008652] __x64_sys_recvmmsg+0x20f/0x260 [ 2043.008976] ? ksys_write+0x1a9/0x260 [ 2043.009302] ? __do_sys_socketcall+0x600/0x600 [ 2043.009690] do_syscall_64+0x33/0x40 [ 2043.009968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2043.010398] RIP: 0033:0x7fb290a1fb19 [ 2043.010708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2043.012051] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2043.012693] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2043.013290] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2043.013815] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2043.014401] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2043.014993] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2043.040596] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:35:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xa2, 0x10062, 0x0) 03:35:47 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:35:47 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0/file1\x00', 0x3, 0x0, 0x0, 0x80000, &(0x7f0000001700)=ANY=[@ANYRES64=r0, @ANYBLOB="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"]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r1, &(0x7f0000000680)='./file0\x00') chdir(&(0x7f0000000100)='./file0\x00') renameat(r1, &(0x7f00000000c0)='./file0/file1\x00', r1, 0x0) inotify_init1(0x0) 03:35:47 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x1400}, 0x0, {0x0, r4}}, 0x96) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0)={0x81, 0x22, 0x8}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r4}}, 0x8000) preadv2(0xffffffffffffffff, &(0x7f0000000d00)=[{&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000500)=""/248, 0xf8}, {&(0x7f0000000600)=""/50, 0x32}, {&(0x7f0000000640)=""/17, 0x11}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000940)=""/171, 0xab}, {&(0x7f0000000a00)=""/163, 0xa3}, {&(0x7f0000000ac0)=""/121, 0x79}, {&(0x7f00000008c0)=""/86, 0x56}, {&(0x7f0000000c40)=""/162, 0xa2}], 0xb, 0x3635, 0x0, 0x1f) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) [ 2043.083407] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2043.084256] EXT4-fs (loop2): group descriptors corrupted! 03:36:51 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x2, 0x1, 0x101, 0x2, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x404c808) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 03:36:51 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, 0x0, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:36:51 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='!', 0x1) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x145, 0xac800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x800, 0x401}, 0x0, 0x0, 0x81, 0x1, 0x8, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r0, r1, 0x0, 0x20d315) lsetxattr$trusted_overlay_opaque(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0), 0x2, 0x0) 03:36:51 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xa3, 0x10062, 0x0) 03:36:51 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r1, &(0x7f0000000680)='./file0\x00') renameat(r1, &(0x7f00000000c0)='./file0/file1\x00', r1, 0x0) inotify_init1(0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 03:36:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 35) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:36:51 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000", 0xc, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:36:51 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @local}, 0x10) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/26, 0x1a, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) [ 2107.571708] FAULT_INJECTION: forcing a failure. [ 2107.571708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2107.574569] CPU: 0 PID: 13669 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2107.575942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2107.577575] Call Trace: [ 2107.578106] dump_stack+0x107/0x167 [ 2107.578847] should_fail.cold+0x5/0xa [ 2107.579615] _copy_from_user+0x2e/0x1b0 [ 2107.580424] __copy_msghdr_from_user+0x91/0x4b0 [ 2107.581366] ? __ia32_sys_shutdown+0x80/0x80 [ 2107.582245] ? __lock_acquire+0x1657/0x5b00 [ 2107.583128] ___sys_recvmsg+0xd5/0x200 [ 2107.583908] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2107.584873] ? __lockdep_reset_lock+0x180/0x180 [ 2107.585705] ? lock_acquire+0x197/0x470 [ 2107.586505] ? find_held_lock+0x2c/0x110 [ 2107.587232] ? __might_fault+0xd3/0x180 [ 2107.588023] ? lock_downgrade+0x6d0/0x6d0 [ 2107.588783] do_recvmmsg+0x24c/0x6d0 [ 2107.589551] ? ___sys_recvmsg+0x200/0x200 [ 2107.590384] ? lock_downgrade+0x6d0/0x6d0 [ 2107.591224] ? ksys_write+0x12d/0x260 [ 2107.592011] ? wait_for_completion_io+0x270/0x270 [ 2107.592982] ? rcu_read_lock_any_held+0x75/0xa0 [ 2107.593926] ? vfs_write+0x354/0xb10 [ 2107.594693] __x64_sys_recvmmsg+0x20f/0x260 [ 2107.595557] ? ksys_write+0x1a9/0x260 [ 2107.596326] ? __do_sys_socketcall+0x600/0x600 [ 2107.597091] do_syscall_64+0x33/0x40 [ 2107.597837] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2107.598858] RIP: 0033:0x7fb290a1fb19 [ 2107.599590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2107.603231] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2107.604741] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2107.606177] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2107.607587] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2107.608988] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2107.610399] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2107.628435] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 2107.644591] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2107.669096] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:36:52 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xa4, 0x10062, 0x0) 03:36:52 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0x7ba, 0x400688a8ec3) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5000000, 0x10, r2, 0x10000000) read(r0, &(0x7f0000000300)=""/209, 0xd1) r3 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:36:52 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000", 0xc, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:36:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x40) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x50, r1, 0x10000000) syz_io_uring_setup(0x4476, &(0x7f0000000140)={0x0, 0x20004326, 0x8, 0x2, 0x5, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000280)) r4 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x0, 0x80) accept4$unix(r0, &(0x7f00000011c0)=@abs, 0x0, 0x80800) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) syz_io_uring_submit(r3, r2, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0xa, &(0x7f0000000380)={r5, r6+60000000}, 0x1, 0x0, 0x1}, 0x7) openat(r4, &(0x7f0000000300)='./file1\x00', 0x202, 0x12c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x30, 0x12}, 0x18) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000000000000060000000000000004000000ff7f00000800000000000000f70d00000000000009000000000000007f0000000000000000000000000000000000000000000000080000000000000000000000000000000600000000000000060000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000b00a00000000000006000000000000000800000000000000000000000000000000000000000000000808000000000000000000000000000000800000000000000000000000000000ff07000000000000000000000000000000000000000000001000000000000000000000000000000086970553000000000800000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000002000000000000000900000000000000060000000000000000000000000000000000000000000000812000000000000000000000000000008fcd8026000000007f00000000000000f8ffffffffffffff000000000000000000000000000000008219000000000000000000000000000020000000000000000000000000000000010000000000000000000000401900000000000000000000000500"/480]) sendfile(0xffffffffffffffff, r1, 0x0, 0x8) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x1000828, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) mknodat$loop(r8, &(0x7f0000000440)='./file1\x00', 0x10, 0x1) mknodat$loop(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x1, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x92004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 2107.905048] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 03:36:52 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xa5, 0x10062, 0x0) 03:36:52 executing program 1: ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000140)={0x200, 0x9b, 0xb7e}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x0) [ 2112.458222] Bluetooth: hci7: command 0x0409 tx timeout [ 2114.506262] Bluetooth: hci7: command 0x041b tx timeout [ 2116.554310] Bluetooth: hci7: command 0x040f tx timeout [ 2117.528733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.530209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2117.532776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2117.598851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.600842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2117.604181] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2118.602217] Bluetooth: hci7: command 0x0419 tx timeout 03:37:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 36) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:37:17 executing program 7: ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000008c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000d4521a8d690f522400000008000300de68d42abde7b21dd2", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r1, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000001e00)=""/102400, 0x6}, {&(0x7f0000000c00)=""/4096, 0x95}, {&(0x7f00000006c0)=""/134, 0x92}, {&(0x7f0000000780)=""/140, 0x8c}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100800, &(0x7f0000001c00)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="1bfdfbc8a3d0e6aed8cfb9f3a19ad296c8f30ad61980e2de2cff10fc43f274fe5fe7fb541dfa4268dc7fc558e4e44287440b027c648cefb35b8bb28c25c4318334a46becddb40b3370deb34c1db41a9536f9bf5e32d73177283c0f790b7f0c8e9c53b4a1d3d48c83fda3c3f505d5d7fd3f356bfec38508d374ae8db29c2f2172538c2d972cc628a7ffbef6af4920d8d2d919210c65ad95077ac8f67ad74503efcd1d9396b6b9a7d61575aa2e93a8970a30cf22a772a817a317f7fc4e47dc9c98f9e10100000000000000f6d2b2b8490ad915c2f3caf14a53eada7e00000000", @ANYRESDEC]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000600)='./file1\x00', 0x0, 0xce7fb4cdf531f200, 0x0) umount2(&(0x7f0000000200)='./file0/file0\x00', 0x4) 03:37:17 executing program 6: r0 = fork() kcmp(0x0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab54, 0x0, @perf_config_ext, 0x0, 0x3, 0x8a4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0x0) getpgrp(0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "4fa2f8201eed6e500c32342a227989e38a20000000d4c23a441d66f46277bc777d160562da75417aa68c9029c5fd00", "176764fe8c2ff71a1633d53dafbecd823af97cf5831be9a6fed5449e9f77dd92"}) setresuid(0xffffffffffffffff, 0x0, 0x0) fstat(r1, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c05, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:37:17 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000003100)=""/4091, 0xffb, 0x8) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0xfc, 0x3, 0x1f, 0xff, 0x0, 0x1, 0xca90c, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xff, 0x4, @perf_config_ext={0x1, 0x7}, 0xf000, 0x7, 0x0, 0x6, 0xffffffffffffffe1, 0xfffffffc, 0x7, 0x0, 0x2, 0x0, 0xfffffffffffff801}, 0x0, 0x0, 0xffffffffffffffff, 0x18) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fcntl$getflags(r4, 0xb) 03:37:17 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000", 0xc, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:37:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xa6, 0x10062, 0x0) 03:37:17 executing program 1: fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=@md5={0x1, "b121e102bbc207d9abc020a2a436be49"}, 0x11, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x0) 03:37:17 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, 0x0, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2133.227104] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2133.284407] FAULT_INJECTION: forcing a failure. [ 2133.284407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2133.286570] CPU: 0 PID: 14378 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2133.287715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2133.289081] Call Trace: [ 2133.289538] dump_stack+0x107/0x167 [ 2133.290149] should_fail.cold+0x5/0xa [ 2133.290791] _copy_from_user+0x2e/0x1b0 [ 2133.291461] __copy_msghdr_from_user+0x91/0x4b0 [ 2133.292234] ? __ia32_sys_shutdown+0x80/0x80 [ 2133.292971] ? __lock_acquire+0x1657/0x5b00 [ 2133.293717] ___sys_recvmsg+0xd5/0x200 [ 2133.294368] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2133.295184] ? __lockdep_reset_lock+0x180/0x180 [ 2133.295969] ? lock_acquire+0x197/0x470 [ 2133.296630] ? find_held_lock+0x2c/0x110 [ 2133.297313] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2133.298184] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2133.299077] ? trace_hardirqs_on+0x5b/0x180 [ 2133.299793] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2133.300705] do_recvmmsg+0x24c/0x6d0 [ 2133.301326] ? ___sys_recvmsg+0x200/0x200 [ 2133.302019] ? lock_downgrade+0x6d0/0x6d0 [ 2133.302714] ? ksys_write+0x12d/0x260 [ 2133.303358] ? wait_for_completion_io+0x270/0x270 [ 2133.304153] ? rcu_read_lock_any_held+0x75/0xa0 [ 2133.304914] ? vfs_write+0x354/0xb10 [ 2133.305541] __x64_sys_recvmmsg+0x20f/0x260 [ 2133.306243] ? ksys_write+0x1a9/0x260 [ 2133.306873] ? __do_sys_socketcall+0x600/0x600 [ 2133.307639] do_syscall_64+0x33/0x40 [ 2133.308251] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2133.309087] RIP: 0033:0x7fb290a1fb19 [ 2133.309703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2133.312693] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2133.313946] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2133.315111] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2133.316279] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2133.317450] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2133.318607] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:37:17 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r1, &(0x7f0000000680)='./file0\x00') renameat(r1, &(0x7f0000003080)='./file0\x00', r1, 0x0) signalfd4(r0, &(0x7f0000002f00)={[0x8]}, 0x8, 0x80000) inotify_init1(0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002e80), 0x400003, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000002ec0), 0x3, 0x481800) dup2(r2, r3) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x1490c0, 0x12345}, 0x202) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r6, 0x0, r5) syz_io_uring_submit(0x0, r4, &(0x7f0000002d40)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000003000)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010102}}}, 0x200) r7 = fork() kcmp(0x0, r7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/171, 0xab}, {&(0x7f0000000300)=""/80, 0x50}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000480)=""/83, 0x53}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/85, 0x55}], 0x8, &(0x7f0000001740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001780), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001800)=""/78, 0x4e}], 0x1, &(0x7f00000018c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000001a80)=""/112, 0x70}, {&(0x7f0000001b00)=""/127, 0x7f}, {&(0x7f0000001b80)=""/213, 0xd5}, {&(0x7f0000001c80)=""/56, 0x38}, {&(0x7f0000001cc0)=""/4096, 0x1000}], 0x5, &(0x7f0000002f40)=ANY=[@ANYBLOB="1c00000000000000010002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000e024d0768e6fb7370166a3415cf72045dd4b87057523bb245619aaf2ee1402bcf27adcac4a174d24568b1b8d53a4ef164ba74e0e083a0961bcef1db1944c8f50a68d9698acac558c5a1626d60cf0ef202b9ed8c2196846efd21c7a289b2a3b17a2f935", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x40}}], 0x3, 0x100, &(0x7f0000002e40)={0x77359400}) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x20, 0x40, 0xf8, 0x9, 0x0, 0x4, 0x30908, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000100), 0x32920d3c8b8f870}, 0x408, 0x6, 0x1, 0x5, 0xfff, 0x3f, 0x6, 0x0, 0x9}, r7, 0xc, r8, 0x8) 03:37:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 37) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) [ 2133.408109] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 03:37:17 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, 0x0, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:37:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xa7, 0x10062, 0x0) 03:37:17 executing program 0: r0 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r1, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) read(r1, &(0x7f0000000300)=""/209, 0xd1) r3 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:37:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xa6, 0x10062, 0x0) [ 2133.570108] FAULT_INJECTION: forcing a failure. [ 2133.570108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2133.571295] CPU: 1 PID: 14595 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2133.571893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2133.572610] Call Trace: [ 2133.572849] dump_stack+0x107/0x167 [ 2133.573171] should_fail.cold+0x5/0xa [ 2133.573523] _copy_from_user+0x2e/0x1b0 [ 2133.573875] __copy_msghdr_from_user+0x91/0x4b0 [ 2133.574278] ? __ia32_sys_shutdown+0x80/0x80 [ 2133.574662] ? __lock_acquire+0x1657/0x5b00 [ 2133.575050] ___sys_recvmsg+0xd5/0x200 [ 2133.575390] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2133.575817] ? __lockdep_reset_lock+0x180/0x180 [ 2133.576230] ? lock_acquire+0x197/0x470 [ 2133.576574] ? find_held_lock+0x2c/0x110 [ 2133.576934] ? __might_fault+0xd3/0x180 [ 2133.577282] ? lock_downgrade+0x6d0/0x6d0 [ 2133.577647] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2133.578135] do_recvmmsg+0x24c/0x6d0 [ 2133.578464] ? ___sys_recvmsg+0x200/0x200 [ 2133.578826] ? lock_downgrade+0x6d0/0x6d0 [ 2133.579193] ? ksys_write+0x12d/0x260 [ 2133.579533] ? wait_for_completion_io+0x270/0x270 [ 2133.579953] ? rcu_read_lock_any_held+0x75/0xa0 [ 2133.580351] ? vfs_write+0x354/0xb10 [ 2133.580676] __x64_sys_recvmmsg+0x20f/0x260 [ 2133.581051] ? ksys_write+0x1a9/0x260 [ 2133.581392] ? __do_sys_socketcall+0x600/0x600 [ 2133.581794] do_syscall_64+0x33/0x40 [ 2133.582119] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2133.582559] RIP: 0033:0x7fb290a1fb19 [ 2133.582885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2133.584454] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2133.585115] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2133.585739] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2133.586353] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2133.586967] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2133.587574] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:37:17 executing program 7: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, 0x0, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:37:17 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d400", 0xe, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2133.606904] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:37:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x402c, 0xffffffff7fffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004940)=ANY=[@ANYBLOB="1420000052a2ca2282d3e22700210c000000000200000002000000"], 0x14}}, 0x0) perf_event_open(&(0x7f00000048c0)={0x0, 0x80, 0xe0, 0x40, 0x0, 0x8, 0x0, 0x800, 0x1, 0xd, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000004880), 0x8}, 0x10000, 0x0, 0xffff1f79, 0x7, 0xf85, 0x8, 0x3da6, 0x0, 0x3, 0x0, 0x87}, 0x0, 0xd, r2, 0x8) r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r3, &(0x7f0000000680)='./file0\x00') renameat(r3, &(0x7f00000000c0)='./file0/file1\x00', r3, 0x0) r4 = inotify_init1(0x0) clock_gettime(0x0, &(0x7f0000004800)={0x0, 0x0}) recvmmsg(r4, &(0x7f00000046c0)=[{{&(0x7f0000000100)=@x25={0x9, @remote}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/130, 0x82}, {&(0x7f00000006c0)=""/4083, 0xff3}, {&(0x7f0000000240)=""/203, 0xcb}], 0x3, &(0x7f0000000380)=""/102, 0x66}, 0x1000}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000400)=""/56, 0x38}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/179, 0xb3}, {&(0x7f0000004980)=""/235, 0xeb}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/35, 0x23}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/232, 0xe8}, {&(0x7f00000037c0)=""/224, 0xe0}], 0x9, &(0x7f0000003980)=""/170, 0xaa}, 0x5}, {{&(0x7f0000003a40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003ac0)=""/13, 0xd}], 0x1, &(0x7f0000003b40)=""/185, 0xb9}, 0x7}, {{&(0x7f0000003c00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003c80)=""/234, 0xea}], 0x1, &(0x7f0000003dc0)=""/162, 0xa2}, 0xa2c}, {{&(0x7f0000003e80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000004600)=[{&(0x7f0000003f00)=""/49, 0x31}, {&(0x7f0000003f40)=""/66, 0x42}, {&(0x7f0000003fc0)=""/230, 0xe6}, {&(0x7f00000040c0)=""/247, 0xf7}, {&(0x7f00000041c0)=""/201, 0xc9}, {&(0x7f00000042c0)=""/211, 0xd3}, {&(0x7f00000043c0)=""/126, 0x7e}, {&(0x7f0000004440)=""/83, 0x53}, {&(0x7f00000044c0)=""/186, 0xba}, {&(0x7f0000004580)=""/105, 0x69}], 0xa}, 0xfffffff8}], 0x5, 0x0, &(0x7f0000004840)={r5, r6+10000000}) [ 2133.701482] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 03:37:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xa8, 0x10062, 0x0) 03:37:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x88) lseek(r1, 0x800, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000000)=""/46) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000000000000", @ANYRES32=r3, @ANYBLOB="01010000000000002e2f66696c653100"]) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000080)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x9101) sendfile(r1, r3, 0x0, 0x100000001) 03:37:31 executing program 7: fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=@md5={0x1, "b121e102bbc207d9abc020a2a436be49"}, 0x11, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x0) 03:37:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x0) 03:37:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 38) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:37:32 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) r4 = syz_open_dev$rtc(&(0x7f00000000c0), 0x5, 0x8080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000500)) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:37:32 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d400", 0xe, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:37:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xa9, 0x10062, 0x0) 03:37:32 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2147.723559] FAULT_INJECTION: forcing a failure. [ 2147.723559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2147.725322] CPU: 1 PID: 14754 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2147.726346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2147.727531] Call Trace: [ 2147.727920] dump_stack+0x107/0x167 [ 2147.728455] should_fail.cold+0x5/0xa [ 2147.729022] _copy_from_user+0x2e/0x1b0 [ 2147.729635] __copy_msghdr_from_user+0x91/0x4b0 [ 2147.730314] ? __ia32_sys_shutdown+0x80/0x80 [ 2147.730966] ? __lock_acquire+0x1657/0x5b00 [ 2147.731620] ___sys_recvmsg+0xd5/0x200 [ 2147.732200] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2147.732927] ? __lockdep_reset_lock+0x180/0x180 [ 2147.733609] ? __fget_files+0x2cf/0x520 [ 2147.734204] ? lock_acquire+0x197/0x470 [ 2147.734777] ? find_held_lock+0x2c/0x110 [ 2147.735373] ? __might_fault+0xd3/0x180 [ 2147.735952] ? lock_downgrade+0x6d0/0x6d0 [ 2147.736576] do_recvmmsg+0x24c/0x6d0 [ 2147.737131] ? ___sys_recvmsg+0x200/0x200 [ 2147.737744] ? lock_downgrade+0x6d0/0x6d0 [ 2147.738360] ? ksys_write+0x12d/0x260 [ 2147.738931] ? wait_for_completion_io+0x270/0x270 [ 2147.739636] ? rcu_read_lock_any_held+0x75/0xa0 [ 2147.740321] ? vfs_write+0x354/0xb10 [ 2147.740882] __x64_sys_recvmmsg+0x20f/0x260 [ 2147.741532] ? ksys_write+0x1a9/0x260 [ 2147.742105] ? __do_sys_socketcall+0x600/0x600 [ 2147.742794] do_syscall_64+0x33/0x40 [ 2147.743341] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2147.744089] RIP: 0033:0x7fb290a1fb19 [ 2147.744644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2147.747315] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2147.748422] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2147.749450] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2147.750488] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2147.751515] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2147.752544] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:37:32 executing program 7: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x4) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @short}, 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 03:37:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xaa, 0x10062, 0x0) [ 2147.872194] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2147.883837] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 03:37:32 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x40010, 0xffffffffffffffff, 0x701a6000) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x210cc0, 0x0) io_uring_enter(r4, 0x7305, 0xbf92, 0x1, &(0x7f0000000180)={[0x6]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:37:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 39) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:37:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xab, 0x10062, 0x0) 03:37:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r3 = fcntl$dupfd(r2, 0x0, r1) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) openat2(r3, &(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000140)={0x1850c0, 0x2, 0x2}, 0x18) inotify_init1(0x0) 03:37:32 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d400", 0xe, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2148.025330] FAULT_INJECTION: forcing a failure. [ 2148.025330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2148.026627] CPU: 0 PID: 14885 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2148.027273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2148.028030] Call Trace: [ 2148.028286] dump_stack+0x107/0x167 [ 2148.028740] should_fail.cold+0x5/0xa [ 2148.029109] _copy_from_user+0x2e/0x1b0 [ 2148.029486] __copy_msghdr_from_user+0x91/0x4b0 [ 2148.029922] ? __ia32_sys_shutdown+0x80/0x80 [ 2148.030333] ? __lock_acquire+0x1657/0x5b00 [ 2148.030745] ___sys_recvmsg+0xd5/0x200 [ 2148.031103] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2148.031558] ? __lockdep_reset_lock+0x180/0x180 [ 2148.031986] ? _raw_spin_unlock_irq+0x27/0x30 [ 2148.032412] ? lock_acquire+0x197/0x470 [ 2148.032778] ? find_held_lock+0x2c/0x110 [ 2148.033161] ? __might_fault+0xd3/0x180 [ 2148.033535] ? lock_downgrade+0x6d0/0x6d0 [ 2148.033921] ? io_schedule_timeout+0x140/0x140 [ 2148.034351] do_recvmmsg+0x24c/0x6d0 [ 2148.034702] ? ___sys_recvmsg+0x200/0x200 [ 2148.035078] ? lock_downgrade+0x6d0/0x6d0 [ 2148.035473] ? ksys_write+0x12d/0x260 [ 2148.035832] ? wait_for_completion_io+0x270/0x270 [ 2148.036278] ? rcu_read_lock_any_held+0x75/0xa0 [ 2148.036708] ? vfs_write+0x354/0xb10 [ 2148.037052] __x64_sys_recvmmsg+0x20f/0x260 [ 2148.037463] ? ksys_write+0x1a9/0x260 [ 2148.037829] ? __do_sys_socketcall+0x600/0x600 [ 2148.038253] do_syscall_64+0x33/0x40 [ 2148.038605] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2148.039175] RIP: 0033:0x7fb290a1fb19 [ 2148.039584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2148.041237] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2148.041939] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2148.042583] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2148.043226] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2148.043874] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2148.044519] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:37:32 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2148.142223] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2148.143310] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 03:37:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 40) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:37:46 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000340)='-:\x00', 0x0, 0xffffffffffffff9c) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x1, 0xfc, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x18000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) fsetxattr$security_capability(r1, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x2, 0xffffffff}, {0x10001, 0x5}]}, 0x14, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000140)={r2, 0x1, 0x6, @multicast}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r0, 0x0) pipe(&(0x7f0000000040)) 03:37:46 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xac, 0x10062, 0x0) 03:37:46 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x13040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e0, r1, 0x0, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x708}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf7b}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x20}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7e}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x100}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) 03:37:46 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2, 0x0, 0x0, 0x0, 0x2000006}, 0xffffffffffffffff, 0xffe0000000000003, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) socket$packet(0x11, 0x2, 0x300) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) r3 = memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="ff005700000000002e2f668f09653000"]) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000180), 0x4) openat(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x88440, 0x120) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00'}) 03:37:46 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x6f, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2229}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x0) unlinkat(r0, &(0x7f0000000180)='./file0/file1\x00', 0x0) 03:37:46 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:37:46 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2162.395401] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2162.396550] EXT4-fs (loop2): group descriptors corrupted! [ 2162.434622] FAULT_INJECTION: forcing a failure. [ 2162.434622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2162.437032] CPU: 0 PID: 15014 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2162.438216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2162.439613] Call Trace: [ 2162.440066] dump_stack+0x107/0x167 [ 2162.440688] should_fail.cold+0x5/0xa [ 2162.441345] _copy_from_user+0x2e/0x1b0 [ 2162.442036] __copy_msghdr_from_user+0x91/0x4b0 [ 2162.442825] ? __ia32_sys_shutdown+0x80/0x80 [ 2162.443576] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2162.444463] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2162.445371] ? trace_hardirqs_on+0x5b/0x180 [ 2162.446110] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2162.447025] ___sys_recvmsg+0xd5/0x200 [ 2162.447688] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2162.448513] ? _raw_spin_unlock_irq+0x27/0x30 [ 2162.449276] ? finish_task_switch+0x126/0x5d0 [ 2162.450033] ? finish_task_switch+0xef/0x5d0 [ 2162.450780] ? __switch_to+0x572/0xf70 [ 2162.451429] ? __switch_to_asm+0x3a/0x60 [ 2162.452112] ? __switch_to_asm+0x34/0x60 [ 2162.452804] ? __schedule+0x82c/0x1ea0 [ 2162.453472] ? io_schedule_timeout+0x140/0x140 [ 2162.454269] do_recvmmsg+0x24c/0x6d0 [ 2162.454902] ? ___sys_recvmsg+0x200/0x200 [ 2162.455598] ? lock_downgrade+0x6d0/0x6d0 [ 2162.456303] ? ksys_write+0x12d/0x260 [ 2162.456964] ? wait_for_completion_io+0x270/0x270 [ 2162.457790] ? rcu_read_lock_any_held+0x75/0xa0 [ 2162.458568] ? vfs_write+0x354/0xb10 [ 2162.459193] __x64_sys_recvmmsg+0x20f/0x260 [ 2162.459917] ? ksys_write+0x1a9/0x260 [ 2162.460563] ? __do_sys_socketcall+0x600/0x600 [ 2162.461341] do_syscall_64+0x33/0x40 [ 2162.461972] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2162.462831] RIP: 0033:0x7fb290a1fb19 [ 2162.463450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2162.466500] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2162.467765] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2162.468952] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2162.470148] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2162.471331] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2162.472519] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:37:46 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xad, 0x10062, 0x0) 03:37:46 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r1, &(0x7f0000000680)='./file0\x00') renameat(r1, &(0x7f00000000c0)='./file0/file1\x00', r1, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r3, 0x0) setresuid(r3, 0x0, r3) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000140), 0x14400a, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose}, {@cache_loose}], [{@uid_gt={'uid>', r3}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', r4}}]}}) inotify_init1(0x0) [ 2162.542854] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2162.544264] CPU: 0 PID: 15139 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2162.545377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2162.546718] Call Trace: [ 2162.547150] dump_stack+0x107/0x167 [ 2162.547751] sysfs_warn_dup.cold+0x1c/0x29 [ 2162.548442] sysfs_do_create_link_sd+0x122/0x140 [ 2162.549212] sysfs_create_link+0x5f/0xc0 [ 2162.549881] device_add+0x703/0x1c50 [ 2162.550496] ? devlink_add_symlinks+0x970/0x970 [ 2162.551247] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2162.552101] wiphy_register+0x1da6/0x2850 [ 2162.552786] ? wiphy_unregister+0xb90/0xb90 [ 2162.553505] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2162.554423] ieee80211_register_hw+0x23c5/0x38b0 [ 2162.555201] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2162.555972] ? net_generic+0xdb/0x2b0 [ 2162.556600] ? lockdep_init_map_type+0x2c7/0x780 [ 2162.557366] ? memset+0x20/0x50 [ 2162.557910] ? __hrtimer_init+0x12c/0x270 [ 2162.558582] mac80211_hwsim_new_radio+0x1ce0/0x4250 [ 2162.559526] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2162.560383] ? hwsim_new_radio_nl+0x967/0x1080 [ 2162.561236] ? memcpy+0x39/0x60 [ 2162.561868] hwsim_new_radio_nl+0x991/0x1080 [ 2162.562696] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 2162.563677] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2162.564895] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2162.566115] genl_family_rcv_msg_doit+0x22d/0x330 [ 2162.567023] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2162.568242] ? cap_capable+0x1cd/0x230 [ 2162.568986] ? ns_capable+0xe2/0x110 [ 2162.569700] genl_rcv_msg+0x33c/0x5a0 [ 2162.570422] ? genl_get_cmd+0x480/0x480 [ 2162.571163] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 2162.572135] ? lock_release+0x680/0x680 [ 2162.572874] ? __lockdep_reset_lock+0x180/0x180 [ 2162.573760] netlink_rcv_skb+0x14b/0x430 [ 2162.574520] ? genl_get_cmd+0x480/0x480 [ 2162.575253] ? netlink_ack+0xab0/0xab0 [ 2162.575980] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2162.576826] ? is_vmalloc_addr+0x7b/0xb0 [ 2162.577575] genl_rcv+0x24/0x40 [ 2162.578191] netlink_unicast+0x549/0x7f0 [ 2162.578950] ? netlink_attachskb+0x870/0x870 [ 2162.579773] netlink_sendmsg+0x90f/0xdf0 [ 2162.580532] ? netlink_unicast+0x7f0/0x7f0 [ 2162.581329] ? netlink_unicast+0x7f0/0x7f0 [ 2162.582123] __sock_sendmsg+0x154/0x190 [ 2162.582863] ____sys_sendmsg+0x70d/0x870 [ 2162.583613] ? sock_write_iter+0x3d0/0x3d0 [ 2162.584389] ? do_recvmmsg+0x6d0/0x6d0 [ 2162.585113] ? SOFTIRQ_verbose+0x10/0x10 [ 2162.585880] ? __lockdep_reset_lock+0x180/0x180 [ 2162.586738] ___sys_sendmsg+0xf3/0x170 [ 2162.587454] ? sendmsg_copy_msghdr+0x160/0x160 [ 2162.588296] ? __fget_files+0x2cf/0x520 [ 2162.589037] ? lock_downgrade+0x6d0/0x6d0 [ 2162.589808] ? SOFTIRQ_verbose+0x10/0x10 [ 2162.590569] ? __fget_files+0x2f8/0x520 [ 2162.591305] ? __fget_light+0xea/0x290 [ 2162.592027] __sys_sendmsg+0xe5/0x1b0 [ 2162.592717] ? __sys_sendmsg_sock+0x40/0x40 [ 2162.593503] ? kfree+0x1ab/0x340 [ 2162.594128] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2162.595110] do_syscall_64+0x33/0x40 [ 2162.595786] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2162.596709] RIP: 0033:0x7ff23f289b19 [ 2162.597385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2162.600685] RSP: 002b:00007ff23c7bd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2162.602062] RAX: ffffffffffffffda RBX: 00007ff23f39d0e0 RCX: 00007ff23f289b19 [ 2162.603351] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2162.604638] RBP: 00007ff23f2e3f6d R08: 0000000000000000 R09: 0000000000000000 [ 2162.605925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2162.607197] R13: 00007ffead2a90ff R14: 00007ff23c7bd300 R15: 0000000000022000 03:37:46 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r1, 0x0) setresuid(r1, 0x0, r1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@private}}, &(0x7f00000002c0)=0xe8) mount$9p_unix(&(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000, &(0x7f0000000300)={'trans=unix,', {[{@version_L}, {@afid={'afid', 0x3d, 0x2}}], [{@obj_user={'obj_user', 0x3d, '[)#\\-'}}, {@euid_lt={'euid<', r1}}, {@appraise}, {@euid_eq={'euid', 0x3d, r2}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@measure}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x0) 03:37:47 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:37:47 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) pread64(0xffffffffffffffff, &(0x7f0000003100)=""/4069, 0xfffffffffffffe4c, 0x6) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r3 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) [ 2162.698762] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2162.767812] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2162.768672] EXT4-fs (loop2): group descriptors corrupted! 03:38:02 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x125, 0x0, 0x0, 0x8010, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='qnx4\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@mode}]}) 03:38:02 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:38:02 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r2, 0x0, r1) dup2(r0, r2) r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r3, &(0x7f0000000680)='./file0\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r6 = fcntl$dupfd(r5, 0x0, r4) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8da}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xddb}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc60}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xca4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x936}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) renameat(r3, &(0x7f00000000c0)='./file0/file1\x00', r3, 0x0) inotify_init1(0x0) 03:38:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xae, 0x10062, 0x0) 03:38:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 41) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:38:02 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:38:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x22, 0x9, 0x7f, 0x0, 0x4, 0x8244c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x6, 0x6}, 0x48031, 0x7, 0x16d, 0x9, 0x8, 0x20, 0x100, 0x0, 0x5, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:38:02 executing program 0: syz_io_uring_complete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) read(r1, &(0x7f0000000300)=""/209, 0xd1) r3 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) [ 2178.404541] FAULT_INJECTION: forcing a failure. [ 2178.404541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2178.406658] CPU: 0 PID: 15368 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2178.407843] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2178.409256] Call Trace: [ 2178.409721] dump_stack+0x107/0x167 [ 2178.410364] should_fail.cold+0x5/0xa [ 2178.411043] _copy_from_user+0x2e/0x1b0 [ 2178.411757] __copy_msghdr_from_user+0x91/0x4b0 [ 2178.412563] ? __ia32_sys_shutdown+0x80/0x80 [ 2178.413318] ? __lock_acquire+0x1657/0x5b00 [ 2178.414086] ___sys_recvmsg+0xd5/0x200 [ 2178.414756] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2178.415604] ? __lockdep_reset_lock+0x180/0x180 [ 2178.416397] ? _raw_spin_unlock_irq+0x27/0x30 [ 2178.417173] ? lock_acquire+0x197/0x470 [ 2178.417850] ? find_held_lock+0x2c/0x110 [ 2178.418565] ? __might_fault+0xd3/0x180 [ 2178.419252] ? lock_downgrade+0x6d0/0x6d0 [ 2178.419976] ? io_schedule_timeout+0x140/0x140 [ 2178.420783] do_recvmmsg+0x24c/0x6d0 [ 2178.421439] ? ___sys_recvmsg+0x200/0x200 [ 2178.422163] ? lock_downgrade+0x6d0/0x6d0 [ 2178.422893] ? ksys_write+0x12d/0x260 [ 2178.423571] ? wait_for_completion_io+0x270/0x270 [ 2178.424406] ? rcu_read_lock_any_held+0x75/0xa0 [ 2178.425203] ? vfs_write+0x354/0xb10 [ 2178.425855] __x64_sys_recvmmsg+0x20f/0x260 [ 2178.426608] ? ksys_write+0x1a9/0x260 [ 2178.427269] ? __do_sys_socketcall+0x600/0x600 [ 2178.428069] do_syscall_64+0x33/0x40 [ 2178.428685] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2178.429580] RIP: 0033:0x7fb290a1fb19 [ 2178.430236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2178.433339] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2178.434647] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2178.435881] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2178.437123] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2178.438379] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2178.439627] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2178.445590] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2178.446822] EXT4-fs (loop2): group descriptors corrupted! [ 2178.456491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15380 comm=syz-executor.1 [ 2178.501362] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:38:02 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:38:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xaf, 0x10062, 0x0) 03:38:02 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x191101, 0x8) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) lstat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000500)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000002a00290029bd7000ffdbdf250e00000025e98fdda6fc16ece0ef44b88ca110b28b1bd881d92ac7"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:38:02 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') close_range(0xffffffffffffffff, r0, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs(0x0, &(0x7f0000000180)='attr/keycreate\x00') timer_create(0x4, &(0x7f0000000000)={0x0, 0xb, 0x0, @tid=r4}, &(0x7f00000002c0)=0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x32, 0x4}, &(0x7f0000000140)) r6 = signalfd4(r2, &(0x7f0000000240)={[0x2]}, 0x8, 0x180400) timer_settime(r5, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000119c010d00006f008c00000000000000"], 0x14}}, 0x0) read(r7, &(0x7f0000000080)=""/65, 0x41) timer_gettime(r5, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="012738edf5ac000400004000000020000000010000", @ANYRES16, @ANYRES32, @ANYBLOB="9863732762b0be9b18c2a4334fd8cf5427bb67f48ae82a2378702cfa08d2dbcc5b7653fea26e01be054d1b6bb749ecdba5e14bbb7664bf9ad76790693006f3b839a3c51ae4ff53ad", @ANYRES64=r1]) clone3(&(0x7f00000001c0)={0x1511d2100, 0x0, 0x0, 0x0, {0x38}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 03:38:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 42) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:38:02 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000000)={0x3, 0x200, 0xc00000, 0x0, 0x9, 0xbc}) syz_open_dev$evdev(&(0x7f0000000680), 0x2, 0x212000) 03:38:02 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2178.688237] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:38:03 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xb0, 0x10062, 0x0) [ 2178.744575] FAULT_INJECTION: forcing a failure. [ 2178.744575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2178.746855] CPU: 0 PID: 15508 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2178.747971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2178.749299] Call Trace: [ 2178.749730] dump_stack+0x107/0x167 [ 2178.750339] should_fail.cold+0x5/0xa [ 2178.750979] _copy_from_user+0x2e/0x1b0 [ 2178.751646] __copy_msghdr_from_user+0x91/0x4b0 [ 2178.752399] ? __ia32_sys_shutdown+0x80/0x80 [ 2178.753107] ? __lock_acquire+0x1657/0x5b00 [ 2178.753820] ___sys_recvmsg+0xd5/0x200 [ 2178.754456] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2178.755249] ? __lockdep_reset_lock+0x180/0x180 [ 2178.755996] ? _raw_spin_unlock_irq+0x27/0x30 [ 2178.756726] ? lock_acquire+0x197/0x470 [ 2178.757358] ? find_held_lock+0x2c/0x110 [ 2178.758020] ? __might_fault+0xd3/0x180 [ 2178.758662] ? lock_downgrade+0x6d0/0x6d0 [ 2178.759355] do_recvmmsg+0x24c/0x6d0 [ 2178.759962] ? ___sys_recvmsg+0x200/0x200 [ 2178.760629] ? lock_downgrade+0x6d0/0x6d0 [ 2178.761305] ? ksys_write+0x12d/0x260 [ 2178.761940] ? wait_for_completion_io+0x270/0x270 [ 2178.762726] ? rcu_read_lock_any_held+0x75/0xa0 [ 2178.763469] ? vfs_write+0x354/0xb10 [ 2178.764083] __x64_sys_recvmmsg+0x20f/0x260 [ 2178.764784] ? ksys_write+0x1a9/0x260 [ 2178.765396] ? __do_sys_socketcall+0x600/0x600 [ 2178.766142] do_syscall_64+0x33/0x40 [ 2178.766738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2178.767564] RIP: 0033:0x7fb290a1fb19 [ 2178.768159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2178.771097] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2178.772296] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2178.773420] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2178.774566] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2178.775707] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2178.776868] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:38:03 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11010}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) [ 2178.802526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39953 sclass=netlink_route_socket pid=15511 comm=syz-executor.6 03:38:03 executing program 7: r0 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99\x04\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xf5\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r3 = fcntl$dupfd(r2, 0x0, r1) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005200210c000000006f6ed188f0803cb4fea66b39009d000002000000"], 0x14}}, 0x0) openat(r3, &(0x7f0000000100)='./file0\x00', 0x40000, 0x50) memfd_create(&(0x7f0000000000)='\x00', 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syncfs(r4) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000100)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x8800, &(0x7f0000000100)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x0) 03:38:03 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2178.848424] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2179.050593] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2179.330044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39953 sclass=netlink_route_socket pid=15632 comm=syz-executor.6 03:38:18 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000980)='./file1\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="640000004f000000d199cf99708ab3b1852b8ec576d1f1e9d2fbfc6eb4e3844d2a5e66af0bc7e7726078578eacefcc28d9dce2a883acedd07091448ed8e5668c7bf46632e043d5fcdf36455826ae966522a2b8b2db14dc2eab04ec4035d98119060ee6622a38bbed2f960000733f3e1062b6b931e8b8a16a285069ae36ca13d1ef84b86c93caa6792a0e25a695abe4e8d725ab32adab65e3ad25b504f8e115427ca03b7d95c488b29708e1df90ab015812a9f98afedd9d7a3602e36dcd9275a8308d63d584321a1b5bc68f0cb3ff7ed554eb2d645860"], 0x200900) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) r2 = eventfd(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x56, &(0x7f0000000080)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f00000000c0)="9a17e64cdc67bd627708c4", 0xb}, {&(0x7f0000000100)="11fa030674fe5d5c8842559152d3126c4249dfe24d8d98a6439e8cb160e171b641b5cd528f240594de4abf45957c095ea90b68d62f55fc64541601bff7e106fb023db64e8c15f6346c745da761ffee826727bd98b2bffae59c91c021ffc59f6081dbaa196e95a3b173cddce6b01c1e5bac179d6881414edcc12bf994d30576798a19d0f9db5d054e8fdf2821230a23ed81a02369234a399d7115", 0x9a}, {&(0x7f0000000380)="d21e0ed1ee27c972fd2bef67c6a077b239514e0a205b38c982a5a6ca75c562f403f161f541cbc23b2e120f45812688f0de482c2bf16064f11091e836607a0e0217e4ccf2cc1e962d"}], 0x3}, 0x38008004) dup2(r0, r1) readlink(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/5, 0x5) lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0xee00) dup2(r1, r2) 03:38:18 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:38:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) r1 = inotify_init1(0x0) r2 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x8}, &(0x7f0000fee000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file0\x00', 0x122, 0x1490c0, 0x12345}, 0x202) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x1) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x50, r2, 0x8000000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r6, 0x0, r5) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f00000005c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@llc={0x1a, 0x306, 0x1c, 0x9, 0x6, 0x8, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000380)="be273fb1eddcb4c29cebc81b78800e6e2ea5f1adc384490ee07769f411e443923fd3bd5d1304781ce8bd29ce66204ec30fe84f48d0477fc2763ac06ce98c522fce7eda9e4ca239c0323a507b72b2d887858bdd2dde7009495a7f3b9af43f6cedc6d3017f3af4e9926fd7d36568ee27420df63325e751c48ab6a792ab609a5411e1b8e49940b3839c987bcf207a6c99d5f8769e9995dbc72922db8916a59f0fe695b40f9ba71698a7e1adb6f431c81ee99fbd2b4717fa684e9fcc0c7cfbb77bab5de9e9594120d96fa1d619237689c1b0857af867e19863c7f392b559ac8b859271642bc40686a9f0be6b2ee79ab8c8800249d31d93", 0xf5}, {&(0x7f0000000240)="4ecc904d3a139b9e94ca5e72ce48c262b93a435fea9a59f28193586970b54c502d9c6bd35aadf7700b5c9a901430132983a5f2e2ab435c39", 0x38}, {&(0x7f0000000480)="03e50c94d6e0a492d17e55813dd16ad56fdef36aad8d2c632ee247d68b2cd166367793425044bf99faff7d9e850ae667b844d2c684df32ccc1ed8056e9d84889103494354ccd98f128a25f9a7b6b05f1b97c2a5dc932b3e10678da7555089651c6091da22ba1a3d750a9fad76bc2ec2109bef40dd84067c68bde24a5b81ed6c2481f1fddb1139238b047f2288be67fe8ac6ec3447688d99039541a57eee5c2747e665398a8d0545f317fb8538f3135e6b4fb579b6792bd4fdec08c18e98de1cd02d26e5f14fee5a3cb5990a68c221b00c2638760f87f92f944fc5872ad41db7906d6", 0xe2}, {&(0x7f0000000280)="12368ef1efe7d57dae414e696f8ca3c53c6ab4e28603c1d5", 0x18}], 0x4, &(0x7f00000006c0)=[{0x50, 0x108, 0x101, "9bc6b65b588522dcc3c43cd38af16aa9141db50be8346fad7a38d4673d94b26b8253132c56de3b0dda117b0eeccd2afb932b3c8de1a7fc4927"}, {0x28, 0x110, 0x1, "acb11d09f7675848f123aa64ba4dc200fcedd403"}, {0x10, 0x115, 0x400}, {0x108, 0x114, 0x800, "9f1a0079c83e67587b02bbca4a116c8c1f56fc3d09b24d89e7f8a19e6f3535811aa5cffe324dfa1d1a85f0d4a92b39a6c95bb431eaf031249f74da9d198e4b06cfce7c90c380be421bd4f47dd073ad9d9d7c75186b1540c1b5d9d4937879464a4e6317bdccd600c58c0ef5fc7703cf972b34bb26af6f7aee2b5a047ab0985bf8a6a93002d2549757f1c3606e0c9533395fd4b429368f9c0273ac71b3eea2549c54572fa0b493a652b229fdd7d8721fbbc81be266776ea26fb20c65d32e59be280bd4f308607d837ba7e035bf737ef72ac58ba85b50b7644cee2bd321026af9309e988ba8a98292c29cc8e6adca2ef41439292cb66aaa"}, {0x28, 0x109, 0x6, "3b19ad31ab92229400ec1fc6a2078c425d575ed240"}, {0xf8, 0x18f, 0x2, "7b109b0038eaa13b73d322f95cfb80aeff21fdca49ff33cff89064d1d41591d5fbf01ed47584503828d98d709d9cc02608a7b218238891845fe69c95f61d29d3f96521c7bc0360c632fad1da01435eda56c663105365e8910ba99b0fbf5840cf4e5dd9bdcd40c990de5ba5879d39e655a6cf84ed86f523140762a722894a8d81a63e06025a7ac4709c17bab601ad13384bf725564986b3fa35cff1e1409080d8fda4fc4ca8ac080077744480ac25b9ed308967388148b208d868184638e7fc2924e950f57255ec33cc654fe7002ea56e856005ba38bb999d2857df379f9f1a287ba0f66a4ffd"}, {0x98, 0x11, 0x101, "d68993ecb4e74866c102e3204db7ef7f5bb14437439060774dd3588d24e34f5b8936d41fe730ff73cfc9b4c8d48dd4160496faa7afa97c82f445f49f56d27af053285355af04f53b28c372fc2a9014b1da5c23a64743a610cc9a0390fdf2857a6b01f90328fc60795f469a0d3c8c0cb2edc0db85fff17ddf4428fbf24b1946995f5beb68075c7b"}], 0x348}, 0x0, 0x10, 0x1, {0x0, r7}}, 0x1) ioctl$FICLONE(r1, 0x40049409, r1) 03:38:18 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', 'vfat\x00'}) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/42, 0x2a) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101002, 0x20) creat(&(0x7f0000000200)='./file1\x00', 0x88) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000300)='./file1\x00', 0x2) sendfile(r1, r2, 0x0, 0x100000001) 03:38:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xb1, 0x10062, 0x0) 03:38:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 43) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:38:18 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) ioctl$int_out(r4, 0x5460, &(0x7f00000000c0)) 03:38:18 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2193.753612] FAULT_INJECTION: forcing a failure. [ 2193.753612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2193.755074] CPU: 0 PID: 15642 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2193.755804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2193.756683] Call Trace: [ 2193.756968] dump_stack+0x107/0x167 [ 2193.757355] should_fail.cold+0x5/0xa [ 2193.757764] _copy_from_user+0x2e/0x1b0 [ 2193.758206] __copy_msghdr_from_user+0x91/0x4b0 [ 2193.758700] ? __ia32_sys_shutdown+0x80/0x80 [ 2193.759165] ? __lock_acquire+0x1657/0x5b00 [ 2193.759634] ___sys_recvmsg+0xd5/0x200 [ 2193.760059] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2193.760588] ? __lockdep_reset_lock+0x180/0x180 [ 2193.761073] ? trace_hardirqs_on+0x5b/0x180 [ 2193.761532] ? lock_acquire+0x197/0x470 [ 2193.761953] ? find_held_lock+0x2c/0x110 [ 2193.762395] ? __might_fault+0xd3/0x180 [ 2193.762818] ? lock_downgrade+0x6d0/0x6d0 [ 2193.763259] ? io_schedule_timeout+0x140/0x140 [ 2193.763752] do_recvmmsg+0x24c/0x6d0 [ 2193.764154] ? ___sys_recvmsg+0x200/0x200 [ 2193.764594] ? lock_downgrade+0x6d0/0x6d0 [ 2193.765037] ? ksys_write+0x12d/0x260 [ 2193.765456] ? wait_for_completion_io+0x270/0x270 [ 2193.765967] ? rcu_read_lock_any_held+0x75/0xa0 [ 2193.766467] ? vfs_write+0x354/0xb10 [ 2193.766866] __x64_sys_recvmmsg+0x20f/0x260 [ 2193.767325] ? ksys_write+0x1a9/0x260 [ 2193.767728] ? __do_sys_socketcall+0x600/0x600 [ 2193.768214] do_syscall_64+0x33/0x40 [ 2193.768602] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2193.769137] RIP: 0033:0x7fb290a1fb19 [ 2193.769529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2193.771445] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2193.772255] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2193.773002] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2193.773766] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2193.774519] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2193.775264] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2193.785980] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:38:18 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:38:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 44) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) [ 2193.856013] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2193.862305] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2193.867757] tmpfs: Unknown parameter '6ŽñïçÕ}®ANioŒ£Å 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2193.905233] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2193.905989] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2193.906697] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2193.907396] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2193.908095] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2193.908791] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:38:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xb2, 0x10062, 0x0) 03:38:18 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000000000000000000000000002ca500000000000000000000000000000000000000001000000000000000000000000000000009000000040000000200000000000000060000000000000009000000000000000180000000000000000000000000000000000000000000000000000000318700feffffffbc00000007000000000000000200000000000000050000000000000007200000000020000000000000000000000000000000000000000000000000a361bebb8f9b36c3"]) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) 03:38:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x88000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x900, 0x0) sendfile(r1, r2, &(0x7f00000003c0)=0x3, 0x1f) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x103f, &(0x7f0000000a80)={0x0, 0x4560, 0x4, 0x0, 0x26, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x72, 0x0, 0x0, 0x4, 0x0, 0x0, 0x82304, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x20b9, 0x0, 0xfffffffe, 0x0, 0x6, 0x101, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r6, 0x0, r5) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f0000000240)={0x0, 0x20, '\x00', 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]}) lchown(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0xee00) pipe2(&(0x7f0000000480), 0x0) pipe2(&(0x7f0000000480), 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x235, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r4, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x0) clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 03:38:18 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2194.099418] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:38:33 executing program 7: socket$inet6_tcp(0xa, 0x1, 0x0) 03:38:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xb3, 0x10062, 0x0) 03:38:33 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:38:33 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/218, 0xda) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x5a32f08f7b6cbd6f}, 0x48050) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:38:33 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000980)='./file1\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="640000004f000000d199cf99708ab3b1852b8ec576d1f1e9d2fbfc6eb4e3844d2a5e66af0bc7e7726078578eacefcc28d9dce2a883acedd07091448ed8e5668c7bf46632e043d5fcdf36455826ae966522a2b8b2db14dc2eab04ec4035d98119060ee6622a38bbed2f960000733f3e1062b6b931e8b8a16a285069ae36ca13d1ef84b86c93caa6792a0e25a695abe4e8d725ab32adab65e3ad25b504f8e115427ca03b7d95c488b29708e1df90ab015812a9f98afedd9d7a3602e36dcd9275a8308d63d584321a1b5bc68f0cb3ff7ed554eb2d645860"], 0x200900) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) r2 = eventfd(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x56, &(0x7f0000000080)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f00000000c0)="9a17e64cdc67bd627708c4", 0xb}, {&(0x7f0000000100)="11fa030674fe5d5c8842559152d3126c4249dfe24d8d98a6439e8cb160e171b641b5cd528f240594de4abf45957c095ea90b68d62f55fc64541601bff7e106fb023db64e8c15f6346c745da761ffee826727bd98b2bffae59c91c021ffc59f6081dbaa196e95a3b173cddce6b01c1e5bac179d6881414edcc12bf994d30576798a19d0f9db5d054e8fdf2821230a23ed81a02369234a399d7115", 0x9a}, {&(0x7f0000000380)="d21e0ed1ee27c972fd2bef67c6a077b239514e0a205b38c982a5a6ca75c562f403f161f541cbc23b2e120f45812688f0de482c2bf16064f11091e836607a0e0217e4ccf2cc1e962d"}], 0x3}, 0x38008004) dup2(r0, r1) readlink(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/5, 0x5) lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0xee00) dup2(r1, r2) 03:38:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 03:38:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 45) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:38:33 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2209.381038] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:38:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xb4, 0x10062, 0x0) [ 2209.410206] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:38:33 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2209.434774] FAULT_INJECTION: forcing a failure. [ 2209.434774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2209.437551] CPU: 1 PID: 15812 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2209.438806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2209.440235] Call Trace: [ 2209.440711] dump_stack+0x107/0x167 [ 2209.441317] should_fail.cold+0x5/0xa [ 2209.442022] _copy_from_user+0x2e/0x1b0 [ 2209.442731] __copy_msghdr_from_user+0x91/0x4b0 [ 2209.443534] ? __ia32_sys_shutdown+0x80/0x80 [ 2209.444272] ? __lock_acquire+0x1657/0x5b00 [ 2209.445049] ___sys_recvmsg+0xd5/0x200 [ 2209.445731] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2209.446572] ? __lockdep_reset_lock+0x180/0x180 [ 2209.447338] ? _raw_spin_unlock_irq+0x27/0x30 [ 2209.448094] ? lock_acquire+0x197/0x470 [ 2209.448747] ? find_held_lock+0x2c/0x110 [ 2209.449444] ? __might_fault+0xd3/0x180 [ 2209.450100] ? lock_downgrade+0x6d0/0x6d0 [ 2209.450801] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2209.451718] do_recvmmsg+0x24c/0x6d0 [ 2209.452362] ? ___sys_recvmsg+0x200/0x200 [ 2209.453066] ? recalibrate_cpu_khz+0x10/0x10 [ 2209.453812] ? lapic_next_deadline+0x1/0x50 [ 2209.454548] ? tick_program_event+0xa8/0x140 [ 2209.455298] __x64_sys_recvmmsg+0x20f/0x260 [ 2209.456020] ? __do_sys_socketcall+0x600/0x600 [ 2209.456794] do_syscall_64+0x33/0x40 [ 2209.457407] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2209.458269] RIP: 0033:0x7fb290a1fb19 [ 2209.458886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2209.461917] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2209.463178] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2209.464346] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2209.465515] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2209.466690] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2209.467851] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:38:33 executing program 7: msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)={0x2, "e684f8a86804c04ca73eb3c3fb3ac5b47df470f475eacf40378b1bf5ddfadb87a57c6eabc99216163a82a5688393c7eddf5e44a95ba39b75394925fd7b1afa1c6c0dd20563852ee6b05ce29b93d3a153b42420d841f49e0ffe5df3354384edb28fbf262993f97924b7079e40840245ee2479da27b9830efb6d59470b609c7f65e1bd54f2b7f5e41585a80e7646aa0ec44609a47eaaf944c51cd3842380dd96f29087b81e8faa5e4360b866037a3dafafe5013631c995d52f30f401d134bc21836efe357af93647419cb0d724cb08619d8155f509a3639a084f44d3516b3aacebe6bef34a6c9d42d05ebee19532a8"}, 0xf6, 0x0) getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r3}) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r5}) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000180)=""/146) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r7}) [ 2209.565909] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:38:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 46) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:38:33 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe, 0x80010, r0, 0x8000000) r4 = dup2(0xffffffffffffffff, r0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2000, @fd=r4, 0x5, 0x0, 0x0, 0xc, 0x0, {0x3}}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000b40)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000c80)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b80)=""/157, 0x9d}], 0x100000000000010a}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:38:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xb5, 0x10062, 0x0) 03:38:33 executing program 0: r0 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r1, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) read(r1, &(0x7f0000000300)=""/209, 0xd1) r3 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r5, &(0x7f0000000d40)=""/71, 0x47, 0x10000, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0x0, 0x2, 0x97}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:38:33 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r1, &(0x7f0000000680)='./file0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000140)={0x101, {0x1, 0x40, 0x8, 0x9, 0xa3}}) renameat(r1, &(0x7f00000000c0)='./file0/file1\x00', r1, 0x0) inotify_init1(0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000180)) [ 2209.696776] FAULT_INJECTION: forcing a failure. [ 2209.696776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2209.697946] CPU: 0 PID: 15937 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2209.698613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2209.699391] Call Trace: [ 2209.699649] dump_stack+0x107/0x167 [ 2209.700001] should_fail.cold+0x5/0xa [ 2209.700378] _copy_from_user+0x2e/0x1b0 [ 2209.700762] __copy_msghdr_from_user+0x91/0x4b0 [ 2209.701208] ? __ia32_sys_shutdown+0x80/0x80 [ 2209.701624] ? __lock_acquire+0x1657/0x5b00 [ 2209.702043] ___sys_recvmsg+0xd5/0x200 [ 2209.702420] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2209.702878] ? __lockdep_reset_lock+0x180/0x180 [ 2209.703320] ? __fget_files+0x2cf/0x520 [ 2209.703704] ? lock_acquire+0x197/0x470 [ 2209.704078] ? find_held_lock+0x2c/0x110 [ 2209.704469] ? __might_fault+0xd3/0x180 [ 2209.704848] ? lock_downgrade+0x6d0/0x6d0 [ 2209.705252] do_recvmmsg+0x24c/0x6d0 [ 2209.705608] ? ___sys_recvmsg+0x200/0x200 [ 2209.705999] ? lock_downgrade+0x6d0/0x6d0 [ 2209.706403] ? ksys_write+0x12d/0x260 [ 2209.706778] ? wait_for_completion_io+0x270/0x270 [ 2209.707238] ? rcu_read_lock_any_held+0x75/0xa0 [ 2209.707673] ? vfs_write+0x354/0xb10 [ 2209.708028] __x64_sys_recvmmsg+0x20f/0x260 [ 2209.708432] ? ksys_write+0x1a9/0x260 [ 2209.708793] ? __do_sys_socketcall+0x600/0x600 [ 2209.709229] do_syscall_64+0x33/0x40 [ 2209.709580] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2209.710055] RIP: 0033:0x7fb290a1fb19 [ 2209.710412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2209.712123] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2209.712839] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2209.713502] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2209.714174] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2209.714849] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2209.715524] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:38:34 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:38:34 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:38:34 executing program 7: msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)={0x2, "e684f8a86804c04ca73eb3c3fb3ac5b47df470f475eacf40378b1bf5ddfadb87a57c6eabc99216163a82a5688393c7eddf5e44a95ba39b75394925fd7b1afa1c6c0dd20563852ee6b05ce29b93d3a153b42420d841f49e0ffe5df3354384edb28fbf262993f97924b7079e40840245ee2479da27b9830efb6d59470b609c7f65e1bd54f2b7f5e41585a80e7646aa0ec44609a47eaaf944c51cd3842380dd96f29087b81e8faa5e4360b866037a3dafafe5013631c995d52f30f401d134bc21836efe357af93647419cb0d724cb08619d8155f509a3639a084f44d3516b3aacebe6bef34a6c9d42d05ebee19532a8"}, 0xf6, 0x0) getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r3}) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r5}) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000180)=""/146) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r7}) 03:38:34 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xb6, 0x10062, 0x0) [ 2209.839526] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:38:49 executing program 0: r0 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r1, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x10f5, &(0x7f0000000240)={0x0, 0xea83, 0x2, 0x1, 0x5e, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r0, 0x80, &(0x7f0000000500)=@phonet={0x23, 0x0, 0x2, 0x8}, 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) read(r1, &(0x7f0000000300)=""/209, 0xd1) r6 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r7 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r7, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(r2, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:38:49 executing program 6: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:38:49 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:38:49 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1]}}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r2, 0x10, 0x0, 0x1000002) r3 = syz_open_dev$mouse(&(0x7f0000000140), 0xe62, 0x10400) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x80, 0x6, 0x1, 0x8, 0x0, 0xffffffff, 0x1000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x4c49, 0x6}, 0x20, 0x0, 0xfffff000, 0x0, 0x2, 0x3, 0x7fff, 0x0, 0x8000}, 0x0, 0x0, r3, 0xa) dup3(r1, r2, 0x80000) getpriority(0x2, 0x0) 03:38:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 47) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:38:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xb7, 0x10062, 0x0) 03:38:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0xffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x0) 03:38:49 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2225.353517] FAULT_INJECTION: forcing a failure. [ 2225.353517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2225.354917] CPU: 0 PID: 16077 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2225.355684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2225.356604] Call Trace: [ 2225.356905] dump_stack+0x107/0x167 [ 2225.357319] should_fail.cold+0x5/0xa [ 2225.357752] _copy_from_user+0x2e/0x1b0 [ 2225.358199] __copy_msghdr_from_user+0x91/0x4b0 [ 2225.358723] ? __ia32_sys_shutdown+0x80/0x80 [ 2225.359219] ? __lock_acquire+0x1657/0x5b00 [ 2225.359714] ___sys_recvmsg+0xd5/0x200 [ 2225.360148] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2225.360702] ? __lockdep_reset_lock+0x180/0x180 [ 2225.361238] ? lock_acquire+0x197/0x470 [ 2225.361681] ? find_held_lock+0x2c/0x110 [ 2225.362141] ? __might_fault+0xd3/0x180 [ 2225.362592] ? lock_downgrade+0x6d0/0x6d0 [ 2225.363071] do_recvmmsg+0x24c/0x6d0 [ 2225.363493] ? ___sys_recvmsg+0x200/0x200 [ 2225.363967] ? recalibrate_cpu_khz+0x10/0x10 [ 2225.364462] ? lapic_next_deadline+0x1/0x50 [ 2225.364946] ? tick_program_event+0xa8/0x140 [ 2225.365439] __x64_sys_recvmmsg+0x20f/0x260 [ 2225.365922] ? __do_sys_socketcall+0x600/0x600 [ 2225.366456] do_syscall_64+0x33/0x40 [ 2225.366876] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2225.367440] RIP: 0033:0x7fb290a1fb19 [ 2225.367854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2225.369889] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2225.370743] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2225.371518] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2225.372306] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2225.373107] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2225.373899] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:38:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xb8, 0x10062, 0x0) [ 2225.436958] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2225.449018] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2225.476607] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:38:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 48) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) [ 2225.577838] cgroup: fork rejected by pids controller in /syz7 [ 2225.620234] FAULT_INJECTION: forcing a failure. [ 2225.620234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2225.621465] CPU: 0 PID: 16186 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2225.622140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2225.622960] Call Trace: [ 2225.623227] dump_stack+0x107/0x167 [ 2225.623586] should_fail.cold+0x5/0xa [ 2225.623967] _copy_from_user+0x2e/0x1b0 [ 2225.624370] __copy_msghdr_from_user+0x91/0x4b0 [ 2225.624826] ? __ia32_sys_shutdown+0x80/0x80 [ 2225.625262] ? __lock_acquire+0x1657/0x5b00 [ 2225.625697] ___sys_recvmsg+0xd5/0x200 [ 2225.626081] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2225.626559] ? __lockdep_reset_lock+0x180/0x180 [ 2225.627015] ? lock_acquire+0x197/0x470 [ 2225.627410] ? find_held_lock+0x2c/0x110 [ 2225.627811] ? __might_fault+0xd3/0x180 [ 2225.628205] ? lock_downgrade+0x6d0/0x6d0 [ 2225.628616] ? io_schedule_timeout+0x140/0x140 [ 2225.629068] do_recvmmsg+0x24c/0x6d0 [ 2225.629434] ? ___sys_recvmsg+0x200/0x200 [ 2225.629833] ? lock_downgrade+0x6d0/0x6d0 [ 2225.630240] ? ksys_write+0x12d/0x260 [ 2225.630630] ? wait_for_completion_io+0x270/0x270 [ 2225.631096] ? rcu_read_lock_any_held+0x75/0xa0 [ 2225.631540] ? vfs_write+0x354/0xb10 [ 2225.631898] __x64_sys_recvmmsg+0x20f/0x260 [ 2225.632313] ? ksys_write+0x1a9/0x260 [ 2225.632675] ? __do_sys_socketcall+0x600/0x600 [ 2225.633124] do_syscall_64+0x33/0x40 [ 2225.633490] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2225.633981] RIP: 0033:0x7fb290a1fb19 [ 2225.634345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2225.636123] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2225.636845] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2225.637525] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2225.638206] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2225.638898] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2225.639590] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:38:49 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4", 0x2e, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2225.689611] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2235.786167] Bluetooth: hci7: command 0x0406 tx timeout 03:39:06 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1]}}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r2, 0x10, 0x0, 0x1000002) r3 = syz_open_dev$mouse(&(0x7f0000000140), 0xe62, 0x10400) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x80, 0x6, 0x1, 0x8, 0x0, 0xffffffff, 0x1000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x4c49, 0x6}, 0x20, 0x0, 0xfffff000, 0x0, 0x2, 0x3, 0x7fff, 0x0, 0x8000}, 0x0, 0x0, r3, 0xa) dup3(r1, r2, 0x80000) getpriority(0x2, 0x0) 03:39:06 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xb9, 0x10062, 0x0) 03:39:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x200000d4) pread64(r0, &(0x7f0000004600)=""/4096, 0x1000, 0x20) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000001300)=ANY=[@ANYBLOB="bed716987b050f6cd0e8442bea41aeecd3fda43e6e889eb0c8f0651efb39042a120600000000000000c9b558e96d693a7b2ccf72d5502e0ecbb4d74e58b91f4f651dcdd3e12e5f8e4936e916e7f00c2a0ee1bf55c2e820fb89e6f30a07a9d9bfc17a3acc84ce72149c595df366700ef437556a764939cc176b2d43a175380ee3cfb83d9fcf4494c299019b3153dea4f08bcddf77d07700002280c60e0e245ce7435a708c344e833dde8dad8a10062cc3deef"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_mount_image$ext4(&(0x7f0000001480)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x1, &(0x7f0000000100)=[{&(0x7f0000001280)="6063f5f02f2048a0b05046f3ddd1193e22716ceb436b89fa223184f06d237974c341a45c9188af56d06abdb28ee20aa460f6168fb01a2f8d942e259d6ec57153213d09841b0fe8de6d2f5849c89f", 0x4e, 0x74}], 0x180011, &(0x7f0000001600)={[{@journal_async_commit}, {@grpquota}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x800000000000002}}, {@init_itable}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, '*-/\x83]'}}, {@uid_gt={'uid>', r1}}, {@euid_gt={'euid>', 0xee00}}]}) ftruncate(r2, 0x8) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONE(r3, 0x40049409, r5) ioctl$SG_EMULATED_HOST(r3, 0x127c, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r8, 0x0, r7) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001240)={&(0x7f0000001400)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x2c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x8, 0x0, @random="6868a1e8"}, {0x14, 0x0, @random="04086689026c1db47ac53b204cf9aebb"}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x41}, 0x84) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000001e00)={{r7}, "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"}) 03:39:06 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4", 0x2e, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:39:06 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4069, 0xfe5, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x1400}, 0x0, {0x0, r4}}, 0x96) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)}, {&(0x7f0000000500)=""/194, 0xc2}], 0x2, &(0x7f0000000600)=""/165, 0xa5}, 0x0, 0x1, 0x0, {0x2, r4}}, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:39:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xc1) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) inotify_init1(0x0) 03:39:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 49) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:39:06 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2242.135909] FAULT_INJECTION: forcing a failure. [ 2242.135909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2242.137860] CPU: 1 PID: 16323 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2242.138917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2242.140122] Call Trace: [ 2242.140517] dump_stack+0x107/0x167 [ 2242.141055] should_fail.cold+0x5/0xa [ 2242.141621] _copy_from_user+0x2e/0x1b0 [ 2242.142212] __copy_msghdr_from_user+0x91/0x4b0 [ 2242.142900] ? __ia32_sys_shutdown+0x80/0x80 [ 2242.143541] ? __lock_acquire+0x1657/0x5b00 [ 2242.144193] ___sys_recvmsg+0xd5/0x200 [ 2242.144764] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2242.145484] ? __lockdep_reset_lock+0x180/0x180 [ 2242.146175] ? __fget_files+0x2cf/0x520 [ 2242.146767] ? lock_acquire+0x197/0x470 [ 2242.147357] ? find_held_lock+0x2c/0x110 [ 2242.147965] ? __might_fault+0xd3/0x180 [ 2242.148560] ? lock_downgrade+0x6d0/0x6d0 [ 2242.149188] do_recvmmsg+0x24c/0x6d0 [ 2242.149750] ? ___sys_recvmsg+0x200/0x200 [ 2242.150355] ? lock_downgrade+0x6d0/0x6d0 [ 2242.151018] ? ksys_write+0x12d/0x260 [ 2242.151604] ? wait_for_completion_io+0x270/0x270 [ 2242.152315] ? rcu_read_lock_any_held+0x75/0xa0 [ 2242.153021] ? vfs_write+0x354/0xb10 [ 2242.153586] __x64_sys_recvmmsg+0x20f/0x260 [ 2242.154217] ? ksys_write+0x1a9/0x260 [ 2242.154818] ? __do_sys_socketcall+0x600/0x600 [ 2242.155493] do_syscall_64+0x33/0x40 [ 2242.156047] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2242.156718] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2242.156790] RIP: 0033:0x7fb290a1fb19 [ 2242.156818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2242.160983] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2242.162092] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2242.163147] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2242.164191] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2242.165237] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2242.166283] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2242.245760] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:39:06 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xba, 0x10062, 0x0) 03:39:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 50) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:39:06 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffdfffffff, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, r4, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) 03:39:06 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0/file1\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x11020000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004054) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r1, &(0x7f0000000680)='./file0\x00') renameat(r1, &(0x7f00000000c0)='./file0/file1\x00', r1, 0x0) inotify_init1(0x0) [ 2242.436073] FAULT_INJECTION: forcing a failure. [ 2242.436073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2242.437918] CPU: 1 PID: 16449 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2242.438926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2242.440097] Call Trace: [ 2242.440482] dump_stack+0x107/0x167 [ 2242.441003] should_fail.cold+0x5/0xa [ 2242.441565] _copy_from_user+0x2e/0x1b0 [ 2242.442146] __copy_msghdr_from_user+0x91/0x4b0 [ 2242.442822] ? __ia32_sys_shutdown+0x80/0x80 [ 2242.443452] ? __lock_acquire+0x1657/0x5b00 [ 2242.444088] ___sys_recvmsg+0xd5/0x200 [ 2242.444648] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2242.445352] ? __lockdep_reset_lock+0x180/0x180 [ 2242.446023] ? _raw_spin_unlock_irq+0x27/0x30 [ 2242.446685] ? lock_acquire+0x197/0x470 [ 2242.447255] ? find_held_lock+0x2c/0x110 [ 2242.447844] ? __might_fault+0xd3/0x180 [ 2242.448425] ? lock_downgrade+0x6d0/0x6d0 [ 2242.449025] ? io_schedule_timeout+0x140/0x140 [ 2242.449704] do_recvmmsg+0x24c/0x6d0 [ 2242.450247] ? ___sys_recvmsg+0x200/0x200 [ 2242.450850] ? lock_downgrade+0x6d0/0x6d0 [ 2242.451455] ? ksys_write+0x12d/0x260 [ 2242.452029] ? wait_for_completion_io+0x270/0x270 [ 2242.452730] ? rcu_read_lock_any_held+0x75/0xa0 [ 2242.453400] ? vfs_write+0x354/0xb10 [ 2242.453939] __x64_sys_recvmmsg+0x20f/0x260 [ 2242.454563] ? ksys_write+0x1a9/0x260 [ 2242.455121] ? __do_sys_socketcall+0x600/0x600 [ 2242.455791] do_syscall_64+0x33/0x40 [ 2242.456322] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2242.457048] RIP: 0033:0x7fb290a1fb19 [ 2242.457577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2242.460168] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2242.461242] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2242.462250] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2242.463254] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2242.464264] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2242.465263] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:39:06 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffe0000000000003, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="2321202e2f66696c6530206e65742f69676d703600201e5c297d395cceef46b032e4dd79104dc0a305528fe0d274212fa5aa118c3e8144de2064d5e95475b0dc7f75f130047a7bf183c52558f88d62ffcc9eb2ae6454f1fa1900b19446de5bc970f29d90760413b58ec73cee31b50ff7338b328252eba3e937981ce68419b98610aea5b092bdbab374c057ab20bc9e3165181a7872732b8e7cc0bb793cb510877efb80a32aa4ad1539bafefeef9c4b6924706b5d7bdcf85cec6ee05f6d418135353a0cfa37b91edccc03040264c7493abfbe71c187418290adeaf808b86c753fce4589ecc5a595d63ff329a260c3eda997898dc66aa75cd70a15c528b9c672324ce3ca729e27e9beddbaa02b6c416878f515494a44c2eff764ec"], 0x11a) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/13, 0xd}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:39:06 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4", 0x2e, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:39:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x200000d4) pread64(r0, &(0x7f0000004600)=""/4096, 0x1000, 0x20) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000001300)=ANY=[@ANYBLOB="bed716987b050f6cd0e8442bea41aeecd3fda43e6e889eb0c8f0651efb39042a120600000000000000c9b558e96d693a7b2ccf72d5502e0ecbb4d74e58b91f4f651dcdd3e12e5f8e4936e916e7f00c2a0ee1bf55c2e820fb89e6f30a07a9d9bfc17a3acc84ce72149c595df366700ef437556a764939cc176b2d43a175380ee3cfb83d9fcf4494c299019b3153dea4f08bcddf77d07700002280c60e0e245ce7435a708c344e833dde8dad8a10062cc3deef"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_mount_image$ext4(&(0x7f0000001480)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x1, &(0x7f0000000100)=[{&(0x7f0000001280)="6063f5f02f2048a0b05046f3ddd1193e22716ceb436b89fa223184f06d237974c341a45c9188af56d06abdb28ee20aa460f6168fb01a2f8d942e259d6ec57153213d09841b0fe8de6d2f5849c89f", 0x4e, 0x74}], 0x180011, &(0x7f0000001600)={[{@journal_async_commit}, {@grpquota}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x800000000000002}}, {@init_itable}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, '*-/\x83]'}}, {@uid_gt={'uid>', r1}}, {@euid_gt={'euid>', 0xee00}}]}) ftruncate(r2, 0x8) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONE(r3, 0x40049409, r5) ioctl$SG_EMULATED_HOST(r3, 0x127c, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r8, 0x0, r7) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001240)={&(0x7f0000001400)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x2c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x8, 0x0, @random="6868a1e8"}, {0x14, 0x0, @random="04086689026c1db47ac53b204cf9aebb"}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x41}, 0x84) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000001e00)={{r7}, "809305111781b12360074b868feeec1871588f4f7d4fd1d609dc5414f7f17529a51d082686c12a91d68247454c1a4c495fb37c7b59bb9b92ac265ee9ea78242ca0344ee0406594214d6dd3aa990798ad6f38a6cbe05608fea05cc0c690113ff92c3e8b2a107b5419ebe8cafa068656654d7d6b2eca523b9fa41a2d8afdbbafd687cabeb7c0146830ddb19d12d6592424e0517f047e84995832a8a6658a7918c8a92dc865d834eef99dc8ccff7966af8370c57cb1b089165c682434ad64a851e1e185d3423a17d10917f55801d5f759a1cb8fa7a2f5f011918d693e1ceb749010f6a57c15451c063e3daf661094aabfa28323e359ca4dfd0e9a221cfc1dcda94cd2334e911f925b22f58200f5e951a74eab92b66558c0e552f9c62400020eb36283ae2c7fa6adabed833572fb6d8e839193cc8a802242c77e66b15e33137cbdd435857b881b45a2b0dfe599ecdc1e1f3a64ba311225a033333ee7ae2ee5af848a4641cece72310f9e31b262b787a088488cd9c5fb5af9e9ca571e7551ed9f9f7ddfb35cff93a9fd1ada27c05c43a7a14142da0551ec14e81c6ef515f71f7e76227c918f1fb5fdfd02bd1d18fe1998de585da32aeee423f1cb7ce7b88c736089e9bb2a8aaee2f0c6fe7f5642c4d7896c4649b71131bda191eb7c56834be1a554f0953042a28cb07baab49a2652a171e6c912c1c99507d42d0a04ef4ca87c7cffbf9821a015ccddc2aaf52ff56e4d2485ba93fc29eb4b6fa6e84039e5b46bd496e752861e8366f47128691e9b3d657be5b6838fc8fa882dfeb78a9d9d738b6e931244045ef6fd2a9db0689b4c9619d11a873bf5252552ef9f16fbe3213e96a673a0ce69cb4894d7c4943a8a6e3d1cd1c8f5e3d6904b1d4308187b86c65aa9fdc92d6695004cbd858bbf4d9f63c26c3ae8ff315c2eb6ba2f3ba9403910aad567d3427691ba46b68136358a42a0affeb72be65b225c7075befc9e5e7de3a80f58920a96e9ce3b6a393cdcb447e2be13c9c6d666275954011e8f6b18ace03f80865ff310086fd14625d26e9c1a695aa506ca35421435c1262509ad535bffb0cbba3a90f6db27a1caf6cecad2d0efc60e2bff708514d3509ee23a2bce2adc59179e066740673e64021c79bedd993bbbacc4756177f92914737885fe92a73a86b1f58bdb5b00a50e168f6c3b67f1ae321e4b101635275e2944fa3838d385976964c21eedbb898645b7ad119598fcd80b903df41e3384ce23087a29bd5b5f8a704bd0344ca40f5537f9c9318b4eed8133e82c8e5dfaf015228e8403f171acd2773e2a0e1e85ace449fc5de01b8fda26ecc9f4a138fca7a3e0e6e9b4751c3870855f8342722729f1cfa2855c2e50c1356b4898a11fe45ce42934540494fa2a98d05db346a58ac327ecfdfe386a92d90924e622c8a2ce165a5ce62e424164b11188d91c2946c6d234ebbe2428c6ca6b591849aa13973420ca0cc5bbc14ab28a5d62269714bb9a0fc3b54065e1b98110eeb3e283e5501f5198fb069407f61461e41c6101b50b92b99cb5c5ee223a98b8fadcf897be9e9d2595ade34499712ab3992aaf1e0ba938d63c2a0706a52e67c8f4e48eea7db2e9e474d2b45d9651cf7eb143df262547a5510834177aa292dcf69cefeb3186b7dc6d0add65f781bc28ec610da27b3ed26259e7124c2c346c8dbd43ec4958b24913abd136389b73dbffb019bc933c956fa1c8ef37b7aa7defff8b758d5727792548b8750e13aa9dd7b4171bde6912c608b4e4a8a1aebf1451335eec040a46b27801b879e21c39a779a4a284de8bba643e34895c10dd1c64cc8304601040050284692342aaa9bbc38744ae136971dcb5aa80035b3545019876929549702bed6e7be3f364c5d4d0d0f966624f6e3a4277f5598e23de21d803a4107ebb8a222b36f720c77bc2dace9c75959868c5973228b47ac5c75fa3b10f6b42197aa755ae8e90be0b26db0d4132735844210b839452be19284977ef2e1b73ea0a3a5d0755889c40ce667bad9d78353a167c4ee4760de1b8817c206cd132e8add71e8059b39274fac0822c0d856407f22427a8ae67466dd39af089e44a310cd8d7bba9f9875bc8f470ebf8b1e168d84f8afbc15d8b741e359def6ed84535ecc5364b030af76fc0f9ca073725b2b185fe05d62a2e19643724e601753ffc553753ca8f4dd32df261e6d76943fa92918105f389bf93827729ad5af3e42f05e91348791a5c0113fc9907652c9089499593a02a65a6237292f83e0ae062c30c3b63d36f86369003e5450bb3eb090d64196756220694a64c72fdca54b23ae7039566e1efb1b26fabca5cd544d18c1b65fbc1f69f7ca03f6a6a28a082c16740eefbb48346f7048e68e47110b224500bf72430d5cf279b5ebd601a56dc832b6acfd811ed34f375e6a315ab074d2e5f6506425d9c4701cd9e645ccb4a37eb8932b2b3ccd0e608b5922c1a3052486ca5e77a9b008b891a9bcf1fce001afca40372547344ceec79e6f2e343508b3f7b546559015ed82743ed7f49cad219e1dd53645a1e3e4242f11f83e06278e2f61d3a11b3d854e76c872289689c932ad60f21ee7881910c7a81e0e70da8c0e22369068ecddd9d2b6358836ec71cb17eaf06db4f9e9bc8f18d2f70edd6ea94b0b7edfd9c6b85df06574e11f0f54219ce67c4c92572309d6cb732479aa8d0db200cfe5cf5aa8ad915f559238f24554b5f3179168db3db8d563f10a78dade54d1c0547963711e86216d3b53247055d3d00339046280e9b34af90594ac694b581e2d19f5efa06456eaa56f98ba80e588f70ceadd1107471847716ef577c2cf41bd77112f8ca65260c10f1f18b4ae4ea33599bbf5bd303ee860bc5e622f057bb0fcf817852a1eb89ad5b4b3a5e5d00c5fbd10860e8269842af36f7a79ca012bdc5929c0debd9c86210626aeaa086c94e3512d37f018442c0b12ba31681aae431910415cec0025651d01b073bde6c5b2bdd5ed192424cc4b9a3d37667637ade88157c85e72c8d00239acec7b75e89510e0f7bb22d2cf9f1a2d9aa96a4213ee35728f138abbe5bb7f43590f677c6c911d27d3614f12d62debed2532f515a368bbe5cb08cc1036023467bb8bce6341920a52458fd670ba27275bcd29d0946352c4b68f1ec3c9eaa4276f156b625009639917fd5940b87618f6d265d5b086936726b2dd4415ac9370c366823f3b72ec2e754959e98d953e7c619a95207f680f42e56fae57eebcb52f733c355326145df517211ec53ace22179fd76e24fc1200172abcc490067c5ee68f5def638c54500fddd08fc7d25409d8d9432f76b1f7dcda1faa07d7f78677c20434b3a463ee5a079e54c8ea9194115769b1fbc94ee2ec1afacb71cda26f79b4d2392cb1763e6ac45b0a2f659d94b87ac3f66dcc0e63b3febc9f10598ed3ee0d2468a4631b82e8adb7781fe005a9936dd4800b012d75ed372d2b5a1a01b80fa407ce935acb2c022523d3c0cb76810a1fcec3808e82cd30a04b556dc45fa037728527b1320aff93b774519d0b5b56211dbdfe3a889fdbfa96614b28cd4f00031ec68831cb67f988e8bbecb5f4d58e87d12998da8349a45dba834719ae52e1165d028307d08393d86516c572e76c414d9ee2ce254ae7c27d994d254e28cb2a7e867e7a8ccdcda692e5a021b9af6d2773a60ed6cf5e58f4271f518b47a0f76f0a5c399a424e8f76962b8d4533c3dda4c6a6aa64f1121682f3d5b89b5cd06fbba2d9e24f76bf7f34b2e86aa7dbf7dc24c90ddfc598972b303f96a0a433e0344b214e9bda1d0c6616d058d21dcc4859a7281a083722e5cb26313bc6d7b97cdc15cf087ae6408ecf043baff4f308633e26745b4e34f5f9d0f2d9fab68b9c1f4e3f611c596ba00c046b524181330080972f4f51901fc11b841eedd92a036527c731119051170d9204fc7d17be44bc67e0153dff0bebcb26e11b6244de86e572051b90cc38e52498e68b46681cd8c6e01f1d184da8cfacd864e6f69d1ba5d436a156e5750df83997aaf13606b14a8e9ee131436568e4404d54511dc9988d65cf5c0098370c91160ac135229c68ab64d53635db6be6decac1a69eb98b8b3bad128082d449d2dfb8272664880af6c75087ae81c332a1506462c17f5bed952f37d2743b1b585bcf3914fb8b400d67307c06344e23fa81cb40cf0432e0eff2d9f5b3dec1692c5ecbeb86d4152ddf908fb24b00ed6d38ca76bf9f61ab1f266b76c0aad2b7db46846ae66c283bb73504d5e129b3f6ba2502c727ae7fc86a1ee0918c9f54852c63ba4472ecae6ccca54149f36ac16aaee6205c182b07e2339a33085ebe1fefc935bd9f468652e3409618af525bf31f3b5f8fc973a756272b91bd7a9d2680468f9d655a01a7d808ae7afeb8b12f8cc264a3633880d96395879751ea17cdaef44009fd9aafb836ed49d9a64e724b5dd3d1b1dfd7145fbf1effa5e38259c7c65c82edfeeeaf4e658ef3d040fe131953ce21b708082aaff9a40dd53034f02ba21d1831bd3e2e32196464fc0f5edea4f9e7d12a2f2b1d8219129a9198bed173654e9a6d84d409c0359a5e6e3536add358956813814fedf219c7fae66aed6011f6b3b75f7831362ec4249389de477e9cdf9bb5bb1c2d0211ac67d267e938c62574d54545ff2fc38db550213c3cace9e6367caf34aadd2a3e12efa8837cfab6cf70906329dc60ead73f4392389d3b7b8cd4943b176ab39917893cedf711b4ce909b543b84bb3fc58812b878bcc4cdfb3445cf982fbd367595c6b5d1d88e53d088609e62b5ba70ca85c5d0bd45dc1e51f7e2dce34bf5b8c180d3992218509bc08756ee901aa704700adaf5770c8eba6268d4ee9a2bbdabc704256c1c0f762534b46049333fbf419fc5912fbacf2fbec3e15ce58281260d7b7283273dfd79752e2aa5822eedcb3535dec73bbf034cfd8417a940ba813c4fa5b06eef25e9a9e2492e563cef4af349671466a1d2e1bdcb651ea3c9f668afeca407ae101238b91629e2d7faf4117a5541fd9cec654998654efa63a8dfd7014feed7c0a63024162260c8a7afa8fe008663fe5330bf39133f35b7acedc93da09bf05c825e7a0dbf5de65e44bfeacf72512fb1533061f2dd02ee729745893e5bd2de35507cd7595e515d5fc962335264202323f2936b131271ce91e30f848311d29bd278096af05e3acc71d7ac02a0eb3c4f1474142f4ab7a2f7c396923e2fd41abbd622069734871bd0f2bf647c0f85bf539f1cc3d71ab83754b186d4fca668301b036b28b71ca9377c72d5acff701bc5b5a26fdcf0d44bebb07c0e87440ec4df94e4fdb6e1928596b55a643c3ea97feb9e0b3f52bf76d7bcfbacfc87e3e7531df950b864770326ade7173bcbfba396ce1ebd7c031c118787cb23daa915134c97d75b10378e0df879d8b4490e0654ab1b1024621f14755ab3f5c95e1fc32a4dee888dc65e272a1683413c6b643d416ed6cac48125d848552dfab5f9fa7b06ec8462cc2925a84b2b93285347dc9b885e1f60938571b90406484793dc6896de3f9e6e3603ab16e81dc9314f32563960f3fcb9cb161a41f82bd9c7a10612c36d547453c851521b30ff76338317c216f95fa9a2ce8e9ac35bf2825016b257842945fb451a54eeac557e98bfb55fe98aa71732c5e0d4186e932b0b2f5f4fc8f8e538dd46993b81f551601c63176a9e91eb0334ea6fea74c3704ce80f9a390e57ec4536ffb3675b62359c0c716bf62fb79338e2e39a807333a6b1fa8f340cbe4d11a10240a1e4aa008586b5b260b60986d058726"}) 03:39:06 executing program 7: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4069, 0xfe5, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x1400}, 0x0, {0x0, r4}}, 0x96) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)}, {&(0x7f0000000500)=""/194, 0xc2}], 0x2, &(0x7f0000000600)=""/165, 0xa5}, 0x0, 0x1, 0x0, {0x2, r4}}, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:39:06 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xbb, 0x10062, 0x0) 03:39:06 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2242.644173] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2242.781131] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:39:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() kcmp(0x0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x3f, 0x7, 0x0, 0x0, 0xb800, 0x200, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfa23, 0x4, @perf_bp={&(0x7f0000000100), 0xa}, 0x4000a, 0x9, 0x3ff, 0x9, 0x7, 0x2, 0x1, 0x0, 0x8, 0x0, 0x1}, r0, 0x3, 0xffffffffffffffff, 0xc) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r1, &(0x7f0000000680)='./file0\x00') renameat(r1, &(0x7f00000000c0)='./file0/file1\x00', r1, 0x0) 03:39:22 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:39:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffd) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x64) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000300)='-)*\x00', &(0x7f0000000340)='./file0\x00', r0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000003, 0x11, r1, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x2, 0x21, 0x0, 0x3, 0x4, 0x1}, 0x4b2) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xc0d00, 0x19c) open(&(0x7f0000000380)='./file0\x00', 0x5e3300, 0xd1) r4 = openat$incfs(r0, &(0x7f0000000440)='.pending_reads\x00', 0x173242, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x1000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}, {@msize={'msize', 0x3d, 0x2}}, {@access_any}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) sendfile(r0, r1, 0x0, 0x100000001) 03:39:22 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xbc, 0x10062, 0x0) 03:39:22 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:39:22 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f00", 0x45, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:39:22 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000000)=0x1) 03:39:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 51) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) [ 2258.459003] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 2258.459675] FAULT_INJECTION: forcing a failure. [ 2258.459675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2258.462468] EXT4-fs (loop2): get root inode failed [ 2258.462988] CPU: 1 PID: 16601 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2258.463739] EXT4-fs (loop2): mount failed [ 2258.464678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2258.464686] Call Trace: [ 2258.464709] dump_stack+0x107/0x167 [ 2258.464732] should_fail.cold+0x5/0xa [ 2258.468237] _copy_from_user+0x2e/0x1b0 [ 2258.468976] __copy_msghdr_from_user+0x91/0x4b0 [ 2258.469654] ? __ia32_sys_shutdown+0x80/0x80 [ 2258.470292] ? __lock_acquire+0x1657/0x5b00 [ 2258.470965] ___sys_recvmsg+0xd5/0x200 [ 2258.471531] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2258.472243] ? __lockdep_reset_lock+0x180/0x180 [ 2258.472913] ? _raw_spin_unlock_irq+0x27/0x30 [ 2258.473574] ? lock_acquire+0x197/0x470 [ 2258.474154] ? find_held_lock+0x2c/0x110 [ 2258.474909] ? __might_fault+0xd3/0x180 [ 2258.475633] ? lock_downgrade+0x6d0/0x6d0 [ 2258.476249] ? io_schedule_timeout+0x140/0x140 [ 2258.476930] do_recvmmsg+0x24c/0x6d0 [ 2258.477491] ? ___sys_recvmsg+0x200/0x200 [ 2258.478112] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2258.478922] __x64_sys_recvmmsg+0x20f/0x260 [ 2258.479557] ? __do_sys_socketcall+0x600/0x600 [ 2258.480245] do_syscall_64+0x33/0x40 [ 2258.480793] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2258.481546] RIP: 0033:0x7fb290a1fb19 [ 2258.482088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2258.484769] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2258.485888] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2258.486937] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2258.487985] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2258.489034] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2258.490080] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2258.500355] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:39:22 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xbd, 0x10062, 0x0) 03:39:22 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000080)=0xc0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r6, 0xffffffffffffffff, 0x0) r7 = dup2(r6, r6) ioctl$HIDIOCINITREPORT(r7, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x12c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x70000, {0x215d, 0x101, 0x4, 0x4}}}, @NL80211_ATTR_FILS_KEK={0x8, 0xf2, "3d3dcf38"}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x300, {0x20, 0x1ff, 0x1ff, 0x800}}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0xb0, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x20, @device_b, 0x401, "", 0x4, 0x3, @device_b, 0xfffffff8}}, @random_vendor={0xdd, 0x6a, "4b9191eb54a54354b3f320a970811ac1e4885a94adb806d2483def1336c1c23093aa30a7e8b7c7c9b401d788b2bb86a06ba8be1a43410c62df2f028fdc3215ab5f662a7ddda1c94d536363117f00085c4393dcb575b7776a38efcd11ff993634a946f54654a196edc9e5"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0x64, 0x20}}, @supported_rates={0x1, 0x2, [{0x4, 0x1}, {0x60}]}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0xb6, 0x40}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xf0, 0x0, 0x3f}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x8}}]}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x300, {0x800, 0x401, 0x1, 0x6}}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x12c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r8, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd38, 0x54}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="23867b1bd7e2"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0x81}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x26}]}, 0x54}, 0x1, 0x0, 0x0, 0x10810}, 0xc084) 03:39:22 executing program 0: r0 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r1, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) read(r1, &(0x7f0000000300)=""/209, 0xd1) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4e50, 0x400080) fsetxattr$security_selinux(r3, &(0x7f0000000180), &(0x7f0000000500)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x2) socket$packet(0x11, 0x2, 0x300) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x5) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) io_uring_setup(0x2e6e, &(0x7f0000000240)={0x0, 0x1507, 0x8, 0x3, 0x5d, 0x0, r0}) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:39:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 52) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:39:23 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f00", 0x45, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2258.746580] FAULT_INJECTION: forcing a failure. [ 2258.746580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2258.748732] CPU: 1 PID: 16728 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2258.749718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2258.750944] Call Trace: [ 2258.751337] dump_stack+0x107/0x167 [ 2258.751862] should_fail.cold+0x5/0xa [ 2258.752430] _copy_from_user+0x2e/0x1b0 [ 2258.753008] __copy_msghdr_from_user+0x91/0x4b0 [ 2258.753692] ? __ia32_sys_shutdown+0x80/0x80 [ 2258.754316] ? __lock_acquire+0x1657/0x5b00 [ 2258.754966] ___sys_recvmsg+0xd5/0x200 [ 2258.755533] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2258.756255] ? __lockdep_reset_lock+0x180/0x180 [ 2258.756933] ? lock_acquire+0x197/0x470 [ 2258.757498] ? find_held_lock+0x2c/0x110 [ 2258.758103] ? __might_fault+0xd3/0x180 [ 2258.758677] ? lock_downgrade+0x6d0/0x6d0 [ 2258.759279] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2258.760076] do_recvmmsg+0x24c/0x6d0 [ 2258.760619] ? ___sys_recvmsg+0x200/0x200 [ 2258.761214] ? lock_downgrade+0x6d0/0x6d0 [ 2258.761817] ? ksys_write+0x12d/0x260 [ 2258.762389] ? wait_for_completion_io+0x270/0x270 [ 2258.763135] ? rcu_read_lock_any_held+0x75/0xa0 [ 2258.763794] ? vfs_write+0x354/0xb10 [ 2258.764339] __x64_sys_recvmmsg+0x20f/0x260 [ 2258.764956] ? ksys_write+0x1a9/0x260 [ 2258.765506] ? __do_sys_socketcall+0x600/0x600 [ 2258.766173] do_syscall_64+0x33/0x40 [ 2258.766713] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2258.767461] RIP: 0033:0x7fb290a1fb19 [ 2258.767995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2258.770579] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2258.771675] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2258.772688] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2258.773697] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2258.774717] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2258.775738] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:39:23 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:39:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@xfs_parent={0x1c, 0x82, {0x1000, 0x5, 0x4, 0xfffffffd}}, &(0x7f0000000180), 0x0) renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x800) 03:39:23 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xbe, 0x10062, 0x0) 03:39:23 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@private1, r2}, 0x14) r3 = socket$inet(0x2, 0x3, 0xff) r4 = socket$inet(0x2, 0x3, 0xff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r7 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000100)={@broadcast, @multicast1, r8}, 0xc) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)="b683ae40f3fdac402b01fa055e4299bd37dddcc878d124b8", 0x18}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast1}}}], 0x40}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)="b683ae40f3fdac402b01fa055e4299bd37dddcc878d124b8", 0x18}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast1}}}], 0x40}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8937, &(0x7f0000000040)={'syz_tun\x00'}) [ 2258.924623] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 2258.930855] EXT4-fs (loop2): get root inode failed [ 2258.931714] EXT4-fs (loop2): mount failed 03:39:39 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 53) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:39:39 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:39:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x1c, r7, 0x911, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x60, r10, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xe000, {0x5, 0xf2ab, 0xd0d2, 0x9}}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x80, 0x0, 0x0, 0x0, {0x401, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x96a8, 0x1c}}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6, {0xff, 0x1, 0x18, 0x8000}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x240000e0}, 0x48084) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x70, r6, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008000}, 0x4005) 03:39:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x0) 03:39:39 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xbf, 0x10062, 0x0) [ 2274.713684] FAULT_INJECTION: forcing a failure. [ 2274.713684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2274.715360] CPU: 0 PID: 16956 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2274.716166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2274.717090] Call Trace: [ 2274.717412] dump_stack+0x107/0x167 [ 2274.717853] should_fail.cold+0x5/0xa [ 2274.718329] _copy_from_user+0x2e/0x1b0 [ 2274.718804] __copy_msghdr_from_user+0x91/0x4b0 [ 2274.719359] ? __ia32_sys_shutdown+0x80/0x80 [ 2274.719876] ? __lock_acquire+0x1657/0x5b00 [ 2274.720393] ___sys_recvmsg+0xd5/0x200 [ 2274.720849] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2274.721416] ? __lockdep_reset_lock+0x180/0x180 [ 2274.721952] ? _raw_spin_unlock_irq+0x27/0x30 [ 2274.722479] ? lock_acquire+0x197/0x470 [ 2274.722942] ? find_held_lock+0x2c/0x110 [ 2274.723427] ? __might_fault+0xd3/0x180 [ 2274.723888] ? lock_downgrade+0x6d0/0x6d0 [ 2274.724370] ? io_schedule_timeout+0x140/0x140 [ 2274.724912] do_recvmmsg+0x24c/0x6d0 [ 2274.725349] ? ___sys_recvmsg+0x200/0x200 [ 2274.725830] ? lock_downgrade+0x6d0/0x6d0 [ 2274.726315] ? ksys_write+0x12d/0x260 [ 2274.726769] ? wait_for_completion_io+0x270/0x270 [ 2274.727340] ? rcu_read_lock_any_held+0x75/0xa0 [ 2274.727875] ? vfs_write+0x354/0xb10 [ 2274.728310] __x64_sys_recvmmsg+0x20f/0x260 [ 2274.728809] ? ksys_write+0x1a9/0x260 [ 2274.729252] ? __do_sys_socketcall+0x600/0x600 [ 2274.729791] do_syscall_64+0x33/0x40 [ 2274.730229] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2274.730827] RIP: 0033:0x7fb290a1fb19 [ 2274.731269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2274.733632] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2274.734534] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2274.735346] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2274.736166] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2274.736939] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2274.737756] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:39:39 executing program 0: r0 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r1, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) read(r1, &(0x7f0000000300)=""/209, 0xd1) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, 0xfffffffffffffffd) r3 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x2000, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'net/igmp6\x00'}}, {@aname={'aname', 0x3d, 'net/igmp6\x00'}}], [{@seclabel}, {@smackfsdef={'smackfsdef', 0x3d, 'net/igmp6\x00'}}, {@measure}]}}) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:39:39 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f00", 0x45, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:39:39 executing program 6: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "d0ff47", 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0xf2, &(0x7f0000000000)={@local, @random="a92c2ae79bdd", @val={@val={0x9100, 0x0, 0x1, 0x3}, {0x8100, 0x1, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x20, 0x4, 0x3, 0x7, 0xdc, 0x65, 0x0, 0x2, 0x33, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4c, 0x1f, 0x1, 0x3, [{@local, 0x1}, {@empty, 0x20000}, {@rand_addr=0x64010101, 0x1}, {@multicast1, 0x1}, {@local}, {@empty, 0x7fff}, {@multicast1, 0x10001}, {@multicast1, 0xfffffffb}, {@rand_addr=0x64010101, 0x80000001}]}, @rr={0x7, 0xf, 0xf0, [@local, @empty, @multicast1]}, @rr={0x7, 0xf, 0xc4, [@empty, @local, @broadcast]}]}}, "a6ac409cffe6d2d912595c38e3e6b5a28474e09b033c4849f062dcc1aef1a8aea3be5296f485599fd34a5e8457c9bd405cbcf5300bae16ea570fadd5bbbb61b59aa0e6e0b9281b4f3b1967ba1aa645f428c12d9a83ff5342e0818424"}}}}, &(0x7f0000000100)={0x1, 0x1, [0xfcb, 0xb53, 0x3, 0xa6e]}) [ 2274.760825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16958 comm=syz-executor.7 [ 2274.784862] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 2274.786710] EXT4-fs (loop2): get root inode failed [ 2274.787436] EXT4-fs (loop2): mount failed [ 2274.829212] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:39:39 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xc0, 0x10062, 0x0) 03:39:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) r1 = inotify_init1(0x0) r2 = syz_io_uring_setup(0x17ea, &(0x7f0000000140)={0x0, 0x6879, 0x1, 0x3, 0x103}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r3, 0x0) setresuid(r3, 0x0, r3) r4 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r5}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) r7 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x20, &(0x7f00000001c0)) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@debug={'debug', 0x3d, 0x1}}, {@posixacl}, {@version_u}, {@cache_fscache}, {@dfltgid={'dfltgid', 0x3d, r8}}, {@mmap}], [{@fowner_eq}, {@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xde\xff\x00\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) fsetxattr$system_posix_acl(r2, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x1}, [{}, {0x2, 0x0, r3}, {0x2, 0x6, 0xee01}, {0x2, 0x1, 0xee00}, {0x2, 0x3, 0xee00}, {0x2, 0x4, 0xffffffffffffffff}], {0x4, 0x4}, [{0x8, 0x4}, {0x8, 0x6}, {0x8, 0x4, 0xee00}, {0x8, 0x4, 0xee00}, {0x8, 0x4, r6}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x4, 0xee01}, {0x8, 0x3, r8}, {0x8, 0x7, 0xffffffffffffffff}, {0x8, 0x4, 0xee00}], {0x10, 0x5}}, 0xa4, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000001800ffde0000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="2e2f66696c653000f75675638aaba73b6c1f"]) write$binfmt_elf64(r9, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x1, 0x3, 0x40, 0xfff, 0x3, 0x3, 0x6, 0xcd, 0x40, 0x3b8, 0xe0, 0x2, 0x38, 0x2, 0x9, 0x3, 0x401}, [{0x5, 0x1f, 0x2, 0x2, 0x5, 0x0, 0x7fffffff, 0x6}, {0x7, 0xffff, 0x1, 0x9, 0x6, 0xfff, 0x1, 0x9}], "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"}, 0x10b0) [ 2274.964977] FAULT_INJECTION: forcing a failure. [ 2274.964977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2274.966252] CPU: 0 PID: 17168 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2274.966969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2274.967821] Call Trace: [ 2274.968098] dump_stack+0x107/0x167 [ 2274.968472] should_fail.cold+0x5/0xa [ 2274.968873] _copy_from_user+0x2e/0x1b0 [ 2274.969285] __copy_msghdr_from_user+0x91/0x4b0 03:39:39 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 54) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) [ 2274.969767] ? __ia32_sys_shutdown+0x80/0x80 [ 2274.970326] ? __lock_acquire+0x1657/0x5b00 [ 2274.970761] ___sys_recvmsg+0xd5/0x200 [ 2274.971151] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2274.971631] ? __lockdep_reset_lock+0x180/0x180 [ 2274.972092] ? __fget_files+0x2cf/0x520 [ 2274.972493] ? lock_acquire+0x197/0x470 [ 2274.972881] ? find_held_lock+0x2c/0x110 [ 2274.973286] ? __might_fault+0xd3/0x180 [ 2274.973676] ? lock_downgrade+0x6d0/0x6d0 [ 2274.974096] do_recvmmsg+0x24c/0x6d0 [ 2274.974460] ? ___sys_recvmsg+0x200/0x200 [ 2274.974865] ? lock_downgrade+0x6d0/0x6d0 [ 2274.975279] ? ksys_write+0x12d/0x260 [ 2274.975664] ? wait_for_completion_io+0x270/0x270 [ 2274.976132] ? rcu_read_lock_any_held+0x75/0xa0 [ 2274.976586] ? vfs_write+0x354/0xb10 [ 2274.976957] __x64_sys_recvmmsg+0x20f/0x260 [ 2274.977379] ? ksys_write+0x1a9/0x260 [ 2274.977760] ? __do_sys_socketcall+0x600/0x600 [ 2274.978210] do_syscall_64+0x33/0x40 [ 2274.978573] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2274.979084] RIP: 0033:0x7fb290a1fb19 [ 2274.979456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2274.981255] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2274.982015] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2274.982728] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2274.983426] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2274.984127] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 03:39:39 executing program 6: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "d0ff47", 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0xf2, &(0x7f0000000000)={@local, @random="a92c2ae79bdd", @val={@val={0x9100, 0x0, 0x1, 0x3}, {0x8100, 0x1, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x20, 0x4, 0x3, 0x7, 0xdc, 0x65, 0x0, 0x2, 0x33, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4c, 0x1f, 0x1, 0x3, [{@local, 0x1}, {@empty, 0x20000}, {@rand_addr=0x64010101, 0x1}, {@multicast1, 0x1}, {@local}, {@empty, 0x7fff}, {@multicast1, 0x10001}, {@multicast1, 0xfffffffb}, {@rand_addr=0x64010101, 0x80000001}]}, @rr={0x7, 0xf, 0xf0, [@local, @empty, @multicast1]}, @rr={0x7, 0xf, 0xc4, [@empty, @local, @broadcast]}]}}, "a6ac409cffe6d2d912595c38e3e6b5a28474e09b033c4849f062dcc1aef1a8aea3be5296f485599fd34a5e8457c9bd405cbcf5300bae16ea570fadd5bbbb61b59aa0e6e0b9281b4f3b1967ba1aa645f428c12d9a83ff5342e0818424"}}}}, &(0x7f0000000100)={0x1, 0x1, [0xfcb, 0xb53, 0x3, 0xa6e]}) [ 2274.984831] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:39:39 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f00000000000000000100000000", 0x51, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2275.042724] tmpfs: Unknown parameter '' [ 2275.052432] EXT4-fs (loop2): invalid first ino: 0 03:39:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 55) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:39:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 03:39:55 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:39:55 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f00000000000000000100000000", 0x51, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:39:55 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xc1, 0x10062, 0x0) 03:39:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4000, 0x68) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x1e) unshare(0x48020200) sendmsg(r0, &(0x7f00000014c0)={&(0x7f0000000080)=@in={0x2, 0x4e23, @remote}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000100)="79704edcbde10f4359c90332dc9d5ebce8d463f179", 0x15}, {&(0x7f0000000140)="e905f6befb0a026106806fe7d388f12d6ec2cdc608fe5e803c4e34b5ece6cc3edb8d376c347a5d3743668632260e1f1ff8767111674dc311e4a37fc0d25e4bd064fd0be575ba36a463d38f90993dcd2cd19c0f4d4bf0c7ca9b6601d4eb", 0x5d}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="6b002f1fa11585414f37fdc009d632e933924ba16f8f57167131041f4a9a98990b19d82b22ff038890ccd8683fa1b82d038a5d3f43b1b1ffaae1dcdd4f8fdc373b68ee80864584", 0x47}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="f136682a76df8075d75a1551beabcdbdd9bc7a3e5fb900b8fbe495ef3734c502a4d91b67271920", 0x27}], 0x6, &(0x7f0000001380)=[{0x38, 0x113, 0xade8, "f71dee6ffb5c67b533dd8c7de68ac88fa149a6c25c972b85ff6908136d31512c01d329"}, {0xe8, 0x11, 0xfffff801, "2c5139d4b5c47020e36d3538624767029a615026b3691a54a9992629b38bcb0df83cdf9877e2fae89f9db08b6294e9ba3c8ee5eb067cbfb3eaafad4e53094c29c86061888caa7990a6ef513f8284c0ba87932bc655b0d0fbf12263dad4b0826be6a18edc46db7ba92342f420ea23380e94f428003055df8404c320179977b3cf611ddd99ab58e5a53d6b5bdc1ea5f79dbd71968431d95d9a6f07d3bd1f2f54a1af7d4a685511c8876d808ed0a2ffd6d6a96aead3f75fd2ce7ad2432d377d220dcbf7c16cf40328e811a91180f570060809f0ce0f86e4e43f"}], 0x120}, 0x4000) 03:39:55 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x40, 0x0, 0x0, 0x0, 0x109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffffff, 0x9) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x505902, 0x45) renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x0) 03:39:55 executing program 0: r0 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xffffffff, 0x0, 0xa66a}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r1, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) read(r1, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002e00ff0700000064740000000f743598e3ffffff"], 0x24}}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000840)='net/i\\6\x00\x00\x00\x8c\xed\xdf\xeaW\x84~\xc1\x8b\x9aq6\x9e\xfe\x1c\xd2\x9c\xc0\xf0\xdb\xa3\xe0\xdd\fG\\Z\xad\x91_\xc0\x86-[B\x1b\xfd\x90SN\xe6,\x8fl@k\x05\x19\xd0\xeb\xe0\t\"FRV\x89\xb5C\xfam\xfe\xc3$\xda-`\xd0*\xfc\x1dL\xb2\xd1\xd2\xab\xbe`E\xc1\x99\x99hqa\xcb)Z\xdd`\x99\x12\xc7\x88\x14\xe9\xa3\x83y[\xbe\xb7\xc0$\xec\x94\xa5\xba\xfe\x98\f6\n\a\x8d\xba\x82\x01!\x05\xdd\xee\xf5\x03Z_\xcd\xff\xa2e\xeb\xea\x93\xa0\x86a\"|\x1fm\xff67h+\xbfd1iA\x7fJ\xa7\xed\x9e\x9c#\xe51J\xda\xe7\x96[\x9ad6oG\xc5\"\xb4\x92a\xba\xd9N\xaf%\'@\x00\x00\x00\x00\x00\x00\x00\xfd\x93\x05\xcc\x84\x91$M\x9b\xe1\xb7#\xadO\x96\\N{\xf2Y\xf5\xb9\x1f\xe4\xe4ur\xc8D\xbaJ\xd0\x9dlpC\xd4\xce\xd0#\xdf\xd3.\xb6\xc6\xf8m7\x7f\xc31]r&\x82\x91_\x8c\xaa\xd1\xf9\xf2\xb6\xd2\xc7$l\xdb\x14\xd68\xeac\xda\xf3\x8cuY\x12\x14\r\x98\x13K\xb6\xc0P\x93\xd4\x9aP3b\xe6\xe9Y>\xcf\x85\xce\xe8\xe0\x90q\x80\xab\x10?l9>\xca\xf3\xe6\xaa\xf4\r\xfb\xa27\xd0R\a\xc0\xdc\fR\xb3\f\xefw\xbf\x83Hs\n`\x95\x7f\xca\xb2y\x10\xc9\xdcC\xfez\xc7c\x91o\x87Pn\xa1\xcc\xa3\xb1\xb2\xa4\x1eM\x9a_\xa0\x19\x9a\xc2\xedL 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2291.156444] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2291.157270] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2291.158036] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2291.158813] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2291.159708] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2291.160491] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:39:55 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xc2, 0x10062, 0x0) [ 2291.208249] EXT4-fs (loop2): invalid first ino: 0 03:39:55 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f00000000000000000100000000", 0x51, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2291.293431] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:39:55 executing program 0: syz_io_uring_complete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r1, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=@reiserfs_4={0x10, 0x4, {0xfffffff8, 0x4b4, 0x80, 0xf1b}}, 0x80000) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) read(r1, &(0x7f0000000300)=""/209, 0xd1) r3 = epoll_create(0x8) r4 = perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x6, 0x1, 0x0, 0x0, 0x1, 0x4000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x6380, 0x6, 0x8, 0x7, 0x4, 0x3f, 0x7fe, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xf, r0, 0xb) close(r4) socket$packet(0x11, 0x2, 0x300) r5 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:39:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 56) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:39:55 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xc3, 0x10062, 0x0) 03:39:55 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x16, 0x0, {0x0, r4}}, 0x41) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) [ 2291.450525] FAULT_INJECTION: forcing a failure. [ 2291.450525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2291.451864] CPU: 0 PID: 17531 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2291.452523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2291.453251] Call Trace: [ 2291.453508] dump_stack+0x107/0x167 [ 2291.453854] should_fail.cold+0x5/0xa [ 2291.454221] _copy_from_user+0x2e/0x1b0 [ 2291.454602] __copy_msghdr_from_user+0x91/0x4b0 [ 2291.455052] ? __ia32_sys_shutdown+0x80/0x80 [ 2291.455448] ? __lock_acquire+0x1657/0x5b00 [ 2291.455870] ___sys_recvmsg+0xd5/0x200 [ 2291.456239] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2291.456679] ? __lockdep_reset_lock+0x180/0x180 [ 2291.457117] ? __fget_files+0x2cf/0x520 [ 2291.457469] ? lock_acquire+0x197/0x470 [ 2291.457841] ? find_held_lock+0x2c/0x110 [ 2291.458229] ? __might_fault+0xd3/0x180 [ 2291.458581] ? lock_downgrade+0x6d0/0x6d0 [ 2291.458985] do_recvmmsg+0x24c/0x6d0 [ 2291.459343] ? ___sys_recvmsg+0x200/0x200 [ 2291.459745] ? recalibrate_cpu_khz+0x10/0x10 [ 2291.460169] ? lapic_next_deadline+0x1/0x50 [ 2291.460551] ? tick_program_event+0xa8/0x140 [ 2291.460972] __x64_sys_recvmmsg+0x20f/0x260 [ 2291.461382] ? __do_sys_socketcall+0x600/0x600 [ 2291.461823] do_syscall_64+0x33/0x40 [ 2291.462179] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2291.462625] RIP: 0033:0x7fb290a1fb19 [ 2291.462981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2291.464556] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2291.465270] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2291.465890] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2291.466505] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2291.467117] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2291.467733] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2291.476747] EXT4-fs (loop2): invalid first ino: 0 03:39:55 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:39:55 executing program 7: syz_io_uring_complete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r1, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=@reiserfs_4={0x10, 0x4, {0xfffffff8, 0x4b4, 0x80, 0xf1b}}, 0x80000) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) read(r1, &(0x7f0000000300)=""/209, 0xd1) r3 = epoll_create(0x8) r4 = perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x6, 0x1, 0x0, 0x0, 0x1, 0x4000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x6380, 0x6, 0x8, 0x7, 0x4, 0x3f, 0x7fe, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xf, r0, 0xb) close(r4) socket$packet(0x11, 0x2, 0x300) r5 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:39:55 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000", 0x57, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:39:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 57) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:39:55 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xb4, 0x0, 0x2, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x0) syz_io_uring_setup(0x16da, &(0x7f0000000100)={0x0, 0xedbc, 0x10, 0x2, 0x3e}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa}, 0x4) [ 2291.597909] FAULT_INJECTION: forcing a failure. [ 2291.597909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2291.599028] CPU: 0 PID: 17557 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2291.599674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2291.600427] Call Trace: [ 2291.600683] dump_stack+0x107/0x167 [ 2291.601024] should_fail.cold+0x5/0xa [ 2291.601385] _copy_from_user+0x2e/0x1b0 [ 2291.601752] __copy_msghdr_from_user+0x91/0x4b0 [ 2291.602185] ? __ia32_sys_shutdown+0x80/0x80 [ 2291.602580] ? __lock_acquire+0x1657/0x5b00 [ 2291.602997] ___sys_recvmsg+0xd5/0x200 [ 2291.603361] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2291.603814] ? __lockdep_reset_lock+0x180/0x180 [ 2291.604212] ? __fget_files+0x2cf/0x520 [ 2291.604582] ? lock_acquire+0x197/0x470 [ 2291.604946] ? find_held_lock+0x2c/0x110 [ 2291.605329] ? __might_fault+0xd3/0x180 [ 2291.605686] ? lock_downgrade+0x6d0/0x6d0 [ 2291.606043] do_recvmmsg+0x24c/0x6d0 [ 2291.606382] ? ___sys_recvmsg+0x200/0x200 [ 2291.606755] ? lock_downgrade+0x6d0/0x6d0 [ 2291.607141] ? ksys_write+0x12d/0x260 [ 2291.607499] ? wait_for_completion_io+0x270/0x270 [ 2291.607937] ? rcu_read_lock_any_held+0x75/0xa0 [ 2291.608328] ? vfs_write+0x354/0xb10 [ 2291.608683] __x64_sys_recvmmsg+0x20f/0x260 [ 2291.609081] ? ksys_write+0x1a9/0x260 [ 2291.609438] ? __do_sys_socketcall+0x600/0x600 [ 2291.609861] do_syscall_64+0x33/0x40 [ 2291.610199] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2291.610663] RIP: 0033:0x7fb290a1fb19 [ 2291.610978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2291.612643] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2291.613347] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2291.613937] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2291.614593] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2291.615178] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2291.615809] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2291.662376] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2291.718568] EXT4-fs (loop2): unsupported inode size: 0 [ 2291.719572] EXT4-fs (loop2): blocksize: 1024 03:40:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x20, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfff}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c044}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800e4e7b32b0ce606fe22b95d705c6d", @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff000008001400", @ANYRES32=r3], 0x38}}, 0x0) 03:40:12 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000", 0x57, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:40:12 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xc4, 0x10062, 0x0) 03:40:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 58) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:40:12 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:40:12 executing program 7: syz_io_uring_complete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r1, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=@reiserfs_4={0x10, 0x4, {0xfffffff8, 0x4b4, 0x80, 0xf1b}}, 0x80000) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) read(r1, &(0x7f0000000300)=""/209, 0xd1) r3 = epoll_create(0x8) r4 = perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x6, 0x1, 0x0, 0x0, 0x1, 0x4000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x6380, 0x6, 0x8, 0x7, 0x4, 0x3f, 0x7fe, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xf, r0, 0xb) close(r4) socket$packet(0x11, 0x2, 0x300) r5 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:40:12 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:40:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x40054}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000100)='selinuxfs\x00', 0x1) sendfile(r0, r1, 0x0, 0x401) r2 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r2, &(0x7f0000000680)='./file0\x00') renameat(r2, &(0x7f00000000c0)='./file0/file1\x00', r2, 0x0) inotify_init1(0x0) recvmmsg$unix(r0, &(0x7f0000002f80)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/158, 0x9e}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000300)=""/130, 0x82}], 0x3, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000580)=""/72, 0x48}, {&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f00000007c0)=""/147, 0x93}, {&(0x7f0000000600)=""/47, 0x2f}, {&(0x7f0000000880)=""/154, 0x9a}], 0x5, &(0x7f00000009c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)}], 0x1, &(0x7f0000000a80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/33, 0x21}, {&(0x7f0000000b80)=""/234, 0xea}, {&(0x7f0000000c80)=""/68, 0x44}, {&(0x7f0000000d00)=""/97, 0x61}, {&(0x7f0000000d80)=""/167, 0xa7}, {&(0x7f0000000e40)=""/12, 0xc}, {&(0x7f0000000e80)=""/18, 0x12}], 0x7}}, {{&(0x7f0000000f40)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000fc0)=""/204, 0xcc}, {&(0x7f00000010c0)=""/54, 0x36}, {&(0x7f0000001100)=""/222, 0xde}, {&(0x7f0000001200)=""/47, 0x2f}, {&(0x7f0000001240)=""/47, 0x2f}, {&(0x7f0000001280)=""/216, 0xd8}, {&(0x7f0000001380)=""/204, 0xcc}, {&(0x7f0000001480)=""/4, 0x4}, {&(0x7f00000014c0)=""/66, 0x42}], 0x9, &(0x7f0000001600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000001740)=@abs, 0x6e, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/143, 0x8f}, {&(0x7f0000001880)=""/142, 0x8e}, {&(0x7f0000001940)=""/192, 0xc0}, {&(0x7f0000001a00)=""/125, 0x7d}, {&(0x7f0000001a80)=""/116, 0x74}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/233, 0xe9}, {&(0x7f0000001c40)=""/37, 0x25}], 0x8, &(0x7f0000001d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000001e40)=@abs, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000002f00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}], 0x7, 0x40000000, &(0x7f0000003140)={0x77359400}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 03:40:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x9, 0xe6, 0x3f, 0xe1, 0x0, 0xffffffffffffff35, 0x823a6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x2012, 0x89a1, 0x1, 0x9, 0x8, 0x690a, 0x7b64, 0x0, 0x5, 0x0, 0x8001}, 0x0, 0x0, r0, 0x3) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="696f636861727865743d6312ab41b6703836312c00"]) [ 2307.951489] EXT4-fs (loop2): unsupported inode size: 0 [ 2307.952488] EXT4-fs (loop2): blocksize: 1024 [ 2307.953031] FAULT_INJECTION: forcing a failure. [ 2307.953031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2307.954776] CPU: 0 PID: 17688 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2307.955471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2307.956358] Call Trace: [ 2307.956637] dump_stack+0x107/0x167 [ 2307.957000] should_fail.cold+0x5/0xa [ 2307.957384] _copy_from_user+0x2e/0x1b0 [ 2307.957792] __copy_msghdr_from_user+0x91/0x4b0 [ 2307.958257] ? __ia32_sys_shutdown+0x80/0x80 [ 2307.958694] ? __lock_acquire+0x1657/0x5b00 [ 2307.959164] ___sys_recvmsg+0xd5/0x200 [ 2307.959562] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2307.960088] ? __lockdep_reset_lock+0x180/0x180 [ 2307.960551] ? __fget_files+0x2cf/0x520 [ 2307.960982] ? lock_acquire+0x197/0x470 [ 2307.961377] ? find_held_lock+0x2c/0x110 [ 2307.961812] ? __might_fault+0xd3/0x180 [ 2307.962238] ? lock_downgrade+0x6d0/0x6d0 [ 2307.962696] do_recvmmsg+0x24c/0x6d0 [ 2307.963101] ? ___sys_recvmsg+0x200/0x200 [ 2307.963552] ? lock_downgrade+0x6d0/0x6d0 [ 2307.963997] ? ksys_write+0x12d/0x260 [ 2307.964419] ? wait_for_completion_io+0x270/0x270 [ 2307.964926] ? rcu_read_lock_any_held+0x75/0xa0 [ 2307.965382] ? vfs_write+0x354/0xb10 [ 2307.965778] __x64_sys_recvmmsg+0x20f/0x260 [ 2307.966209] ? ksys_write+0x1a9/0x260 [ 2307.966610] ? __do_sys_socketcall+0x600/0x600 [ 2307.967073] do_syscall_64+0x33/0x40 [ 2307.967469] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2307.967976] RIP: 0033:0x7fb290a1fb19 [ 2307.968373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2307.970163] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2307.970958] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2307.971722] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2307.972428] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2307.973178] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2307.973882] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2307.976423] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:40:12 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xf1, 0xa3}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x321301, 0x0) fcntl$dupfd(r0, 0x0, r2) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002a00274e00000000000000d966d20029224a00000000000400000009000080999e00009c000000"], 0x24}}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000180), 0x4, 0x280500) open_by_handle_at(r3, &(0x7f00000001c0)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0xcb97, 0x3, 0xc68f, 0x932e}}, 0x10000) 03:40:12 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xc5, 0x10062, 0x0) 03:40:12 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000", 0x57, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:40:12 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0, 0x4e}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:40:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 59) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:40:12 executing program 7: r0 = epoll_create(0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x2, r1, 0x0) getsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = creat(0x0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000280)={&(0x7f0000000080)=""/32, 0x20, 0x1, 0xffff0001}) r5 = syz_open_dev$sg(&(0x7f0000000140), 0xfffffffffffffeff, 0x8a000) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0x93, &(0x7f0000000180)=""/147}, &(0x7f0000000240)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 03:40:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) r1 = fork() kcmp(0x0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x8, 0x4, 0x4, 0x0, 0x7, 0x10010, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x80000001, 0x2}, 0x411, 0x1000, 0x5, 0x9, 0x9, 0x0, 0xff00, 0x0, 0x6, 0x0, 0xea86}, r1, 0xe, 0xffffffffffffffff, 0x8) inotify_init1(0x0) 03:40:12 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2308.222736] EXT4-fs (loop2): unsupported inode size: 0 [ 2308.223666] EXT4-fs (loop2): blocksize: 1024 [ 2308.281023] FAULT_INJECTION: forcing a failure. [ 2308.281023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2308.282955] CPU: 1 PID: 17819 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2308.283982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2308.285185] Call Trace: [ 2308.285584] dump_stack+0x107/0x167 [ 2308.286118] should_fail.cold+0x5/0xa [ 2308.286688] _copy_from_user+0x2e/0x1b0 [ 2308.287273] __copy_msghdr_from_user+0x91/0x4b0 [ 2308.287969] ? __ia32_sys_shutdown+0x80/0x80 [ 2308.288616] ? __lock_acquire+0x1657/0x5b00 [ 2308.289264] ___sys_recvmsg+0xd5/0x200 [ 2308.289835] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2308.290546] ? __lockdep_reset_lock+0x180/0x180 [ 2308.291217] ? _raw_spin_unlock_irq+0x27/0x30 [ 2308.291882] ? lock_acquire+0x197/0x470 [ 2308.292460] ? find_held_lock+0x2c/0x110 [ 2308.293064] ? __might_fault+0xd3/0x180 [ 2308.293643] ? lock_downgrade+0x6d0/0x6d0 [ 2308.294248] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2308.295052] do_recvmmsg+0x24c/0x6d0 [ 2308.295617] ? ___sys_recvmsg+0x200/0x200 [ 2308.296221] ? lock_downgrade+0x6d0/0x6d0 [ 2308.296833] ? ksys_write+0x12d/0x260 [ 2308.297405] ? wait_for_completion_io+0x270/0x270 [ 2308.298113] ? rcu_read_lock_any_held+0x75/0xa0 [ 2308.298790] ? vfs_write+0x354/0xb10 [ 2308.299349] __x64_sys_recvmmsg+0x20f/0x260 [ 2308.299978] ? ksys_write+0x1a9/0x260 [ 2308.300537] ? __do_sys_socketcall+0x600/0x600 [ 2308.301218] do_syscall_64+0x33/0x40 [ 2308.301762] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2308.302503] RIP: 0033:0x7fb290a1fb19 [ 2308.303049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2308.305696] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2308.306809] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2308.307843] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2308.308877] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2308.309906] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2308.310934] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2322.299666] FAULT_INJECTION: forcing a failure. [ 2322.299666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2322.300909] CPU: 1 PID: 18039 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2322.301586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2322.302402] Call Trace: [ 2322.302672] dump_stack+0x107/0x167 [ 2322.303031] should_fail.cold+0x5/0xa [ 2322.303420] _copy_from_user+0x2e/0x1b0 [ 2322.303832] __copy_msghdr_from_user+0x91/0x4b0 [ 2322.304298] ? __ia32_sys_shutdown+0x80/0x80 [ 2322.304731] ? __lock_acquire+0x1657/0x5b00 [ 2322.305172] ___sys_recvmsg+0xd5/0x200 [ 2322.305555] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2322.306037] ? __lockdep_reset_lock+0x180/0x180 [ 2322.306495] ? trace_hardirqs_on+0x5b/0x180 [ 2322.306930] ? lock_acquire+0x197/0x470 [ 2322.307334] ? find_held_lock+0x2c/0x110 [ 2322.307773] ? __might_fault+0xd3/0x180 [ 2322.308187] ? lock_downgrade+0x6d0/0x6d0 [ 2322.308621] ? io_schedule_timeout+0x140/0x140 [ 2322.309114] do_recvmmsg+0x24c/0x6d0 [ 2322.309497] ? ___sys_recvmsg+0x200/0x200 [ 2322.309905] ? lock_downgrade+0x6d0/0x6d0 [ 2322.310318] ? ksys_write+0x12d/0x260 [ 2322.310710] ? wait_for_completion_io+0x270/0x270 [ 2322.311192] ? rcu_read_lock_any_held+0x75/0xa0 [ 2322.311668] ? vfs_write+0x354/0xb10 [ 2322.312040] __x64_sys_recvmmsg+0x20f/0x260 [ 2322.312464] ? ksys_write+0x1a9/0x260 [ 2322.312839] ? __do_sys_socketcall+0x600/0x600 [ 2322.313293] do_syscall_64+0x33/0x40 [ 2322.313662] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2322.314171] RIP: 0033:0x7fb290a1fb19 [ 2322.314540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2322.316354] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2322.317102] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2322.317799] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2322.318498] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2322.319197] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2322.319903] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:40:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xc6, 0x10062, 0x0) 03:40:26 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x1, 0x3) rt_sigqueueinfo(0x0, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x6}) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2800, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x1d, &(0x7f0000000300)={0x0, 0x5c3e, 0x8, 0x1, 0x3e1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) openat2(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000580)={0x22000, 0xc5, 0x1}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) io_uring_enter(r2, 0x76d2, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000240)=0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/400, @ANYRES32=r2, @ANYBLOB="2a8e0000000000002e2f66696c653000"]) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x80, 0x40, 0x5, 0x8, 0x0, 0x4, 0xca000, 0x10, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1820, 0x2, @perf_bp={&(0x7f0000000540), 0x5}, 0x660, 0xc00, 0xb5, 0x8, 0x20, 0x3, 0xd945, 0x0, 0x9, 0x0, 0x3}, r6, 0x7, r7, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) r8 = creat(&(0x7f0000000380)='./file0\x00', 0x28) write$binfmt_elf64(r8, &(0x7f0000000100)=ANY=[], 0xfdef) 03:40:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x6, 0x5, 0x6, 0x0, 0x1, 0x5044, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x7, @perf_config_ext={0xffffffff, 0x3}, 0x400, 0x5, 0x628, 0x4, 0x8, 0x4, 0x9, 0x0, 0x7f, 0x0, 0xc43a}, 0x0, 0x8, r0, 0xb) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r1, &(0x7f0000000680)='./file0\x00') renameat(r1, &(0x7f00000000c0)='./file0/file1\x00', r1, 0x0) inotify_init1(0x0) 03:40:26 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:40:26 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000340)=[{0x30, 0x0, 0x0, 0x10000002}, {0x6}]}, 0x10) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r3 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:40:26 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:40:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 60) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:40:26 executing program 6: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2322.388214] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2322.411404] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2322.413709] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 03:40:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 61) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:40:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xc7, 0x10062, 0x0) [ 2322.539931] FAULT_INJECTION: forcing a failure. [ 2322.539931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2322.541098] CPU: 1 PID: 18167 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2322.541721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2322.542465] Call Trace: [ 2322.542713] dump_stack+0x107/0x167 [ 2322.543040] should_fail.cold+0x5/0xa [ 2322.543392] _copy_from_user+0x2e/0x1b0 [ 2322.543773] __copy_msghdr_from_user+0x91/0x4b0 [ 2322.544197] ? __ia32_sys_shutdown+0x80/0x80 [ 2322.544593] ? __lock_acquire+0x1657/0x5b00 [ 2322.544991] ___sys_recvmsg+0xd5/0x200 [ 2322.545342] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2322.545782] ? __lockdep_reset_lock+0x180/0x180 [ 2322.546204] ? lock_acquire+0x197/0x470 [ 2322.546559] ? find_held_lock+0x2c/0x110 [ 2322.546930] ? __might_fault+0xd3/0x180 [ 2322.547287] ? lock_downgrade+0x6d0/0x6d0 [ 2322.547669] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2322.548165] do_recvmmsg+0x24c/0x6d0 [ 2322.548506] ? ___sys_recvmsg+0x200/0x200 [ 2322.548879] ? lock_downgrade+0x6d0/0x6d0 [ 2322.549256] ? ksys_write+0x12d/0x260 [ 2322.549611] ? wait_for_completion_io+0x270/0x270 [ 2322.550047] ? rcu_read_lock_any_held+0x75/0xa0 [ 2322.550465] ? vfs_write+0x354/0xb10 [ 2322.550804] __x64_sys_recvmmsg+0x20f/0x260 [ 2322.551187] ? ksys_write+0x1a9/0x260 [ 2322.551537] ? __do_sys_socketcall+0x600/0x600 [ 2322.551956] do_syscall_64+0x33/0x40 [ 2322.552289] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2322.552736] RIP: 0033:0x7fb290a1fb19 [ 2322.553071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2322.554679] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2322.555357] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2322.556049] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2322.556667] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2322.557284] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2322.557907] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:40:26 executing program 1: sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x63}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x39}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x3ff}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') r1 = fork() kcmp(0x0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0xb4, 0x0, 0x40, 0x0, 0x200, 0x800, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x1802, 0x100, 0x7ff, 0x3, 0x10000, 0xed7, 0x4, 0x0, 0x4, 0x0, 0x100}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x0) 03:40:26 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x34, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x15, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f83265549b"]}]}, 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000500)=0x5) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000640)) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e23, 0x8, @remote, 0x7fffffff}, 0x1c) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) fremovexattr(r0, &(0x7f0000000840)=@random={'trusted.', '\x1b\xc6\xe8\x86\xdam\x1b\xe48\v`\xdeH\xf4\xa4c\x00\x17\xfaP\xfa~\xb9\xef!=w\x81\xfcJD\xd9\xef!\x88\xec\xc6/o\xd3\xb1\xfa\xf1j\xc3\r\xb0\x1eO\xbb\'c\xfd\x92\xf5j\xe6MBO\xc2H\xd7\x85s\x10~H\xdc/]\tF\x06S\x898\x9c,\x95v\x8fe\x82\xdd\xf4\xb4_\x11\x8a\x04;\xc2\x94\v\xc2\x1a5;\x88(\x80j\xbbE\xc3\xd7B\xa5\x85\xeb\x06\xe6\xa4l\xff\xff\xff\x7f\xa7\xa2\xe2|i\xf5\xe8\akj\xa8\x01\x104\xad\x90h'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001340)=ANY=[]) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000600)) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x5) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80800, 0x110) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x44) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) unshare(0x48020200) [ 2322.582978] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. 03:40:26 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:40:26 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:40:27 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 62) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) [ 2322.733336] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2322.747279] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2322.821508] FAULT_INJECTION: forcing a failure. [ 2322.821508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2322.823508] CPU: 0 PID: 18258 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2322.824632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2322.825982] Call Trace: [ 2322.826425] dump_stack+0x107/0x167 [ 2322.827028] should_fail.cold+0x5/0xa [ 2322.827675] _copy_from_user+0x2e/0x1b0 [ 2322.828335] __copy_msghdr_from_user+0x91/0x4b0 [ 2322.829105] ? __ia32_sys_shutdown+0x80/0x80 [ 2322.829828] ? __lock_acquire+0x1657/0x5b00 [ 2322.830554] ___sys_recvmsg+0xd5/0x200 [ 2322.831203] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2322.832015] ? __lockdep_reset_lock+0x180/0x180 [ 2322.832741] ? lock_acquire+0x197/0x470 [ 2322.833394] ? find_held_lock+0x2c/0x110 [ 2322.834063] ? __might_fault+0xd3/0x180 [ 2322.834708] ? lock_downgrade+0x6d0/0x6d0 [ 2322.835410] do_recvmmsg+0x24c/0x6d0 [ 2322.836030] ? ___sys_recvmsg+0x200/0x200 [ 2322.836703] ? lock_downgrade+0x6d0/0x6d0 [ 2322.837388] ? ksys_write+0x12d/0x260 [ 2322.838028] ? wait_for_completion_io+0x270/0x270 [ 2322.838816] ? rcu_read_lock_any_held+0x75/0xa0 [ 2322.839561] ? vfs_write+0x354/0xb10 [ 2322.840177] __x64_sys_recvmmsg+0x20f/0x260 [ 2322.840863] ? ksys_write+0x1a9/0x260 [ 2322.841491] ? __do_sys_socketcall+0x600/0x600 [ 2322.842208] do_syscall_64+0x33/0x40 [ 2322.842816] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2322.843634] RIP: 0033:0x7fb290a1fb19 [ 2322.844246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2322.847124] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2322.848368] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2322.849516] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2322.850670] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2322.851832] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2322.852989] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2322.935737] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. 03:40:42 executing program 7: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:40:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xc8, 0x10062, 0x0) 03:40:42 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:40:42 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000180)={0x7800200b}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:40:42 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x5}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0xb99b43, 0x1a0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "7374bf600a2dbb0a10a4446998c60bc654676f080ecee8672b9b990319e9f34b4c45be9b1cbb8fbe1f4541599e2a8deeedad6067575d671432b4ba4028542704ab850b2cd326bd5a16431e3e06cbefba068d34f999e863befaed31fe2f898bdfe4043148f4d1cc27af274cc202dd9cd92b1891ba85c4048baa5cf0aa7a3d5dbef19adb89a7123a5c5cf1f42650df4c63aa25c0c5f606a072b8c1910206999409a39439cacd824f129adb4177e14f533050e77cfd6b9e760c12899b047feb4c8e5b746e5570db48fc8fafeccf98bad6d99a585091b403666ded97ce43cdf6dd1791052bc149861ea2585dfb28b538cc9fe6ffc5e07182615951fd668085ed124af574a07e3495491f19b1aa2a3b69028ccacd78524d988b224ab17ed905da0b840b4a9939e2af6efdf4221126075a8964d904883db014031e0924681a4ef3795071b256b75002a7df298c87c565b1d8a331e7d0c1000e1d707100917dfe107f87ebea9dca1b708b01cacf1c9f348c0d0fd64aa64193637c7169264d06f613c41be60f39b0cc9d813ae5fca2222832f86f2ae87e883efd48df36d16e6c1ca5c378f6ff0fbace91eb3099d744b16171fcc1ab7d5456392f0878ecf27e8caad7386663de490c3044eed7e7cb83e675716eda0cc09f219aadddd814c88048a7c6cefe69a79f2f7a234cfffbf19ac7a9f6ef59faf2776ac3d636904ec1bda09b1c9d8caeafa918983215d866f5cb6f1088e7e99a43425913d258a3dc8550fcbca3e0bec47503e24d709dd1fd1bb3cd92837d10387a0eebb98aab27950a2a66dc0b9bad3e4ef6393036d64949931ffe6479073790b3b885ac8563d4018e9227d644864c17f048daefbb192d15b56a2a440ad6d4ef5af2ac9904d8b69c64d2368928d7595594e6c3fd23229cb6aa80ec308301b1c94777900d34b1b3eea03dca765036a3f5351551affb585f22541074380b60ca062bf8a8a2324fe61ecad5733aec51e0c5ddc648280556b8a038b5816947b1637ef598cfd134cf9833d875fd23d22f5f74e74a4634d50a3ac908eed128f4297924296d95361b9504c08df4a0603eff93ee34bd45ed12e8d06b8f399fefef4ced732aad15b70f3e276101fa4b5a5c17435d0999b3345ccfe853c955e8b7927c7a171506b8e5b4de8a68cb5e80c3709a0e15643b5772d82d04859133e09fa8ab81ac042e67bc918f2847af14a4eb77c3fcac3132ec1af5a57d85acb9ce91d9d15019904396737ade63df938e6f054f8ee21e8994d45b0801ccd8ae8bda90128cb05eddd297d800412bc01fc5cfdfa9d473641fffc793b513da3f7565a27c4ff3678ac6f71560cc6cc95fb4d20f85b7934cb4a4f614182d331ab53b6a09ff47fc272b6c1f5aaca477bfdfed3fac942d639773b7a5656c526eb595d6fa9d301c425947f37088447cb4400c37750b76eb6c1f7933e43b27224c2fdc053e55125d00ab11428af674f58bd5c3ea1ce4762856afccbd37dd59a5e726f2e5e770bcc8372304fc2a33611234e3b0d411fcae8691e621b64581dc32b3d97c02920877b2c995018dcfff2da8687bc64332cffc3d355931561dc799d169f61d121f242dd3605e3fef8a46bf73998202d6a87671719896c61d729006104bdb7e926020f28260c75c2c754e5f073097d7031567e62cbfcbff541702cdaf498bbfe01e2948e6e164271ca4ab4df68a1569d29d3ce7029c0b58d2a1e6d179fa817ec9df17195c8b83a7a7508f18f0e3d07e8871f331d7a151bc11301c7dce402e6a5fda6f3096df2ddfeb48b3991e055c55d2a071ed66bf378e5c451f849cdbd7951cacad16d6b5734b71db866e77086bfab1797942633ec688d78bb2fccaae2b0e796b852b278bd4a4648d0811293e1bfe68e30b42eb27ac0a4e435e086b4cfeeb9fa539f0d800b6108e4c7b9d7237746770a3f3477646b7c9bfd2bc111679d40bffe221be492ba984df6cd4d7d8f9cbf7185e79804416be68d8a2bfa28e5bec4b57bf5f08eeecafabccd55744e49bb4a7dd1324908d91762b9884e7268d0bb6290be3b51091ae6ccf2ebbd4945dd7913bd38509a00ce38d955909bfa1f3740fc123a12e15b853b59b9b691460afdcda150d39e566a83eaa0c3b7bac9819bdbc7e0a620206be87ff2f8ea8091dbffa014d2f2eb919040a434cdeb3db68adf845d2ba751dc0e1ce4afd8672a5ecf0653b8c672c3265aa236a174185f4b4a291bda664bb79c13f8b6932a831385773898d194d2500b38fbfff8c4acafa5a80dfd3f1f906132885446f9f7ad787dbbdab593661ab1c255df879eaf4ca739deaa11379a5c6b650472257fa54b646b29ceb3dbe27e3584914f9f766bbbcc67abeffebb0df881a42b8671bba930b04d1d7710cc15d546ee69ad40e66f04eb28af8bd17b739e68ad75a239303fb97b18f8f08d2f95bdae0f245ebdfc3ecf555a6fd53f5a35af8b2dd016b227d209fc8323a7576e66a9913a0ad4f19d30d2b6f25ac8b5b6c762e2c68c76f9bd7818adbb3c9b194c09471482ec6898754469076b8674ab9e26b5977a0fa693160f18a01d2f2c362186ff75c205cec261d9e6c431ee672e4056b7e458ef02dca1167d09de5977210461758ed506290477a63c5af0698a1f4edf3bc569692bc9febd5fd641860dd34a6926af47ae7bdd3cce59a5b24b6944075e30ec2f2dbd043ebc57a39eaa5559bc4f21f08198e0daa2e8506b21160c8f9b629ad0e80d5e99e5cf4c4ceefb8d9fe5493ebcb066a647269fef2146f1ed55dac66974446e650e49db26ceb24c16c24885a2d2d011d11ec52d5b7a9c8096314d1dc7c992a1dee70be2fc0cc2d9fc94b0d02d479f6f4bfd3fa20df42568e27c0cea6caa1028d5dfbe6a9657053c06132387f9abfbaf93d9b335b69b168bf7fdaa0a44981dadc3358b50f1b24d390f8858d6775fa838388ff8a69b02bf446028485ba9e0c15731288c186b3cdf2fbc088f13f50e5eecc9b3a058d1369b7a254f11aa81a5fabd862bfd5226ce26e0199ef241badd55ba0d6087e9eb1661111a6afef1caf2bd54832bb5a3e8b864c8af220a8a115746c1646e78471ba2edb7c63fcff7f6be047a5f740525fbe5e259beee146dc2a609d3fd576e826ee1e4fce8ccbf75aa713514bda04ed4086cdd11a770cbe5782bca23f5f3ad8682609d5c5d4e5ca4e117d7423740b41081c6945b446223bb435c6ae2314552b7bf53a8b2c8a7a2a961d17315e0f7a660624b119c89ae81d2214b03cd79bc3eb355bf06811d7186b1f0a7219dd8d4096cb0df940719279357b853bc7c5bcf645aa65c12227859ce0851953fcefa6051f2a31e3666abde9ef1ece3eba658de696edf5d87a7d562dfe1f6bb9ac5e6773bc9069c732683715868cf14825345fb60665982549b9bb7c5b7d934ed0c4d136fa089f8459d473bf1ee678cf88c26f4f5ac681aa6dbe6ef78c26e7a3649ae0574f550f9fc64e8caa14586cbc43d8ec72a3170fc4f6c78fdbd40332c1f35adfc04be68a067f2c03325d624e21fa0e1fa6ea879caa84665bedefcd19759872824a0053a110af2b6099d8ea572b0c81cea39147bb2dca0eaefd4be8c3b59b98c27049f04ae5f3652ade0e1561238296d17979581b93d0ee26464fb5675b968cbc397558207fb1d5365f73994c0c8f2bcae0164e74d602a4856355b214af58b6357b2505779260ec73929eb4fe1047bbc2a125ff6c88718d2b8b8fb9c0d1cb1760748ffc5e4998dbaf8fad99df26b2eaf99bce2541d287b243d7b9cf0ecb25588d14c6228a6cb5413f48e3d07817d258c45ca0ab3494ca5b59f87abdf38e439b4a31d60d9474a52e465f36dd0cd56f00d4e5e563bfc6421b40a7522eb71894a698c19510fa7dc690b6b3f782d88e61ca635d5efd4c9c1725dbf24e0c8e246a2dc979e4750de8347687038f0441858bdf5a06bcba827d8d1327601943ca9fd004c121034fa6e1c8b9eff5da764961f5700eab97380e99b37f302239b528b36f5c9bbebaff25edae48fbe59dd272099af5c695a19b62f64485ba01ae8416c02f04360be933b8ba8a49c6c1188a78c3d36d0c61f61b4002bfeb669e29bbcb306f573528a749b085500c7649aea469fca867da4ca9eaecc75a70f41baeb80bf803402a9066dc1e8243192b78533e0ad590e14fd2bf2ce3ac943ade1fcefd247406785ee387d18e9afe8845481748fbadf4d081e01ecce50ef1fc5b457fa296b833d77390764e2af12f7930c6334476dc4cf45d9f272e364336810c11318bd0a95233005d66fe81a5708ae5fad8c7db17e6d97d2340651f7aa7a36e132a77a7a6206b36a95ccb5a48cb19bd3bb886ff0e77bc76653912149ca85895c4f80c373cbbd4305a91213e8ec5b7b18d8587d723c18f02854556aaaa540935eab2b7470a7c1c40c7e843ac1221a51e92eb05af2342fea7c853a46182c8384612aadb40145b95de565140003468eaca74b38bdf4dc640d0af80c3dd81747652c5fe15ffff8965a150a4ca6a9d9c91d067b4fac49b23cd2041dfdab22126c97d812b67ed638cc65d75d836bf439807cd7cd3cd0e6b30c81983e3f45a00282a14d401d81ac7c5544510dc7d157eeaa18b09df5ec949a22d7342b5b720b2a47251e995410f9b35d90824c1b19beb8575c9efe2aaa2a2011790a1099a924c01ca835fb7cc561eb2310a5331d4d9c4a9ee03a5f1364c17a7f4511c0c1b929c630cc110696f9e94b4107d0b75338fda2c5e0b8d46d19b98071e328f57debd56b4a0a9009913ac41518a08e6fa533edf20db0dc5eff43cd3ead623fc826ac03925490537d6b6a47f27031faa17f9852a3cb72d2088f33d35846a40758e60dab4b3980d032adc3e4faa61ff8aaea6b08bc9705cf097701e9af550fa43ec06c0ae2257927eebcbbbf4a05ad8097597943d6aed8a950ba32bc0d19827539019397e2fffa5f7379ffd7ec266f0c1cd947aab0c9e73c2796bd4c32fa0a0effbc84570efdebd3ac1eb57cc89cdbed91ed43a64cccfeba427a017a07d84acc850a45e2f26639598ed061ea81b60fb1873983591d446129ba8b27a4aef3311292017e3cbc00533824888ef80ef1a85c86a370dc11694d2f455e04ceb8811afa53aac77c65b38703d18167aedcc077c988dd9832ee1999a82c8752b921bceae484c19cee6828eef373c979b5c3f208080c8dcb38c53e384bebed6c41c3b9d6958bd2b952d82d17b262dbf30f90ab5c5d197ccee9f6b6525928b0100ffdeace644e159500495ff5a0ea7df7b9ab63617e3879818e25341e97d839beefdf248222cadd61a5d76b1ff34704bb78656afef7994904da269f973598217edc3be93157185aa15ef225f6471d7786a5e28d0f145b96566e101bf46723486867b9aa90f9eb4d1f5612d4950160c1504a367daf984"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={0x101000, 0x28, 0x18}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r4, &(0x7f0000000240), 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x10041, 0x14) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) lseek(r1, 0x0, 0x2) timerfd_create(0x0, 0x80800) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r1, 0x0, 0x200f5ef, 0x0) 03:40:42 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x0) 03:40:42 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 63) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:40:42 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2338.223988] FAULT_INJECTION: forcing a failure. [ 2338.223988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2338.226494] CPU: 1 PID: 18312 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2338.227527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2338.228751] Call Trace: [ 2338.229154] dump_stack+0x107/0x167 [ 2338.229698] should_fail.cold+0x5/0xa [ 2338.230281] _copy_from_user+0x2e/0x1b0 [ 2338.230873] __copy_msghdr_from_user+0x91/0x4b0 [ 2338.231561] ? __ia32_sys_shutdown+0x80/0x80 [ 2338.232223] ? __lock_acquire+0x1657/0x5b00 [ 2338.232889] ___sys_recvmsg+0xd5/0x200 [ 2338.233471] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2338.234190] ? __lockdep_reset_lock+0x180/0x180 [ 2338.234887] ? lock_acquire+0x197/0x470 [ 2338.235473] ? find_held_lock+0x2c/0x110 [ 2338.236089] ? __might_fault+0xd3/0x180 [ 2338.236672] ? lock_downgrade+0x6d0/0x6d0 [ 2338.237281] ? lock_is_held_type+0x51/0x110 [ 2338.237935] do_recvmmsg+0x24c/0x6d0 [ 2338.238495] ? ___sys_recvmsg+0x200/0x200 [ 2338.239103] ? lock_downgrade+0x6d0/0x6d0 [ 2338.239734] ? ksys_write+0x12d/0x260 [ 2338.240312] ? wait_for_completion_io+0x270/0x270 [ 2338.241017] ? rcu_read_lock_any_held+0x75/0xa0 [ 2338.241694] ? vfs_write+0x354/0xb10 [ 2338.242247] __x64_sys_recvmmsg+0x20f/0x260 [ 2338.242881] ? ksys_write+0x1a9/0x260 [ 2338.243441] ? __do_sys_socketcall+0x600/0x600 [ 2338.244127] do_syscall_64+0x33/0x40 [ 2338.244671] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2338.245421] RIP: 0033:0x7fb290a1fb19 [ 2338.245972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2338.248644] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2338.249755] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2338.250791] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2338.251833] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2338.252874] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2338.253920] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2338.263506] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2338.263767] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2338.290135] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 03:40:42 executing program 0: r0 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r1, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000500)=""/103, 0x67}, {&(0x7f0000000580)=""/100, 0x64}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x3) read(r1, &(0x7f0000000300)=""/209, 0xd1) r3 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) r5 = signalfd4(r0, &(0x7f00000000c0), 0x8, 0x800) bind$unix(r5, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:40:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xc9, 0x10062, 0x0) 03:40:42 executing program 7: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:40:42 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10, &(0x7f0000000380)={'trans=virtio,', {[{@uname={'uname', 0x3d, '#! '}}, {@version_9p2000}], [{@subj_user={'subj_user', 0x3d, 'tmpfs\x00'}}, {@dont_measure}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}]}}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) fcntl$dupfd(r2, 0x0, r1) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0/file1', [{}, {0x20, 'tmpfs\x00'}, {0x20, 'tmpfs\x00'}], 0xa, "24ade1209cd1eaf01558dc9257d127d0f21463a3e2417180ce8016c4ca08f68f88df3c192095ac6289a12a6871aeb0640d9ef735347abae55526662ab01abd2197ee49e0c4cc71e498edb1c1e2e4d10707008d784a7f5679a87946b29218e77ff587baf7db19c65587d9029ba9a70e512b0d4d3ed9cd58d1321b00c5bc209a88795eaa460fb725a475e858089200278a2d9b443a765a16a953c624c4e5014e8cf492a94c60eb0e61d9cfec2dd7e6b699ff5552cc99c4066902b54c2fc14ffdd66e805f77e24e2ec6833da641318e815023392f37282d281a811841b9c93aa71fc60b72e18262df33d011a4be6640747f006d"}, 0x112) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x484940, 0x0) renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) open$dir(&(0x7f0000000400)='./file0/file1\x00', 0x488080, 0x0) inotify_init1(0x0) 03:40:42 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r3 = fcntl$dupfd(r2, 0x0, r1) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7182ec245f6cc327, 0x40010, r3, 0xcf3e1000) flock(r0, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup2(r4, r0) [ 2338.553560] 9pnet_virtio: no channels available for device syz 03:40:42 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:40:42 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 64) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:40:42 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40408c1}, 0x800) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:40:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xca, 0x10062, 0x0) 03:40:42 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b000000000200", 0x5b, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:40:43 executing program 6: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2338.752873] FAULT_INJECTION: forcing a failure. [ 2338.752873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2338.757704] CPU: 0 PID: 18538 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2338.758819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2338.760145] Call Trace: [ 2338.760573] dump_stack+0x107/0x167 [ 2338.761159] should_fail.cold+0x5/0xa [ 2338.761782] _copy_from_user+0x2e/0x1b0 [ 2338.762429] __copy_msghdr_from_user+0x91/0x4b0 [ 2338.763173] ? __ia32_sys_shutdown+0x80/0x80 [ 2338.763888] ? __lock_acquire+0x1657/0x5b00 [ 2338.764605] ___sys_recvmsg+0xd5/0x200 [ 2338.765241] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2338.766029] ? __lockdep_reset_lock+0x180/0x180 [ 2338.766779] ? __fget_files+0x2cf/0x520 [ 2338.767436] ? lock_acquire+0x197/0x470 [ 2338.768082] ? find_held_lock+0x2c/0x110 [ 2338.768738] ? __might_fault+0xd3/0x180 [ 2338.769368] ? lock_downgrade+0x6d0/0x6d0 [ 2338.770052] do_recvmmsg+0x24c/0x6d0 [ 2338.770655] ? ___sys_recvmsg+0x200/0x200 [ 2338.771315] ? lock_downgrade+0x6d0/0x6d0 [ 2338.771993] ? ksys_write+0x12d/0x260 [ 2338.772622] ? wait_for_completion_io+0x270/0x270 [ 2338.773401] ? rcu_read_lock_any_held+0x75/0xa0 [ 2338.774149] ? vfs_write+0x354/0xb10 [ 2338.774747] __x64_sys_recvmmsg+0x20f/0x260 [ 2338.775434] ? ksys_write+0x1a9/0x260 [ 2338.776050] ? __do_sys_socketcall+0x600/0x600 [ 2338.776790] do_syscall_64+0x33/0x40 [ 2338.777384] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2338.778198] RIP: 0033:0x7fb290a1fb19 [ 2338.778791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2338.781694] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2338.782906] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2338.784042] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2338.785164] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2338.786287] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2338.787418] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2338.842180] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2354.535100] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:40:58 executing program 7: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:40:58 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:40:58 executing program 6: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 03:40:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 65) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:40:58 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b000000000200", 0x5b, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:40:58 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/161, 0xa1}, {&(0x7f0000000640)=""/117, 0x75}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x5, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000500)=ANY=[]) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@multicast2, @empty}, 0xc) 03:40:58 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r1, &(0x7f0000000680)='./file0\x00') renameat(r1, &(0x7f00000000c0)='./file0/file1\x00', r1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) r3 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3f, 0x1f, 0x9, 0xe5, 0x0, 0x9, 0x80800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x6, 0x7}, 0x5008, 0x40, 0x0, 0x0, 0x9781, 0x3, 0x1, 0x0, 0x5, 0x0, 0xffff}, 0xffffffffffffffff, 0x3, r0, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) chown(&(0x7f0000000100)='./file0\x00', r2, r5) inotify_init1(0x0) 03:40:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xcb, 0x10062, 0x0) [ 2354.597499] FAULT_INJECTION: forcing a failure. [ 2354.597499] name fail_usercopy, interval 1, probability 0, space 0, times 0 03:40:58 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2354.599933] CPU: 0 PID: 18583 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2354.600669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2354.601807] Call Trace: [ 2354.602179] dump_stack+0x107/0x167 [ 2354.602694] should_fail.cold+0x5/0xa [ 2354.603227] _copy_from_user+0x2e/0x1b0 [ 2354.603780] __copy_msghdr_from_user+0x91/0x4b0 [ 2354.604437] ? __ia32_sys_shutdown+0x80/0x80 [ 2354.605044] ? __lock_acquire+0x1657/0x5b00 [ 2354.605659] ___sys_recvmsg+0xd5/0x200 [ 2354.606200] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2354.606871] ? __lockdep_reset_lock+0x180/0x180 [ 2354.607514] ? lock_acquire+0x197/0x470 [ 2354.608080] ? find_held_lock+0x2c/0x110 [ 2354.608652] ? __might_fault+0xd3/0x180 [ 2354.609209] ? lock_downgrade+0x6d0/0x6d0 [ 2354.609706] do_recvmmsg+0x24c/0x6d0 [ 2354.610232] ? ___sys_recvmsg+0x200/0x200 [ 2354.610797] ? lock_downgrade+0x6d0/0x6d0 [ 2354.611377] ? ksys_write+0x12d/0x260 [ 2354.611930] ? wait_for_completion_io+0x270/0x270 [ 2354.612610] ? rcu_read_lock_any_held+0x75/0xa0 [ 2354.613264] ? vfs_write+0x354/0xb10 [ 2354.613792] __x64_sys_recvmmsg+0x20f/0x260 [ 2354.614391] ? ksys_write+0x1a9/0x260 [ 2354.614926] ? __do_sys_socketcall+0x600/0x600 [ 2354.615564] do_syscall_64+0x33/0x40 [ 2354.616058] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2354.616764] RIP: 0033:0x7fb290a1fb19 [ 2354.617273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2354.619768] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2354.620804] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2354.621779] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2354.622764] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2354.623737] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2354.624545] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2354.651926] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2354.684626] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 2354.763986] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:41:17 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:41:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xcc, 0x10062, 0x0) 03:41:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 66) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:41:17 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x1c, 0x0, 0x911, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9, 0x5c}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, "9c6726cc1a140196"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x80}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xd888}]}, 0x58}, 0x1, 0x0, 0x0, 0x814}, 0x880) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000006c0)={0x0, 0x1, 0x2, 0x1}) write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[], 0x26c) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32, @ANYRESDEC], 0x40}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0xffffffffffffffff}, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0xda}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "c481afb4b5239c576ed53b2d20550e10"}, @exp_smc={0xfe, 0x6}, @eol, @mptcp=@mp_join={0x1e, 0x3, 0x7}, @window={0x3, 0x3, 0xcf}, @exp_fastopen={0xfe, 0x6, 0xf989, "f2d3"}, @eol, @eol]}}}}}}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) ftruncate(0xffffffffffffffff, 0x3) clone3(&(0x7f0000000200)={0x44004100, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x1400}, 0x0, {0x0, r2}}, 0x96) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r2}}, 0xff) inotify_init1(0x0) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f0000000800)='./file0/file1\x00', 0x0, 0x5, &(0x7f0000000b40)=[{&(0x7f0000000840)="4a0e40122069efbe682f74f9ab7a410d36da1962375b0f724896b2335e27cc27dfbeaf23c138936121202a9455cbd95125a31c1138ad08ac9c702b3630e544378607860db04fa2ac932db68c1c0aaaf6b6aee6e0a6f86c84f69e1059bb14ac9cb80d45ee6f1a4dc12c23d05865e709c1ce02670b60f5d1c3f2ab676853dd220c6c7c5d6d6e780866313833db5b6b6993c27b54fadf480571ecdae01b", 0x9c, 0x40}, {&(0x7f0000000900)="0cb5d6", 0x3, 0x3630}, {&(0x7f0000000940)="1e1a0fde3704d5d743cab46e621eca6c7a78b719c7f04036e0aef3d3eafa4d8ba9afbcce96a08e82da4efc81c4c7b95ff54d3fed03faf65c38e2c7783086fc7dcf670a89d1ad002467b7a5c01a0e8296395dfc2d871c41553197f39285b9803a863d1437b810de665b1896a5cf246f4a8f1d76aef43a8b115f1528ffd6680eb04bf49d23e7c3d996fbdbc4ab7563a8e6e84afd35c1bd2b2e7974ebbeeeed9cfb2325f17819d40766276c1ea6ffe55aaa8d1115", 0xb3, 0x2}, {&(0x7f0000000a00)="9dee0328071b53bfa304f9a42d580518b559997bf0f2853c126cf03f95e1390fce5e574ddad24ba7a3a2ffc6e6684a2c54958d994956dbc0ad3ee729bc9555e2d5b614a898fe95d838648a37f4450cd2fe5d105bd9f87227833aa6dab55e3f1ae9071b4deec6b806c8d02ade2f75caee344471b2e6ae43095b25f21fc3deae3f7f2f0195bdde0bdb8772ed4d79d8fd7342c84eb7ca03b2334ddf8fd8cb5bcdd6a9365a6a574c0d20db9a2a765091eff6a7901ac0f70517d9a436b78847b54a", 0xbf, 0x3ff}, {&(0x7f0000000ac0)="2195feca93083c998cfb9b92366b68aa5a651f1c6b280b429e7059c29ddcbacdd54775fbc2fa0b90f98808fc2eae1b8c14afe148490012a1ae2bddd9febce1e821874d64fa808a598bc5cdc1d72add8b53042619cec2aed1f1077e3d98012b3345be09606acc111e5406e45ed4e8839b4a", 0x71, 0x4}], 0x2000, &(0x7f0000000bc0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x30, 0x36, 0x70]}}, {@huge_advise}], [{@dont_hash}, {@obj_user={'obj_user', 0x3d, 'tmpfs\x00'}}, {@uid_eq}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@dont_appraise}]}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) recvmsg(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/209, 0xd1}, {&(0x7f00000004c0)=""/246, 0xf6}], 0x5, &(0x7f00000006c0)=""/106, 0x6a}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r1, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x1400}, 0x0, {0x0, r6}}, 0x96) syz_io_uring_submit(r5, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x1, 0x6000, @fd_index=0x4, 0x4, &(0x7f0000000740)="0ce83378e32a41f48b76508d1802a38cef81cbf82548da0cd2841424000009f63757af4573942eccc8bd09304115a03434feffe4782c27f2c9b2125fd1bc7a04a6384a8a178bb17044c1208cd217ff949455bab249552bb87e60004a059dbbd1f525ace53933ff497fe2a03a6001d68643063564e5d506061e5ba86ef290995049ca77e67d9dfdef334f99c5109d883b3e84dc53662280cf37d6e334f4031c0d6839f6e1041f4fd5597d2b3977d29bbbcd5cb75e65c8", 0xb6, 0x1, 0x1, {0x0, r6}}, 0xff) 03:41:17 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b000000000200", 0x5b, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:41:17 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@local, @rand_addr=0x64010101}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000200000000000000002000000000"], 0x14}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000000c0)={0x10}) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:41:17 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200), 0xa06011, &(0x7f00000019c0)={[], [{@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+-{:${]'}}, {@appraise_type}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001540)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000001740)={0x3, 0x80, 0x41, 0x3, 0x4, 0x81, 0x0, 0x2, 0x82000, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x5022, 0x7}, 0x19c40, 0x9, 0xfffffffd, 0x8, 0x4, 0x4, 0x2, 0x0, 0x3, 0x0, 0x1}, 0xffffffffffffffff, 0x4, r0, 0x9) sendmsg$nl_generic(r0, &(0x7f0000001980)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001940)={&(0x7f0000001800)={0x104, 0x3f, 0x8, 0x70bd2d, 0x25dfdbfd, {0x16}, [@generic="4a097fceb1901b6134f41f408b51f7e2dad446c96140cc761caa20ed3e5f8b687953c18aaec04b68249be0a64caed98975ccd76308fb1f7b70433dee64841cc736d7e65d10a4615054136e797845d4a0a71a010989338011545703b02e154ff28069fc842746ae71711136bf43be5e3243f5a151f67cce11751827daada2ad211ad1a51c5b8a387de74cd3cdfdc54b1b3ce1f698d2bfa2613743f87c547ed75e9066a344335e05bb324954efbd832054b02b242cf8168d31d15d2ed4c7cfb658a61af5051b167a1b0e89c14710b4f86c91d351d26417ca94a745fa82d89405608d14164515bb075375", @nested={0x4, 0x7b}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x4) setresuid(0xee00, r4, 0x0) setresuid(r4, 0x0, r4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x2c, r6, 0x20, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x8}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x11) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x6, &(0x7f0000001480)=[{&(0x7f0000000240)="aafa17ce448dc42d6520e905c99761fc294ede712925d6c029e1f56a68b41aa9e494e85037f149438820171789b7f71f952a4e37d2f0f4ec1ec92342ac1318a4086d4a3c382f6213d24a9b12ec154e46f53e7c96e75f4d39c3b2702d2a642742d703b0e2a8463e9ea0fe979a526c65688baca3a43a3774db2ac69e5ca967ab41eaad68c943fa6a0056083ae5e16087dbb536d0c88c1007daad7cec15581fae21f913e276ec59d9077fc08337eeb2547e23", 0xb1, 0x8001}, {&(0x7f0000000300)="9bbadb8d0243f35481803117cdddef3b3cd516eef1662ea72e6107aa348108962ace2d3d873417d9ec361921d79b2801d6adf401997b8e13ccbe5de1a033bb14de3275041ed06d37ef36a39f42884fb46718e79a9812e9879b204fe33f1192fe3e2664223e436a23971837e4faed9d2168899f234136aa91d12c8459cba3840dc14c1d3d00905b45aaaa132cd72734eb4e59bab7c1532927b3b3bcdfc41af1df67337801137cb6c0535aff29f05cb4de4676e79d1540529af01048d13c9c89101c70963e4ed569b28bdbaa61546020555843a5867d0b7d3d942aa50776600b24bc65c6f137df595e422f5fa420993c880e05", 0xf2, 0x401}, {&(0x7f0000000400)="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", 0x1000, 0x6313}, {&(0x7f00000000c0)="0830a1fcd1ba1715e9727774eb80a4368c847cca2a306d12555427800ca0558678c8e60398ec4bff05f478", 0x2b, 0x3}, {&(0x7f0000001400)="ec5e169971f9a5b4373febac88bedecee7954577e5358071f3cf610a020a4fe5bee536cf75a170dc6d2ae37beecdf3f7eae6b43d2f7028445db73080dca866fb81f3a9787d7d4f2c7477692c831be60535f05a", 0x53, 0x8001}, {&(0x7f0000001e00)="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", 0x1000, 0x29f}], 0x40000, &(0x7f0000001640)={[{@resgid={'resgid', 0x3d, r2}}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fowner_gt={'fowner>', r3}}, {@dont_hash}, {@euid_gt={'euid>', r4}}, {@measure}, {@permit_directio}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001700)={{0x1, 0x1, 0x18, r0, {r3, r5}}, './file1\x00'}) [ 2372.757993] FAULT_INJECTION: forcing a failure. [ 2372.757993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2372.760367] CPU: 1 PID: 18711 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2372.761629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2372.763134] Call Trace: [ 2372.763622] dump_stack+0x107/0x167 [ 2372.764296] should_fail.cold+0x5/0xa [ 2372.764997] _copy_from_user+0x2e/0x1b0 [ 2372.765730] __copy_msghdr_from_user+0x91/0x4b0 [ 2372.766584] ? __ia32_sys_shutdown+0x80/0x80 [ 2372.767394] ? __lock_acquire+0x1657/0x5b00 [ 2372.768230] ___sys_recvmsg+0xd5/0x200 [ 2372.768944] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2372.769853] ? __lockdep_reset_lock+0x180/0x180 [ 2372.770518] ? __fget_files+0x2cf/0x520 [ 2372.771248] ? lock_acquire+0x197/0x470 [ 2372.771980] ? find_held_lock+0x2c/0x110 [ 2372.772754] ? __might_fault+0xd3/0x180 [ 2372.773493] ? lock_downgrade+0x6d0/0x6d0 [ 2372.774279] do_recvmmsg+0x24c/0x6d0 [ 2372.774965] ? ___sys_recvmsg+0x200/0x200 [ 2372.775735] ? lock_downgrade+0x6d0/0x6d0 [ 2372.776516] ? mark_held_locks+0x9e/0xe0 [ 2372.777288] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2372.778043] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2372.779030] __x64_sys_recvmmsg+0x20f/0x260 [ 2372.779822] ? __do_sys_socketcall+0x600/0x600 [ 2372.780688] do_syscall_64+0x33/0x40 [ 2372.781367] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2372.782297] RIP: 0033:0x7fb290a1fb19 [ 2372.782994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2372.786297] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2372.787686] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2372.788991] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2372.790301] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2372.791606] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2372.792925] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2372.848275] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2372.855788] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 03:41:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 67) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:41:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0/file1\x00'}) mknodat$loop(r1, &(0x7f0000000140)='./file0/file1/file0\x00', 0x6000, 0x0) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x0) 03:41:17 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x1c, 0x0, 0x911, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9, 0x5c}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, "9c6726cc1a140196"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x80}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xd888}]}, 0x58}, 0x1, 0x0, 0x0, 0x814}, 0x880) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000006c0)={0x0, 0x1, 0x2, 0x1}) write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[], 0x26c) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32, @ANYRESDEC], 0x40}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0xffffffffffffffff}, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0xda}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "c481afb4b5239c576ed53b2d20550e10"}, @exp_smc={0xfe, 0x6}, @eol, @mptcp=@mp_join={0x1e, 0x3, 0x7}, @window={0x3, 0x3, 0xcf}, @exp_fastopen={0xfe, 0x6, 0xf989, "f2d3"}, @eol, @eol]}}}}}}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) ftruncate(0xffffffffffffffff, 0x3) clone3(&(0x7f0000000200)={0x44004100, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xcd, 0x10062, 0x0) 03:41:17 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_mr_cache\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:41:17 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:41:17 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:41:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xce, 0x10062, 0x0) [ 2373.040514] FAULT_INJECTION: forcing a failure. [ 2373.040514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2373.042396] CPU: 1 PID: 18851 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2373.043378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2373.044540] Call Trace: [ 2373.044925] dump_stack+0x107/0x167 [ 2373.045447] should_fail.cold+0x5/0xa [ 2373.045997] _copy_from_user+0x2e/0x1b0 [ 2373.046566] __copy_msghdr_from_user+0x91/0x4b0 [ 2373.047226] ? __ia32_sys_shutdown+0x80/0x80 [ 2373.047847] ? __lock_acquire+0x1657/0x5b00 [ 2373.048492] ___sys_recvmsg+0xd5/0x200 [ 2373.049047] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2373.049748] ? __lockdep_reset_lock+0x180/0x180 [ 2373.050414] ? lock_acquire+0x197/0x470 [ 2373.050970] ? find_held_lock+0x2c/0x110 [ 2373.051547] ? __might_fault+0xd3/0x180 [ 2373.052120] ? lock_downgrade+0x6d0/0x6d0 [ 2373.052719] ? io_schedule_timeout+0x140/0x140 [ 2373.053380] do_recvmmsg+0x24c/0x6d0 [ 2373.053914] ? ___sys_recvmsg+0x200/0x200 [ 2373.054495] ? lock_downgrade+0x6d0/0x6d0 [ 2373.055092] ? ksys_write+0x12d/0x260 [ 2373.055655] ? wait_for_completion_io+0x270/0x270 [ 2373.056343] ? rcu_read_lock_any_held+0x75/0xa0 [ 2373.056990] ? vfs_write+0x354/0xb10 [ 2373.057523] __x64_sys_recvmmsg+0x20f/0x260 [ 2373.058133] ? ksys_write+0x1a9/0x260 [ 2373.058670] ? __do_sys_socketcall+0x600/0x600 [ 2373.059324] do_syscall_64+0x33/0x40 [ 2373.059846] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2373.060571] RIP: 0033:0x7fb290a1fb19 [ 2373.061100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2373.063656] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2373.064726] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2373.065717] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2373.066713] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2373.067691] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2373.068693] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2373.096337] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:41:17 executing program 0: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x1000000000000004) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) memfd_create(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) 03:41:17 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x1c, 0x0, 0x911, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9, 0x5c}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, "9c6726cc1a140196"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x80}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xd888}]}, 0x58}, 0x1, 0x0, 0x0, 0x814}, 0x880) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000006c0)={0x0, 0x1, 0x2, 0x1}) write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[], 0x26c) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32, @ANYRESDEC], 0x40}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0xffffffffffffffff}, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0xda}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "c481afb4b5239c576ed53b2d20550e10"}, @exp_smc={0xfe, 0x6}, @eol, @mptcp=@mp_join={0x1e, 0x3, 0x7}, @window={0x3, 0x3, 0xcf}, @exp_fastopen={0xfe, 0x6, 0xf989, "f2d3"}, @eol, @eol]}}}}}}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) ftruncate(0xffffffffffffffff, 0x3) clone3(&(0x7f0000000200)={0x44004100, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:17 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:41:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xcf, 0x10062, 0x0) 03:41:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r3 = fcntl$dupfd(r2, 0x0, r1) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) openat(r3, &(0x7f0000000100)='./file0\x00', 0x1e1200, 0x40) open$dir(&(0x7f0000000180)='./file1\x00', 0x80000, 0x40) inotify_init1(0x0) [ 2373.294747] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:41:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000180)=""/60, 0x3c}, {&(0x7f00000001c0)=""/3, 0x3}], 0x2, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x40003003) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x3, 0x3, 0x81, 0x0, 0xff, 0x4182, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x9}, 0x115a, 0x116a, 0x5, 0x0, 0x4, 0x0, 0x800, 0x0, 0x4, 0x0, 0x7}, r0, 0x4, 0xffffffffffffffff, 0x1) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) 03:41:32 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:41:32 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:41:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xd0, 0x10062, 0x0) 03:41:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 68) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:41:32 executing program 0: r0 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r1, &(0x7f0000001e00)=""/4076, 0xfec, 0x7e0000000000) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) read(r1, &(0x7f0000000300)=""/209, 0xd1) r2 = epoll_create(0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) memfd_create(0x0, 0x0) connect$unix(r0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3635, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/54, 0x36}], 0x4, 0x389, 0x2) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000500)=""/236, &(0x7f0000000180)=0xec) pread64(0xffffffffffffffff, &(0x7f0000000640)=""/16, 0x10, 0x9) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x448200, 0x93) 03:41:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508", 0x5}], 0x1}, 0x0, 0x4008000}, 0x0) syz_open_procfs(0x0, &(0x7f00000047c0)='net/rt6_stats\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x86, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc) recvmsg(r5, &(0x7f0000004780)={&(0x7f0000003280)=@can, 0x80, &(0x7f0000004680)=[{&(0x7f0000003300)=""/214, 0xd6}, {&(0x7f0000003400)=""/72, 0x48}, {&(0x7f0000003480)=""/172, 0xac}, {&(0x7f0000003540)=""/134, 0x86}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/89, 0x59}], 0x6, &(0x7f0000004700)=""/96, 0x60}, 0x10101) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) 03:41:32 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r1, &(0x7f0000000680)='./file0\x00') renameat(r1, &(0x7f00000000c0)='./file0/file1\x00', r1, 0x0) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x1490c0, 0x12345}, 0x202) r3 = socket(0x3, 0x5, 0xda) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x10000, {0x0, r0}, 0x5, 0xe, 0x1, {0x0, 0x0, r3}}, 0x4) inotify_init1(0x0) [ 2388.191046] FAULT_INJECTION: forcing a failure. [ 2388.191046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2388.192934] CPU: 1 PID: 19204 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2388.193950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2388.195161] Call Trace: [ 2388.195555] dump_stack+0x107/0x167 [ 2388.196091] should_fail.cold+0x5/0xa [ 2388.196670] _copy_from_user+0x2e/0x1b0 [ 2388.197258] __copy_msghdr_from_user+0x91/0x4b0 [ 2388.197936] ? __ia32_sys_shutdown+0x80/0x80 [ 2388.198581] ? __lock_acquire+0x1657/0x5b00 [ 2388.199240] ___sys_recvmsg+0xd5/0x200 [ 2388.199813] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2388.200545] ? __lockdep_reset_lock+0x180/0x180 [ 2388.201236] ? lock_acquire+0x197/0x470 [ 2388.201814] ? find_held_lock+0x2c/0x110 [ 2388.202416] ? __might_fault+0xd3/0x180 [ 2388.202995] ? lock_downgrade+0x6d0/0x6d0 [ 2388.203625] do_recvmmsg+0x24c/0x6d0 [ 2388.204187] ? ___sys_recvmsg+0x200/0x200 [ 2388.204809] ? lock_downgrade+0x6d0/0x6d0 [ 2388.205439] ? ksys_write+0x12d/0x260 [ 2388.206014] ? wait_for_completion_io+0x270/0x270 [ 2388.206722] ? rcu_read_lock_any_held+0x75/0xa0 [ 2388.207404] ? vfs_write+0x354/0xb10 [ 2388.207960] __x64_sys_recvmmsg+0x20f/0x260 [ 2388.208599] ? ksys_write+0x1a9/0x260 [ 2388.209162] ? __do_sys_socketcall+0x600/0x600 [ 2388.209844] do_syscall_64+0x33/0x40 [ 2388.210391] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2388.211135] RIP: 0033:0x7fb290a1fb19 [ 2388.211680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2388.214342] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2388.215451] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2388.216502] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2388.217536] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2388.218574] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2388.219607] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2388.233271] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:41:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x100000000}, @typed={0x4, 0xb}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x4000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r1, 0x1, 0x9, 0x81, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x0, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) 03:41:32 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2388.294668] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2388.321798] netlink: 'syz-executor.6': attribute type 11 has an invalid length. 03:41:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xd1, 0x10062, 0x0) 03:41:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 69) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:41:32 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:41:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) umount2(&(0x7f0000000140)='./file0/file1\x00', 0xd) inotify_init1(0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x110, 0xffffffffffffffff, 0x10000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x5, 0x60000000000000, 0x0, 0x0, 0x8, 0x0, {0x1, r2}}, 0x9) [ 2388.454858] netlink: 'syz-executor.6': attribute type 11 has an invalid length. [ 2388.513561] FAULT_INJECTION: forcing a failure. [ 2388.513561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2388.515348] CPU: 1 PID: 19456 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2388.516362] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2388.517561] Call Trace: [ 2388.517956] dump_stack+0x107/0x167 [ 2388.518492] should_fail.cold+0x5/0xa [ 2388.519057] _copy_from_user+0x2e/0x1b0 [ 2388.519647] __copy_msghdr_from_user+0x91/0x4b0 [ 2388.520336] ? __ia32_sys_shutdown+0x80/0x80 [ 2388.520978] ? __lock_acquire+0x1657/0x5b00 [ 2388.521629] ___sys_recvmsg+0xd5/0x200 [ 2388.522202] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2388.522916] ? __lockdep_reset_lock+0x180/0x180 [ 2388.523594] ? _raw_spin_unlock_irq+0x27/0x30 [ 2388.524266] ? lock_acquire+0x197/0x470 [ 2388.525075] ? find_held_lock+0x2c/0x110 [ 2388.525673] ? __might_fault+0xd3/0x180 [ 2388.526249] ? lock_downgrade+0x6d0/0x6d0 [ 2388.526852] ? io_schedule_timeout+0x140/0x140 [ 2388.527530] do_recvmmsg+0x24c/0x6d0 [ 2388.528079] ? ___sys_recvmsg+0x200/0x200 [ 2388.528694] ? lock_downgrade+0x6d0/0x6d0 [ 2388.529308] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2388.530096] __x64_sys_recvmmsg+0x20f/0x260 [ 2388.530845] ? ksys_write+0x1a9/0x260 [ 2388.531589] ? __do_sys_socketcall+0x600/0x600 [ 2388.532467] do_syscall_64+0x33/0x40 [ 2388.533170] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2388.534177] RIP: 0033:0x7fb290a1fb19 [ 2388.534793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2388.537837] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2388.538936] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2388.539960] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2388.541121] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2388.542245] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2388.543480] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:41:49 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:41:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 70) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:41:49 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:41:49 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508", 0x5}], 0x1}, 0x0, 0x4008000}, 0x0) syz_open_procfs(0x0, &(0x7f00000047c0)='net/rt6_stats\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x86, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc) recvmsg(r5, &(0x7f0000004780)={&(0x7f0000003280)=@can, 0x80, &(0x7f0000004680)=[{&(0x7f0000003300)=""/214, 0xd6}, {&(0x7f0000003400)=""/72, 0x48}, {&(0x7f0000003480)=""/172, 0xac}, {&(0x7f0000003540)=""/134, 0x86}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/89, 0x59}], 0x6, &(0x7f0000004700)=""/96, 0x60}, 0x10101) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) 03:41:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xd2, 0x10062, 0x0) 03:41:49 executing program 0: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5", 0x23) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7781, &(0x7f0000000400)={0x0, 0x69ec, 0x10, 0x0, 0x3aa}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000500)=ANY=[@ANYBLOB="950005000000000000000099b9b6e3ead7b50600000000000000000000000000005f695371936c05f0caeebe3f57290286f045f394559520c52338262aa1ea389519d433aadf246d91817899472609241a95da2469d2a1bae5174f14e1e0a159a019fd172793e96609d32a839f6a4841dbdc", @ANYRES32, @ANYBLOB="000000008e00"/28, @ANYRES32, @ANYBLOB="000000000200"/28, @ANYRES32=r2, @ANYBLOB="000000000f0200"/28, @ANYRES32=r3, @ANYBLOB='\x00'/28, @ANYRES32=r0, @ANYBLOB="00000000ff0100"/28]) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000000c0)=0x1) unshare(0x48020200) 03:41:49 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(r0, 0x0, 0x0, 0x60) syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x8001, 0x0, 0x0, 0xc0880, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)=ANY=[]) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x4c20, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0xf7, &(0x7f0000000000)=0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @rand_addr=0x64010102}, {}, 0x0, {0x2, 0x0, @remote}}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1c7a02, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) io_submit(r3, 0x3, &(0x7f0000000480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, r5, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x8, r5, &(0x7f00000003c0)="378eca52897d4644fb0050dfbf990e62a3fd6f20c6f597147f836678966c961242fa091b7a5bca7ddc121b0c658cd806316402c5e24cbc5b53d72ca3c6c141750cf8f85a622f488e62b2bfeac89e45a7c9b05a2b637aa50c34e14f7b31d277d87453a4631a7de184f12e7b53f80a3731d4d67389a1", 0x75, 0x100, 0x0, 0x3, r6}]) 03:41:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0xed, 0x20, 0x5, 0x8, 0x0, 0x1, 0x98098, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000100)}, 0xa000, 0x2, 0x9, 0x0, 0x100000000, 0x5, 0x1, 0x0, 0x81, 0x0, 0x4}, r1, 0x5, 0xffffffffffffffff, 0x4) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r2, 0x0) setresuid(r2, 0x0, r2) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in=@remote, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r4, 0x0) setresuid(r4, 0x0, r4) r5 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r7}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) setxattr$system_posix_acl(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x6}, [{}, {0x2, 0x5, 0xffffffffffffffff}, {0x2, 0x5, r2}, {0x2, 0x4}, {0x2, 0x6, r3}, {0x2, 0x7, 0xee00}, {0x2, 0x2, r4}], {}, [{0x8, 0x0, r7}], {0x10, 0x2}, {0x20, 0x5}}, 0x64, 0x1) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x0) [ 2405.493853] FAULT_INJECTION: forcing a failure. [ 2405.493853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2405.495976] CPU: 1 PID: 19556 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2405.496983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2405.498160] Call Trace: [ 2405.498551] dump_stack+0x107/0x167 [ 2405.499076] should_fail.cold+0x5/0xa [ 2405.499629] _copy_from_user+0x2e/0x1b0 [ 2405.500242] __copy_msghdr_from_user+0x91/0x4b0 [ 2405.500923] ? __ia32_sys_shutdown+0x80/0x80 [ 2405.501553] ? __lock_acquire+0x1657/0x5b00 [ 2405.501625] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2405.502225] ___sys_recvmsg+0xd5/0x200 [ 2405.502250] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2405.504764] ? __lockdep_reset_lock+0x180/0x180 [ 2405.505425] ? _raw_spin_unlock_irq+0x27/0x30 [ 2405.506073] ? lock_acquire+0x197/0x470 [ 2405.506640] ? find_held_lock+0x2c/0x110 [ 2405.507225] ? __might_fault+0xd3/0x180 [ 2405.507803] ? lock_downgrade+0x6d0/0x6d0 [ 2405.508399] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2405.509202] do_recvmmsg+0x24c/0x6d0 [ 2405.509761] ? ___sys_recvmsg+0x200/0x200 [ 2405.510358] ? lock_downgrade+0x6d0/0x6d0 [ 2405.510960] ? ksys_write+0x12d/0x260 [ 2405.511526] ? wait_for_completion_io+0x270/0x270 [ 2405.512220] ? rcu_read_lock_any_held+0x75/0xa0 [ 2405.512896] ? vfs_write+0x354/0xb10 [ 2405.513438] __x64_sys_recvmmsg+0x20f/0x260 [ 2405.514058] ? ksys_write+0x1a9/0x260 [ 2405.514606] ? __do_sys_socketcall+0x600/0x600 [ 2405.515275] do_syscall_64+0x33/0x40 [ 2405.515829] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2405.516571] RIP: 0033:0x7fb290a1fb19 [ 2405.517114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2405.519724] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2405.520836] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2405.521866] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2405.522890] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2405.523917] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2405.524955] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 03:41:49 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:41:49 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:41:49 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_selinux(r4, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x702f, &(0x7f0000000180)={0x0, 0x1175, 0x0, 0x2, 0x384, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/185, 0xb9}], 0x1) syz_io_uring_submit(0x0, r2, 0x0, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 03:41:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 71) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:41:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xd3, 0x10062, 0x0) 03:41:50 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) write$binfmt_elf64(r0, &(0x7f0000000c80)={{0x7f, 0x45, 0x4c, 0x46, 0x2a, 0x9, 0x0, 0x87, 0x7, 0x3, 0x3e, 0x2, 0x60, 0x40, 0x188, 0x3, 0x6, 0x38, 0x1, 0xebf, 0x4, 0x1}, [{0x60000000, 0x0, 0xc38, 0x9, 0x0, 0x3, 0x7235, 0x9}, {0x5, 0x9, 0x40, 0xf23, 0x2, 0x10b8, 0x0, 0xfffffffffffffff7}], "6075d90d8ddaf602644c1d9d714c31936c5f2c29718437d2f58b2a9f405daa31a4170fb05833fb1e920aaceabf0a03766a5d77997c662fad771283b62b00b2faabfc729c5a5c4bcc16f4880bb1ad8aa2", ['\x00', '\x00']}, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r4 = fcntl$dupfd(r3, 0x0, r2) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000005200210c00000000000000000200000014d75eba968b79925b6ef1091046dad5c4c184375507a22a5802ac0500000000000000cb82ebb872795c4970680602df"], 0x14}}, 0x0) [ 2405.780014] FAULT_INJECTION: forcing a failure. [ 2405.780014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2405.782298] CPU: 0 PID: 19666 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2405.783389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2405.784701] Call Trace: [ 2405.785130] dump_stack+0x107/0x167 [ 2405.785711] should_fail.cold+0x5/0xa [ 2405.786329] _copy_from_user+0x2e/0x1b0 [ 2405.786970] __copy_msghdr_from_user+0x91/0x4b0 [ 2405.787713] ? __ia32_sys_shutdown+0x80/0x80 [ 2405.788412] ? __lock_acquire+0x1657/0x5b00 [ 2405.789134] ___sys_recvmsg+0xd5/0x200 [ 2405.789755] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2405.790534] ? __lockdep_reset_lock+0x180/0x180 [ 2405.791278] ? __fget_files+0x2cf/0x520 [ 2405.791918] ? lock_acquire+0x197/0x470 [ 2405.792560] ? find_held_lock+0x2c/0x110 [ 2405.793212] ? __might_fault+0xd3/0x180 [ 2405.793843] ? lock_downgrade+0x6d0/0x6d0 [ 2405.794527] do_recvmmsg+0x24c/0x6d0 [ 2405.795129] ? ___sys_recvmsg+0x200/0x200 [ 2405.795802] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2405.796643] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2405.797501] ? trace_hardirqs_on+0x5b/0x180 [ 2405.798204] ? __x64_sys_recvmmsg+0x1fc/0x260 [ 2405.798922] __x64_sys_recvmmsg+0x20f/0x260 [ 2405.799611] ? __do_sys_socketcall+0x600/0x600 [ 2405.800349] do_syscall_64+0x33/0x40 [ 2405.800948] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2405.801757] RIP: 0033:0x7fb290a1fb19 [ 2405.802351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2405.805280] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2405.806484] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2405.807622] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2405.808770] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2405.809909] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2405.811044] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 [ 2405.832047] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 03:41:50 executing program 1: getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)=""/239, &(0x7f0000000200)=0xef) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000240), &(0x7f0000000280)=0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x40000000000, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) r1 = inotify_init1(0x0) fallocate(r1, 0x4, 0x8, 0x40) [ 2405.912542] tmpfs: Unknown parameter '' 03:42:05 executing program 6: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x2) r0 = getpgid(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r2, 0x0, r1) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) [ 2421.255517] [ 2421.255695] ====================================================== [ 2421.256236] WARNING: possible circular locking dependency detected [ 2421.256787] 5.10.223 #1 Not tainted [ 2421.257094] ------------------------------------------------------ [ 2421.257630] syz-executor.0/19899 is trying to acquire lock: [ 2421.258116] ffff88800dba4b78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 2421.259014] [ 2421.259014] but task is already holding lock: [ 2421.259526] ffffffff8561c5c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2421.260297] [ 2421.260297] which lock already depends on the new lock. [ 2421.260297] [ 2421.261019] [ 2421.261019] the existing dependency chain (in reverse order) is: [ 2421.261667] [ 2421.261667] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 2421.262253] __mutex_lock+0x13d/0x10b0 [ 2421.262642] rfkill_register+0x36/0xa10 [ 2421.263036] hci_register_dev+0x42e/0xc00 [ 2421.263446] __vhci_create_device+0x2c8/0x5c0 [ 2421.263877] vhci_open_timeout+0x38/0x50 [ 2421.264275] process_one_work+0x9a9/0x14b0 [ 2421.264691] worker_thread+0x61d/0x1310 [ 2421.267315] kthread+0x38f/0x470 [ 2421.269150] ret_from_fork+0x22/0x30 [ 2421.269519] [ 2421.269519] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 2421.270079] __mutex_lock+0x13d/0x10b0 [ 2421.270470] vhci_send_frame+0x63/0xa0 [ 2421.270853] hci_send_frame+0x1b9/0x320 [ 2421.271248] hci_tx_work+0x10af/0x1660 [ 2421.271636] process_one_work+0x9a9/0x14b0 [ 2421.272053] worker_thread+0x61d/0x1310 [ 2421.272448] kthread+0x38f/0x470 [ 2421.272821] ret_from_fork+0x22/0x30 [ 2421.273247] [ 2421.273247] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 2421.274084] __flush_work+0x105/0xa90 [ 2421.274527] hci_dev_do_close+0x131/0x1240 [ 2421.274959] hci_unregister_dev+0x179/0x460 [ 2421.275382] vhci_release+0x70/0xf0 [ 2421.275751] __fput+0x285/0x9f0 [ 2421.276085] task_work_run+0xe2/0x1a0 [ 2421.276461] do_exit+0xb6f/0x2600 [ 2421.276813] do_group_exit+0x125/0x310 [ 2421.277200] get_signal+0x4bc/0x22e0 [ 2421.277574] arch_do_signal_or_restart+0x2b7/0x1990 [ 2421.278067] exit_to_user_mode_prepare+0x10f/0x190 [ 2421.278543] syscall_exit_to_user_mode+0x38/0x1d0 [ 2421.279008] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2421.279498] [ 2421.279498] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 2421.280044] __mutex_lock+0x13d/0x10b0 [ 2421.280422] bg_scan_update+0x82/0x500 [ 2421.280806] process_one_work+0x9a9/0x14b0 [ 2421.281211] worker_thread+0x61d/0x1310 [ 2421.281592] kthread+0x38f/0x470 [ 2421.281934] ret_from_fork+0x22/0x30 [ 2421.282304] [ 2421.282304] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 2421.283049] __lock_acquire+0x29e7/0x5b00 [ 2421.283457] lock_acquire+0x197/0x470 [ 2421.283833] __flush_work+0x105/0xa90 [ 2421.284211] __cancel_work_timer+0x368/0x4c0 [ 2421.284648] hci_request_cancel_all+0x73/0x230 [ 2421.285095] hci_dev_do_close+0xd9/0x1240 [ 2421.285507] hci_rfkill_set_block+0x166/0x1a0 [ 2421.285941] rfkill_set_block+0x1fd/0x540 [ 2421.286352] rfkill_fop_write+0x253/0x4b0 [ 2421.286757] vfs_write+0x29a/0xb10 [ 2421.287112] ksys_write+0x1f6/0x260 [ 2421.287481] do_syscall_64+0x33/0x40 [ 2421.287851] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2421.288338] [ 2421.288338] other info that might help us debug this: [ 2421.288338] [ 2421.289038] Chain exists of: [ 2421.289038] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 2421.289038] [ 2421.290224] Possible unsafe locking scenario: [ 2421.290224] [ 2421.290749] CPU0 CPU1 [ 2421.291152] ---- ---- [ 2421.291556] lock(rfkill_global_mutex); [ 2421.291918] lock(&data->open_mutex); [ 2421.292478] lock(rfkill_global_mutex); [ 2421.293055] lock((work_completion)(&hdev->bg_scan_update)); [ 2421.293562] [ 2421.293562] *** DEADLOCK *** [ 2421.293562] [ 2421.294086] 1 lock held by syz-executor.0/19899: [ 2421.294496] #0: ffffffff8561c5c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2421.295329] [ 2421.295329] stack backtrace: [ 2421.295726] CPU: 0 PID: 19899 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2421.296331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2421.297070] Call Trace: [ 2421.297304] dump_stack+0x107/0x167 [ 2421.297625] check_noncircular+0x263/0x2e0 [ 2421.298001] ? register_lock_class+0xbb/0x17b0 [ 2421.298401] ? print_circular_bug+0x470/0x470 [ 2421.298804] ? find_first_zero_bit+0x94/0xb0 [ 2421.299193] ? alloc_chain_hlocks+0x342/0x5a0 [ 2421.299589] __lock_acquire+0x29e7/0x5b00 [ 2421.299961] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2421.300426] ? SOFTIRQ_verbose+0x10/0x10 [ 2421.300789] ? __lockdep_reset_lock+0x180/0x180 [ 2421.301201] ? mark_lock+0xf5/0x2df0 [ 2421.301531] lock_acquire+0x197/0x470 [ 2421.301861] ? __flush_work+0xdd/0xa90 [ 2421.302206] ? lock_release+0x680/0x680 [ 2421.302559] ? __flush_work+0x78c/0xa90 [ 2421.302909] ? lock_downgrade+0x6d0/0x6d0 [ 2421.303277] __flush_work+0x105/0xa90 [ 2421.303609] ? __flush_work+0xdd/0xa90 [ 2421.303952] ? lock_chain_count+0x20/0x20 [ 2421.304315] ? queue_delayed_work_on+0xe0/0xe0 [ 2421.304721] ? mark_lock+0xf5/0x2df0 [ 2421.305048] ? mark_lock+0xf5/0x2df0 [ 2421.305377] ? lock_chain_count+0x20/0x20 [ 2421.305741] ? perf_trace_lock+0xac/0x490 [ 2421.306106] ? lock_chain_count+0x20/0x20 [ 2421.306475] ? mark_held_locks+0x9e/0xe0 [ 2421.306833] __cancel_work_timer+0x368/0x4c0 [ 2421.307216] ? cancel_delayed_work+0x20/0x20 [ 2421.307602] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2421.308063] ? __cancel_work+0x250/0x2b0 [ 2421.308420] ? trace_hardirqs_on+0x5b/0x180 [ 2421.308806] ? __cancel_work+0x1bb/0x2b0 [ 2421.309158] ? try_to_grab_pending+0xe0/0xe0 [ 2421.309548] hci_request_cancel_all+0x73/0x230 [ 2421.309947] hci_dev_do_close+0xd9/0x1240 [ 2421.310316] ? rfkill_set_block+0x18f/0x540 [ 2421.310698] ? hci_dev_open+0x350/0x350 [ 2421.311048] ? mark_held_locks+0x9e/0xe0 [ 2421.311413] hci_rfkill_set_block+0x166/0x1a0 [ 2421.311812] ? hci_power_off+0x20/0x20 [ 2421.312153] rfkill_set_block+0x1fd/0x540 [ 2421.312521] rfkill_fop_write+0x253/0x4b0 [ 2421.312892] ? rfkill_sync_work+0xa0/0xa0 [ 2421.313260] ? security_file_permission+0xb1/0xe0 [ 2421.313688] ? rfkill_sync_work+0xa0/0xa0 [ 2421.314052] vfs_write+0x29a/0xb10 [ 2421.314365] ksys_write+0x1f6/0x260 [ 2421.314681] ? __ia32_sys_read+0xb0/0xb0 [ 2421.315043] do_syscall_64+0x33/0x40 [ 2421.315372] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2421.315828] RIP: 0033:0x7fee6565cb19 [ 2421.316155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2421.317769] RSP: 002b:00007fee62bd2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2421.318438] RAX: ffffffffffffffda RBX: 00007fee6576ff60 RCX: 00007fee6565cb19 [ 2421.319064] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000003 [ 2421.319694] RBP: 00007fee656b6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2421.320318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2421.320947] R13: 00007ffdb72bd6df R14: 00007fee62bd2300 R15: 0000000000022000 [ 2421.325617] FAULT_INJECTION: forcing a failure. [ 2421.325617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2421.326659] CPU: 0 PID: 19908 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2421.327267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2421.327998] Call Trace: [ 2421.328233] dump_stack+0x107/0x167 [ 2421.328555] should_fail.cold+0x5/0xa [ 2421.328908] _copy_from_user+0x2e/0x1b0 [ 2421.329264] __copy_msghdr_from_user+0x91/0x4b0 [ 2421.329676] ? __ia32_sys_shutdown+0x80/0x80 [ 2421.330062] ? perf_trace_lock+0xac/0x490 [ 2421.330436] ? perf_trace_lock_acquire+0xbc/0x590 [ 2421.330857] ? import_iovec+0x83/0xb0 [ 2421.331198] ___sys_recvmsg+0xd5/0x200 [ 2421.331541] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2421.331975] ? __lockdep_reset_lock+0x180/0x180 [ 2421.332385] ? __fget_files+0x2cf/0x520 [ 2421.332747] ? lock_downgrade+0x6d0/0x6d0 [ 2421.333119] ? lock_release+0x4d1/0x680 [ 2421.333475] ? __might_fault+0xd3/0x180 [ 2421.333826] ? lock_downgrade+0x6d0/0x6d0 [ 2421.334203] do_recvmmsg+0x24c/0x6d0 [ 2421.334531] ? ___sys_recvmsg+0x200/0x200 [ 2421.334898] ? lock_downgrade+0x6d0/0x6d0 [ 2421.335268] ? lock_release+0x4d1/0x680 [ 2421.335621] ? ksys_write+0x12d/0x260 [ 2421.335961] ? wait_for_completion_io+0x270/0x270 [ 2421.336386] ? vfs_write+0x354/0xb10 [ 2421.336722] __x64_sys_recvmmsg+0x20f/0x260 [ 2421.337106] ? ksys_write+0x1a9/0x260 [ 2421.337438] ? __do_sys_socketcall+0x600/0x600 [ 2421.337848] do_syscall_64+0x33/0x40 [ 2421.338176] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2421.338628] RIP: 0033:0x7fb290a1fb19 [ 2421.338958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2421.340592] RSP: 002b:00007fb28df74188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2421.341267] RAX: ffffffffffffffda RBX: 00007fb290b33020 RCX: 00007fb290a1fb19 [ 2421.341904] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2421.342537] RBP: 00007fb28df741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2421.343173] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2421.343797] R13: 00007ffdc175490f R14: 00007fb28df74300 R15: 0000000000022000 sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000001e00)=ANY=[@ANYBLOB="48360000150000012bbd7000fddbdf2512000000f88244a0308db69eb994bb8cdd6350f3f5ffbba59a4c8234bebd542cd3dc18977c0062c0ca5ec53694484c559bcf8bf8c399f0dfd0135ad6a22cb5fa1939ed703de1249a35c692fc0cedefa1fdcaa6fd37c47df3e2f6daf99526a7b045d6ddb3fa71593504048e067d45617f30f3dab7df23243dfc8f877939a938ffb05c0a527f900795650608005c00", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00O\x00', @ANYRES32=r3, @ANYBLOB='\x00'], 0x3648}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fremovexattr(r4, &(0x7f0000000280)=@known='user.incfs.size\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f00000000c0)={0x24438c100, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:42:05 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 72) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:42:05 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYRESHEX, @ANYBLOB="a337ed7ba2d8be75885c8e3711ec00c6a113cda922efb701fc27e6610722a9a24768a6e18545686446e6e1b9940946321722463cf93822d0999d72edb7f083d0d1a48f66c137debc7bfe3087d9185acf907a220ea1f4ec8ef426c190be8e3a37c7430d8f2931d9df168346d2a5e4d262e5086d618453288ed9885a9aa7c19e5ac80537c6ea1feb07edd79827003b2be499fbafb79962560b814fea3773a1768956db1d2c2a0dd0cedc04bb2806eb08b213fd87962abd74b181e31d00", @ANYBLOB="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"], 0x370}}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000700)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', r3, 0x20, 0x10, 0x200, 0x1ff, {{0x1b, 0x4, 0x3, 0x3d, 0x6c, 0x66, 0x0, 0xb7, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@generic={0x89, 0x12, "d0dba4ff037e35742c81c9cffb7626a9"}, @timestamp_addr={0x44, 0x44, 0xf3, 0x1, 0x6, [{@rand_addr=0x64010101, 0x30000000}, {@rand_addr=0x64010101, 0x7}, {@local, 0xa625}, {@empty, 0xb077}, {@multicast2, 0x7e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf56}, {@private=0xa010102, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x5}]}]}}}}}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) lseek(r4, 0x3ad3, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32]) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000001c0)={0x0, 0x6, 0x674, 0x8}) read(r4, &(0x7f0000000740)=""/138, 0x8a) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r0) rt_sigqueueinfo(r1, 0x3d, &(0x7f0000000100)={0x22, 0x1, 0x6}) syz_emit_ethernet(0x89, &(0x7f0000000740)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x7b, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x67, 0x0, @opaque="5c25ad596728f7dcb27b87352defa49c41126cbccb9872b6ecddc3771b74097af9cd2bd0e04668cc794b0887d80dd2643c4c36069e6fd802624af6b294ab32e2c99a5bfe9c4c548a14726aea46086807f4e012df15a4f18e27946514e80b29"}}}}}, 0x0) recvmmsg(r2, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 03:42:05 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r3 = fcntl$dupfd(r2, 0x0, r1) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:42:05 executing program 2: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x40}, 0x4) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) 03:42:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xd4, 0x10062, 0x0) 03:42:05 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xfe, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_bp={0x0}, 0x2902, 0x0, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) inotify_init1(0x0) 03:42:05 executing program 5: syz_io_uring_setup(0x1618, &(0x7f0000000380)={0x0, 0x5a5c, 0x10, 0x3, 0x178}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r3, r4, 0x0, 0x20d317) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) [ 2421.392477] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2421.394510] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 03:42:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000140)={0x1, 0x80000000000}) renameat(r0, &(0x7f00000000c0)='./file0/file1\x00', r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2000, 0xd0) inotify_init1(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) dup2(r0, r3) 03:42:05 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYRESHEX, @ANYBLOB="a337ed7ba2d8be75885c8e3711ec00c6a113cda922efb701fc27e6610722a9a24768a6e18545686446e6e1b9940946321722463cf93822d0999d72edb7f083d0d1a48f66c137debc7bfe3087d9185acf907a220ea1f4ec8ef426c190be8e3a37c7430d8f2931d9df168346d2a5e4d262e5086d618453288ed9885a9aa7c19e5ac80537c6ea1feb07edd79827003b2be499fbafb79962560b814fea3773a1768956db1d2c2a0dd0cedc04bb2806eb08b213fd87962abd74b181e31d00", @ANYBLOB="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"], 0x370}}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000700)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', r3, 0x20, 0x10, 0x200, 0x1ff, {{0x1b, 0x4, 0x3, 0x3d, 0x6c, 0x66, 0x0, 0xb7, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@generic={0x89, 0x12, "d0dba4ff037e35742c81c9cffb7626a9"}, @timestamp_addr={0x44, 0x44, 0xf3, 0x1, 0x6, [{@rand_addr=0x64010101, 0x30000000}, {@rand_addr=0x64010101, 0x7}, {@local, 0xa625}, {@empty, 0xb077}, {@multicast2, 0x7e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf56}, {@private=0xa010102, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x5}]}]}}}}}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) lseek(r4, 0x3ad3, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32]) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000001c0)={0x0, 0x6, 0x674, 0x8}) read(r4, &(0x7f0000000740)=""/138, 0x8a) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r0) rt_sigqueueinfo(r1, 0x3d, &(0x7f0000000100)={0x22, 0x1, 0x6}) syz_emit_ethernet(0x89, &(0x7f0000000740)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x7b, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x67, 0x0, @opaque="5c25ad596728f7dcb27b87352defa49c41126cbccb9872b6ecddc3771b74097af9cd2bd0e04668cc794b0887d80dd2643c4c36069e6fd802624af6b294ab32e2c99a5bfe9c4c548a14726aea46086807f4e012df15a4f18e27946514e80b29"}}}}}, 0x0) recvmmsg(r2, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 03:42:05 executing program 6: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x2) r0 = getpgid(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r2, 0x0, r1) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000001e00)=ANY=[@ANYBLOB="48360000150000012bbd7000fddbdf2512000000f88244a0308db69eb994bb8cdd6350f3f5ffbba59a4c8234bebd542cd3dc18977c0062c0ca5ec53694484c559bcf8bf8c399f0dfd0135ad6a22cb5fa1939ed703de1249a35c692fc0cedefa1fdcaa6fd37c47df3e2f6daf99526a7b045d6ddb3fa71593504048e067d45617f30f3dab7df23243dfc8f877939a938ffb05c0a527f900795650608005c00", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00O\x00', @ANYRES32=r3, @ANYBLOB='\x00'], 0x3648}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fremovexattr(r4, &(0x7f0000000280)=@known='user.incfs.size\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f00000000c0)={0x24438c100, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:42:05 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000001000000a4e2f5c96411f28bcd973557be8b16a95a0f50e0986a7ad7eb67e2c3e0f7339b652370b0c9df29af348e4100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 73) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe, 0x10, 0xffffffffffffffff, 0x10000000) 03:42:05 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYRESHEX, @ANYBLOB="a337ed7ba2d8be75885c8e3711ec00c6a113cda922efb701fc27e6610722a9a24768a6e18545686446e6e1b9940946321722463cf93822d0999d72edb7f083d0d1a48f66c137debc7bfe3087d9185acf907a220ea1f4ec8ef426c190be8e3a37c7430d8f2931d9df168346d2a5e4d262e5086d618453288ed9885a9aa7c19e5ac80537c6ea1feb07edd79827003b2be499fbafb79962560b814fea3773a1768956db1d2c2a0dd0cedc04bb2806eb08b213fd87962abd74b181e31d00", @ANYBLOB="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"], 0x370}}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000700)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', r3, 0x20, 0x10, 0x200, 0x1ff, {{0x1b, 0x4, 0x3, 0x3d, 0x6c, 0x66, 0x0, 0xb7, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@generic={0x89, 0x12, "d0dba4ff037e35742c81c9cffb7626a9"}, @timestamp_addr={0x44, 0x44, 0xf3, 0x1, 0x6, [{@rand_addr=0x64010101, 0x30000000}, {@rand_addr=0x64010101, 0x7}, {@local, 0xa625}, {@empty, 0xb077}, {@multicast2, 0x7e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf56}, {@private=0xa010102, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x5}]}]}}}}}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) lseek(r4, 0x3ad3, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32]) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000001c0)={0x0, 0x6, 0x674, 0x8}) read(r4, &(0x7f0000000740)=""/138, 0x8a) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r0) rt_sigqueueinfo(r1, 0x3d, &(0x7f0000000100)={0x22, 0x1, 0x6}) syz_emit_ethernet(0x89, &(0x7f0000000740)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x7b, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x67, 0x0, @opaque="5c25ad596728f7dcb27b87352defa49c41126cbccb9872b6ecddc3771b74097af9cd2bd0e04668cc794b0887d80dd2643c4c36069e6fd802624af6b294ab32e2c99a5bfe9c4c548a14726aea46086807f4e012df15a4f18e27946514e80b29"}}}}}, 0x0) recvmmsg(r2, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 03:42:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0xd5, 0x10062, 0x0) 03:42:05 executing program 1: clone3(&(0x7f0000000380)={0xa5000000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {}, &(0x7f00000001c0)=""/242, 0xf2, &(0x7f00000002c0)=""/106, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r1, &(0x7f0000000680)='./file0\x00') renameat(r1, &(0x7f00000000c0)='./file0/file1\x00', r1, 0x0) inotify_init1(0x0) [ 2421.535671] FAULT_INJECTION: forcing a failure. [ 2421.535671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2421.537518] CPU: 1 PID: 20135 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 2421.538518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2421.539705] Call Trace: [ 2421.540091] dump_stack+0x107/0x167 [ 2421.540624] should_fail.cold+0x5/0xa [ 2421.541188] _copy_from_user+0x2e/0x1b0 [ 2421.541764] __copy_msghdr_from_user+0x91/0x4b0 [ 2421.542431] ? __ia32_sys_shutdown+0x80/0x80 [ 2421.543064] ? perf_trace_lock+0xac/0x490 [ 2421.543663] ? perf_trace_lock_acquire+0xbc/0x590 [ 2421.544359] ? import_iovec+0x83/0xb0 [ 2421.544920] ___sys_recvmsg+0xd5/0x200 [ 2421.545483] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2421.546191] ? __lockdep_reset_lock+0x180/0x180 [ 2421.546857] ? __fget_files+0x2cf/0x520 [ 2421.547426] ? lock_downgrade+0x6d0/0x6d0 [ 2421.548028] ? lock_release+0x4d1/0x680 [ 2421.548597] ? __might_fault+0xd3/0x180 [ 2421.549198] ? lock_downgrade+0x6d0/0x6d0 [ 2421.549805] do_recvmmsg+0x24c/0x6d0 [ 2421.550351] ? ___sys_recvmsg+0x200/0x200 [ 2421.550947] ? lock_downgrade+0x6d0/0x6d0 [ 2421.551552] ? ksys_write+0x21a/0x260 [ 2421.552111] ? wait_for_completion_io+0x270/0x270 [ 2421.552812] ? vfs_write+0x354/0xb10 [ 2421.553357] __x64_sys_recvmmsg+0x20f/0x260 [ 2421.553978] ? ksys_write+0x1a9/0x260 [ 2421.554529] ? __do_sys_socketcall+0x600/0x600 [ 2421.555192] do_syscall_64+0x33/0x40 [ 2421.555728] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2421.556466] RIP: 0033:0x7fb290a1fb19 [ 2421.557020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2421.559649] RSP: 002b:00007fb28df95188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2421.560752] RAX: ffffffffffffffda RBX: 00007fb290b32f60 RCX: 00007fb290a1fb19 [ 2421.561775] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 2421.562799] RBP: 00007fb28df951d0 R08: 0000000000000000 R09: 0000000000000000 [ 2421.563830] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 2421.564864] R13: 00007ffdc175490f R14: 00007fb28df95300 R15: 0000000000022000 VM DIAGNOSIS: 03:42:05 Registers: info registers vcpu 0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822d97a1 RDI=ffffffff879ef240 RBP=ffffffff879ef200 RSP=ffff8880489e71d0 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000031 R13=0000000000000031 R14=ffffffff879ef200 R15=dffffc0000000000 RIP=ffffffff822d97f8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fee62bd2700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000005533c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=00000000000d0602 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8135d1b6 RDX=ffff8880092a3480 RSI=ffffffff8135d1a4 RDI=0000000000000005 RBP=ffff88801d1afaf8 RSP=ffff88801d1afa20 R8 =0000000000000001 R9 =ffff88806ce3c207 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000200 R14=1ffff11003a35f48 R15=0000000000000040 RIP=ffffffff8135d1a6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d122000 CR3=0000000004e26000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fb290b067c000007fb290b067c8 XMM02=00007fb290b067e000007fb290b067c0 XMM03=00007fb290b067c800007fb290b067c0 XMM04=ffffffffffffff00ffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000