tandard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1252.829125] Call Trace: [ 1252.829671] dump_stack+0x107/0x167 [ 1252.830418] should_fail.cold+0x5/0xa [ 1252.831209] __alloc_pages_nodemask+0x182/0x600 [ 1252.832157] ? lock_chain_count+0x20/0x20 [ 1252.833014] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1252.834244] ? perf_trace_lock+0xac/0x490 [ 1252.835122] alloc_pages_vma+0xbb/0x410 [ 1252.835934] wp_page_copy+0xee7/0x1f00 [ 1252.836748] ? print_bad_pte+0x5a0/0x5a0 [ 1252.837572] ? lock_downgrade+0x6d0/0x6d0 [ 1252.838415] ? vm_normal_page+0x162/0x2e0 [ 1252.839268] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1252.840339] do_wp_page+0x27b/0x1390 [ 1252.841105] handle_mm_fault+0x1cc7/0x3500 [ 1252.841965] ? __lock_acquire+0x1657/0x5b00 [ 1252.842866] ? __pmd_alloc+0x5e0/0x5e0 [ 1252.843669] ? vmacache_find+0x55/0x2a0 00:12:19 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x18, 0x0, 0x3, 0x7f, 0x0, 0x2, 0x8a00, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x20, 0x4, @perf_bp={&(0x7f0000000480)}, 0x9, 0x3, 0x1d, 0x7, 0x46, 0xffff, 0x1, 0x0, 0x8, 0x0, 0x2e}, 0x0, 0xf, 0xffffffffffffffff, 0x1) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000400)=0x7) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x4, 0xde, 0x0, 0x1, 0x7fff, r1}) fallocate(0xffffffffffffffff, 0x3, 0x900500, 0x30000000000) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x183000, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='rxrpc\x00', &(0x7f0000001400)=@keyring) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x11eb806, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000440)='ns/net\x00') r2 = socket$unix(0x1, 0x5, 0x0) setxattr$security_ima(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=@v2={0x3, 0x1, 0x8, 0x4, 0x63, "a59f7b5de4a7964e857c5f9dbb2573354c0c6e020c573621cbd3eff758d897fcab553c5526dc59e38bf119acbc77acc8055a8e43ec5d59b5469422869d4de308e828fe93aff033cc21121f080cb9e2f793b5f97f34f9994bf931f99fd807fb7e56eaaa"}, 0x6c, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000280)=ANY=[@ANYRESHEX], &(0x7f0000000080)='./file0\x00', 0x0, 0x204010, &(0x7f0000000140)='^},\x00') 00:12:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@random="07af43ba2470", @random="a62475dec4db", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x28, 0x3a, 0x0, @local, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000002b80), 0x0) 00:12:19 executing program 3: r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000006ec0), &(0x7f0000006f00)='./file0\x00', 0x9, 0xa, &(0x7f0000007740)=[{&(0x7f0000006f40)="0c38556cbb60336982b3bc2aa4adc78d2297e6545813c4c82ab9c2cc898bff4f0782c8c521d59aa83bcfa3e90a8a95a4d7b7e26124e0930118e53b4fa2f83cf5347e61e66e8996ff871db78a8dc50e5f185b4802ebb7df3c7c065d22fa3a9cdd68cfb08fa89bd0a64de2f2c0b57194893f5bccf73f3c28c03608b2f9417522b2120e71b9045f82a689e8ac16d6d1222dc9d8826db85b035dbb5dc63bc00cf0bc2174b84f588ceaad7facb81b02e09ed994c9dbaf76edbe43ad9b", 0xba, 0x5}, {&(0x7f0000007000)="e4aedd873262e4ff26bfdf4432eec9b6f32ce0b95f1f6cf73e94c636f36fd97bf6bb87b6f4f54d344ab6bc56bdd2943c0ecb6808ea6ae0f901ffd904d94bb1516369620a4a8d639ff0a4c5343b", 0x4d, 0x1}, {&(0x7f0000007080)="d40f72d6c41b54dcf310deae98d83a3e8296cb4e4ac02dafed60ba6c9cfe83a57f367738858145ac6b40f7b168ef5ec965806555cac66e91f6ae00d797d3c188a22cd9737d767f29522240e97cb9e750dca15fc586fc8c30745888f2ed3ba982feb117625b8f938feee631530bddc3a99bf2aef47e6531b890799b6da36dc6d53dd0f4578fec4bc4593957846e65789d3ba50e6003bf53ca166275de31b98a25f84f3501cd9957aadc533aeb1013dc5e0e1d953bad974d61a60a27b95c72e4cf179d673aa174ef86e3721278c4165280b4cbdaca8a130aa494e1fdf2b343dfd853a0ac315077fe385a2dd2598c919580d68678", 0xf3, 0xfffffffffffffff8}, {&(0x7f0000007180)="1279f7c6d2a8c0044afe9c72a0ce04534a58019ff1fa97de0df0e889efacaba264d1964028ac2ba22d7e52048688cea5a72b3a25b33c7b8dfa03f82c518418f5380ac79db1bb397d94afec4afc8ab0ba392d038f21bb0bae8c2fa81b2cf1e045d7cfd012fb14a5cc188853861830c4600abbb25c7f1ca7ede606459a1e2592bee9366d02a33c9d0b9330ce0829f485ad19ce89db4f6b3d58120e197911d2b851b2cc7151307c782115be25ba8d67f4ca458ec06125f59e9c17f48d4ec93e659395b707531887cf539eeda6d9c384591d362b16764352bd264fe7b74ac0a8113beb", 0xe1, 0x1}, {&(0x7f0000007280)="3790c6d41795510272ab029b6cc3012058ea6b79ded734c29b343c07823f193414064c282b5cb352c6c1567ff9358dc02a09dee1a48e97ba467639baff11678e1da2b61e7d5e8526981f584d351efa5fede43ba9c2581c0bb4729442101d1d758efadcfd059c366a59a16cd1e73f1fd96d38752185fa577e947f22f763312de273a884840e3c", 0x86, 0x6}, {&(0x7f0000007340)="92e0f316d9b6037378eb31fc083e58dbb594df72674bf2055f1c4327d995366723a2f2d55a9f60fed7f55c44ec90127e7c44b1d5888e43cc3412a1ce6cb4c12ed2db3ea8114a562fe6efe7b880384360d70c01f7a6871d3cb070b99f737ab0ef0b35c4d2031e5f693c1fc6c0a3f1ebb4144615b53b327ca4faff95aa5073cf0a5392728af6e491eb790b2f342b352794bbf803edf1", 0x95, 0x3}, {&(0x7f0000007400)="af119a16a0d455e1ab54adce35836caf38a52696969cc8619ff864c416a1107f5cc9b96fcaeb311931ac5bb35e5c78d9dbff31a0d6cb2bb065e27304ef2a7598460714189796de98b6c94d590a7d49e351683f7aa84369d709aa15ef8a4da1d7961f13f2fa103bd25c327330b9de345f73f133bcc1350e7269de3c8b421e925c362ef29557428fe26b939c761e54544eef7746f1a1a136a2c2a49bebaf922e89487bb2cd8a2bd1e07da3ba35ad79ea719f7eb0d6d39ef4c7fb986387f346f9a36bddb76007c4f3073c40a642cf6e59f00c75", 0xd2}, {&(0x7f0000007500)="0c4854eeea39954a7f4156f16c5823cfb5444e5c4cb2621ca2a44b8275a830b0b071f8e04451bef48d5b1d33580ff77b3f0b54bbc6a7d7da022a22e5f37242888417322753ba98c5afe97854bdebaf19eab90cd6528c0bb12b773d815122c2df05c4f10461ce23dc776cf4a2f624151cdec14a38b2c6aad44e8a5332cbaae4e4dff4a90d5d430a39d0617408696e73b6eb4fa3874594", 0x96, 0xffffffff}, {&(0x7f00000075c0)="2652b62122f3ad12a095a74dd305f0793e10b2cdd189bf689939ad88adf6bbc15f85117a0e6f17e32a95422e27aeac40dfe3fb6c9e7a6401b2f7053b579a7cae1442b6c7b5cd7dfe0bdc73244201e1c4b96df4e6375a522f46055e1296338543dd42907eec2393010b204a4b2e25255cfebd9ba241e1b213827861fe1a1e17ded07727c11dba7b07df57e7c7fdd2f638ee322a344fb67f987bbcc574651b528bf23558aac67661e7ed5351ee135e89b064febf697327e1958eb40c6bfcdd7f80", 0xc0, 0x5}, {&(0x7f0000007680)="71f03dfc3495fa58040b27eca5e315583234f35c588475bc6f642a2887ac563892ad2a2d7a0c7cb06067f810d0cb0e6c1ab0664598c4f1e1cac0e9108ba35e8ae52e0d2d2eba5353e961fd1ee2d187d520168fc01de5190d0592d5a7916588520cc2a4b7f66bfe5efa3c07c97a52181a2cd3b4e3e405bdcebf32daf3363ffaacd8326cd63a9bca8bb06bd578c5391eabb9894efa0681792fd45a10af84c9a2eeefa56459b36185", 0xa7, 0xff}], 0x208001, &(0x7f0000007840)={[{@check_strict}, {@map_off}, {@overriderock}, {@hide}, {@session={'session', 0x3d, 0x1e}}], [{@fsname={'fsname', 0x3d, '.log\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'lb_stats_refresh_interval\x00'}}, {@subj_user}, {@euid_eq}, {@audit}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) [ 1252.844506] do_user_addr_fault+0x56e/0xc60 [ 1252.845774] exc_page_fault+0xa2/0x1a0 [ 1252.846659] asm_exc_page_fault+0x1e/0x30 [ 1252.847512] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1252.848535] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca e9 f1 2c 1e 02 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d2 2c 1e 02 66 90 48 bb f9 ef ff ff ff 7f [ 1252.852264] RSP: 0018:ffff88804d13fcf0 EFLAGS: 00050293 [ 1252.853348] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020004d38 [ 1252.854813] RDX: 0000000000040000 RSI: ffffffff830fa4f2 RDI: ffff88804b2dd7f8 [ 1252.856254] RBP: 000000000004c000 R08: 0000000000000000 R09: 0000000000000000 [ 1252.857702] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 1252.859175] R13: 0000000020004d00 R14: 0000000000000400 R15: 00000000000003ff [ 1252.860642] ? __sys_sendmmsg+0x1c2/0x470 [ 1252.861482] __sys_sendmmsg+0x1cf/0x470 [ 1252.862296] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1252.863194] ? lock_downgrade+0x6d0/0x6d0 [ 1252.864056] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1252.865053] ? wait_for_completion_io+0x270/0x270 [ 1252.866032] ? rcu_read_lock_any_held+0x75/0xa0 [ 1252.866990] ? vfs_write+0x354/0xa70 [ 1252.867751] ? fput_many+0x2f/0x1a0 [ 1252.868494] ? ksys_write+0x1a9/0x260 [ 1252.869264] ? __ia32_sys_read+0xb0/0xb0 [ 1252.870099] __x64_sys_sendmmsg+0x99/0x100 [ 1252.870964] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1252.872016] do_syscall_64+0x33/0x40 [ 1252.872769] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1252.873804] RIP: 0033:0x7fa76daafb19 [ 1252.874570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1252.878294] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1252.879838] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1252.881269] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1252.882710] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1252.884161] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.885601] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:12:20 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x16c0c3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$vga_arbiter(r1, &(0x7f0000000080)=@unlock_all, 0xb) openat2(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000040)={0x201, 0x0, 0x9}, 0x18) 00:12:20 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:12:20 executing program 1: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x800}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) r3 = syz_io_uring_setup(0x3e01, &(0x7f0000000280)={0x0, 0x18d7, 0x4, 0x1, 0x375, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000380)) fcntl$setlease(r3, 0x400, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYRESDEC, @ANYRESDEC=r3], 0x10}}, {{&(0x7f0000000400)=@in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xdf}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)="ceb9867b9e092a20f4bae53ac023b379f2c176a28e22a064897629205f3a8be6440c36fa865abecbfca267fa03f7c81968d138c23fa583634b0151ca2bca1de9842ed8b9c09cfb85a1afd4d28e62603870ba664ba8eaa00ee6423f6dc22c7f77a2", 0x61}, {&(0x7f0000000500)="a82d46ed63756236fed3e7b8d9f95feed397608ddb19073f5f43fb4108cd8dd51b89a9cf29246b56b8fe0c0c54396b94f5e3383db5835774d5023ee84b1dc7214168a42a7f94ba5a8ad1a5292e4a308fb9f1f26a89edb319c2b66f838cc8e95503c2eb265ffaf510f5eb4648bcb20c6ddf42401fbf4009ea7d1763ebc8b1453c4df09767", 0x84}, {&(0x7f00000005c0)="f43d6cb5905e6e3ec9953be20eae779a5690236bc96be30ea55f126feaa7335e47dfe1c9116790ca6d779489cfb2f4e835a85df548cdb4ef079f5120c6e1f0831ed55fadb5bd317d3005e591", 0x4c}, {&(0x7f0000000340)="c1e40c935d663a3e90c087d05f78804ce8e34791d52ae7c373ca4e92a16f2e0d51c1f609acca9f89cc", 0x29}, {&(0x7f0000000a00)="5b31c20fa2af8db8a024dc6a39bd93daa395143d9d9f6285dca566a7d7a88c950f5f2fa423f62c4fb323e2eba9c7d57876129846486e4e16ef110c931bfe67be8fe00db9e1f3cd672adaa3124e12fb671ea25bd8fb26d04e65", 0x59}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1f8}}], 0x3, 0x40801) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fstatfs(r1, &(0x7f0000002e00)=""/4102) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 00:12:20 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000140)=0x6, 0x0) copy_file_range(r3, 0x0, r2, &(0x7f0000000280)=0x10000, 0xc3a, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x7ca81, 0x0) open_tree(r4, &(0x7f00000001c0)='./file1\x00', 0x80000) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) openat(r5, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) 00:12:20 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) [ 1253.114895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:12:20 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x62000) keyctl$revoke(0x3, r0) keyctl$set_timeout(0xf, r0, 0x62) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x8, r1) r2 = fork() ptrace(0x4207, r2) 00:12:20 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x20, &(0x7f0000000100)) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) 00:12:20 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 9) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:12:20 executing program 6: syz_80211_inject_frame(&(0x7f0000000300)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x19}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:12:20 executing program 1: r0 = msgget(0x3, 0x0) r1 = msgget$private(0x0, 0x8) msgsnd(r1, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) r2 = msgget(0x0, 0xc) msgctl$IPC_INFO(r2, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r3 = getpgrp(0x0) setpriority(0x0, r3, 0x0) pipe(&(0x7f00000002c0)) getpgrp(0x0) msgrcv(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/35], 0x2d, 0x0, 0x2000) getpgrp(0x0) getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 1253.210857] FAULT_INJECTION: forcing a failure. [ 1253.210857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1253.212538] CPU: 0 PID: 11027 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1253.213282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1253.214154] Call Trace: [ 1253.214451] dump_stack+0x107/0x167 [ 1253.214852] should_fail.cold+0x5/0xa [ 1253.215270] _copy_from_user+0x2e/0x1b0 [ 1253.215710] __copy_msghdr_from_user+0x91/0x4b0 [ 1253.216206] ? __ia32_sys_shutdown+0x80/0x80 [ 1253.216683] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1253.217257] sendmsg_copy_msghdr+0xa1/0x160 [ 1253.217719] ? do_recvmmsg+0x6d0/0x6d0 [ 1253.218135] ? handle_mm_fault+0x9e9/0x3500 [ 1253.218632] ? __lock_acquire+0x1657/0x5b00 [ 1253.219087] ? find_held_lock+0x2c/0x110 [ 1253.219528] ___sys_sendmsg+0xc6/0x170 [ 1253.219943] ? sendmsg_copy_msghdr+0x160/0x160 [ 1253.220425] ? vmacache_find+0x55/0x2a0 [ 1253.220854] ? do_user_addr_fault+0x5b0/0xc60 [ 1253.221339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1253.221901] ? exc_page_fault+0xca/0x1a0 [ 1253.222351] ? trace_hardirqs_on+0x5b/0x180 [ 1253.222812] ? exc_page_fault+0xca/0x1a0 [ 1253.223253] ? asm_exc_page_fault+0x1e/0x30 [ 1253.223730] __sys_sendmmsg+0x195/0x470 [ 1253.224159] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1253.224637] ? lock_downgrade+0x6d0/0x6d0 [ 1253.225104] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1253.225639] ? wait_for_completion_io+0x270/0x270 [ 1253.226157] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1253.226730] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1253.227324] ? trace_hardirqs_on+0x5b/0x180 [ 1253.227791] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1253.228392] __x64_sys_sendmmsg+0x99/0x100 [ 1253.228851] do_syscall_64+0x33/0x40 [ 1253.229256] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1253.229810] RIP: 0033:0x7fa76daafb19 [ 1253.230227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1253.232242] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1253.233080] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1253.233871] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1253.234654] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1253.235429] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.236217] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 [ 1253.248066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:12:20 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(0xffffffffffffffff, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000240)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0xce) dup2(r3, r2) socket$packet(0x11, 0x2, 0x300) lstat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f00000000c0)) mlockall(0x3) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r4, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00') 00:12:20 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:12:20 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x60840, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup2(r1, r2) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) 00:12:20 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 10) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:12:20 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r1, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}]}}) [ 1253.455964] 9pnet: Insufficient options for proto=fd [ 1253.459366] FAULT_INJECTION: forcing a failure. [ 1253.459366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1253.460687] CPU: 0 PID: 11142 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1253.461439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1253.462344] Call Trace: [ 1253.462650] dump_stack+0x107/0x167 [ 1253.463048] should_fail.cold+0x5/0xa [ 1253.463468] _copy_from_user+0x2e/0x1b0 [ 1253.463903] __copy_msghdr_from_user+0x91/0x4b0 [ 1253.464413] ? __ia32_sys_shutdown+0x80/0x80 [ 1253.464887] ? udp_v6_push_pending_frames+0x360/0x360 [ 1253.465459] ? inet6_sendmsg+0xbd/0x140 [ 1253.465889] ? inet6_compat_ioctl+0x320/0x320 [ 1253.466382] ? __sock_sendmsg+0x55/0x190 [ 1253.466831] sendmsg_copy_msghdr+0xa1/0x160 [ 1253.467312] ? do_recvmmsg+0x6d0/0x6d0 [ 1253.467744] ? __lock_acquire+0x1657/0x5b00 [ 1253.468241] ___sys_sendmsg+0xc6/0x170 [ 1253.468664] ? sendmsg_copy_msghdr+0x160/0x160 [ 1253.469160] ? vmacache_find+0x55/0x2a0 [ 1253.469614] ? lock_acquire+0x197/0x470 [ 1253.470045] ? find_held_lock+0x2c/0x110 [ 1253.470495] ? __might_fault+0xd3/0x180 [ 1253.470929] ? lock_downgrade+0x6d0/0x6d0 [ 1253.471405] ? asm_exc_page_fault+0x1e/0x30 [ 1253.471852] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1253.471890] __sys_sendmmsg+0x195/0x470 [ 1253.471909] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1253.474154] ext4 filesystem being mounted at /syzkaller-testdir853792088/syzkaller.z7imyR/141/file0 supports timestamps until 2038 (0x7fffffff) [ 1253.474488] ? lock_downgrade+0x6d0/0x6d0 [ 1253.474509] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1253.474521] ? wait_for_completion_io+0x270/0x270 [ 1253.474542] ? rcu_read_lock_any_held+0x75/0xa0 [ 1253.479125] ? vfs_write+0x354/0xa70 [ 1253.479534] ? fput_many+0x2f/0x1a0 [ 1253.479933] ? ksys_write+0x1a9/0x260 [ 1253.480360] ? __ia32_sys_read+0xb0/0xb0 [ 1253.480800] __x64_sys_sendmmsg+0x99/0x100 [ 1253.481260] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1253.481843] do_syscall_64+0x33/0x40 [ 1253.482253] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1253.482819] RIP: 0033:0x7fa76daafb19 [ 1253.483223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1253.485288] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1253.486101] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1253.486899] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1253.487699] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1253.488487] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1253.489272] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:12:20 executing program 0: r0 = dup(0xffffffffffffffff) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) r2 = openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x4000, 0x20}, 0x18) write$vga_arbiter(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='unl\t\x00\x00\x00\x00\x00\x00\x00'], 0xb) write$vga_arbiter(r1, &(0x7f0000000200), 0xf) [ 1253.556370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:12:35 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 11) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:12:35 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x62000) keyctl$revoke(0x3, r0) keyctl$set_timeout(0xf, r0, 0x62) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x8, r1) r2 = fork() ptrace(0x4207, r2) 00:12:35 executing program 6: syz_80211_inject_frame(&(0x7f0000000300)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x1a}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:12:35 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="0900d24212063dabcb27e843"]) stat(&(0x7f0000000040)='./file0\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000001c40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@mmap}, {@dfltgid}, {@loose}, {@cache_none}], [{@subj_user={'subj_user', 0x3d, ':'}}, {@uid_eq}, {@audit}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@obj_user={'obj_user', 0x3d, '('}}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 00:12:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r1, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}]}}) 00:12:35 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:12:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) [ 1268.351138] FAULT_INJECTION: forcing a failure. [ 1268.351138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1268.353892] CPU: 1 PID: 11160 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1268.355302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1268.356977] Call Trace: [ 1268.357517] dump_stack+0x107/0x167 [ 1268.358267] should_fail.cold+0x5/0xa [ 1268.359088] _copy_from_user+0x2e/0x1b0 [ 1268.359903] __copy_msghdr_from_user+0x91/0x4b0 [ 1268.360857] ? __ia32_sys_shutdown+0x80/0x80 [ 1268.361754] ? udp_v6_push_pending_frames+0x360/0x360 [ 1268.361938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1268.362818] ? inet6_sendmsg+0xbd/0x140 [ 1268.362839] ? inet6_compat_ioctl+0x320/0x320 [ 1268.362864] ? __sock_sendmsg+0x55/0x190 [ 1268.367235] sendmsg_copy_msghdr+0xa1/0x160 [ 1268.368119] ? do_recvmmsg+0x6d0/0x6d0 [ 1268.368941] ? __lock_acquire+0x1657/0x5b00 [ 1268.369847] ___sys_sendmsg+0xc6/0x170 [ 1268.369854] 9pnet: Insufficient options for proto=fd [ 1268.371686] ? sendmsg_copy_msghdr+0x160/0x160 [ 1268.372609] ? vmacache_find+0x55/0x2a0 [ 1268.373443] ? lock_acquire+0x197/0x470 [ 1268.374247] ? find_held_lock+0x2c/0x110 [ 1268.375097] ? __might_fault+0xd3/0x180 [ 1268.375912] ? lock_downgrade+0x6d0/0x6d0 [ 1268.376764] ? asm_exc_page_fault+0x1e/0x30 [ 1268.377654] __sys_sendmmsg+0x195/0x470 [ 1268.378470] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1268.379351] ? lock_downgrade+0x6d0/0x6d0 [ 1268.380209] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1268.381212] ? wait_for_completion_io+0x270/0x270 [ 1268.382210] ? rcu_read_lock_any_held+0x75/0xa0 [ 1268.383162] ? vfs_write+0x354/0xa70 [ 1268.383936] ? fput_many+0x2f/0x1a0 [ 1268.384681] ? ksys_write+0x1a9/0x260 [ 1268.385464] ? __ia32_sys_read+0xb0/0xb0 [ 1268.386303] __x64_sys_sendmmsg+0x99/0x100 [ 1268.387184] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1268.388247] do_syscall_64+0x33/0x40 [ 1268.389009] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1268.390051] RIP: 0033:0x7fa76daafb19 [ 1268.390812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1268.394594] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1268.396133] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1268.397581] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1268.399043] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1268.400518] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1268.401992] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:12:35 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ip6gretap0\x00'}) 00:12:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r1, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}]}}) [ 1268.478312] 9pnet: Insufficient options for proto=fd [ 1268.673734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.054454] Bluetooth: hci2: command 0x0409 tx timeout [ 1275.101506] Bluetooth: hci2: command 0x041b tx timeout [ 1277.150500] Bluetooth: hci2: command 0x040f tx timeout [ 1278.058472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.060257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.063081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1278.118931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.120916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.123542] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1278.284956] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1278.284956] program syz-executor.2 not setting count and/or reply_len properly [ 1278.306498] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1278.306498] program syz-executor.2 not setting count and/or reply_len properly [ 1279.197494] Bluetooth: hci2: command 0x0419 tx timeout 00:13:02 executing program 2: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x3, 0x4800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYBLOB="0080000000000004000000034d4000340064000000049078e0000002e0000002891fa3000000000a010100ac1414aaffffffff64010101e0000001ac1e010100"]}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6, @remote}, 0x10) setresuid(0xffffffffffffffff, 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x1) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) 00:13:02 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 12) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:13:02 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) 00:13:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:13:02 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:13:02 executing program 3: getxattr(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000440)=ANY=[@ANYRESHEX], &(0x7f0000000480)=""/118, 0x76) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x3e77, 0x3f74, 0x3, &(0x7f0000000180)={[0x785a59ed]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x4000010, r1, 0x0) syz_io_uring_setup(0x2b53, &(0x7f00000003c0)={0x0, 0x3f16, 0x20, 0x2, 0x239}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1815, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r2, 0x3e77, 0x3f74, 0x3, &(0x7f0000000180)={[0x785a59ed]}, 0x8) recvmmsg(r0, 0x0, 0x0, 0x16060, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14, 0x1c0800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r3, &(0x7f0000000000), 0x5ac, 0x0, 0x0) 00:13:02 executing program 6: syz_80211_inject_frame(&(0x7f0000000300)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x1b}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:13:02 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f00000000c0)={'ip6gretap0\x00'}) close(r1) [ 1295.568248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1295.597361] FAULT_INJECTION: forcing a failure. [ 1295.597361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1295.600179] CPU: 0 PID: 11665 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1295.601580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1295.603255] Call Trace: [ 1295.603794] dump_stack+0x107/0x167 [ 1295.604544] should_fail.cold+0x5/0xa [ 1295.605325] _copy_from_user+0x2e/0x1b0 [ 1295.606135] __copy_msghdr_from_user+0x91/0x4b0 [ 1295.607109] ? __ia32_sys_shutdown+0x80/0x80 [ 1295.608002] ? udp_v6_push_pending_frames+0x360/0x360 [ 1295.609047] ? inet6_sendmsg+0xbd/0x140 [ 1295.609851] ? inet6_compat_ioctl+0x320/0x320 [ 1295.610759] ? __sock_sendmsg+0x55/0x190 [ 1295.611599] sendmsg_copy_msghdr+0xa1/0x160 [ 1295.612474] ? do_recvmmsg+0x6d0/0x6d0 [ 1295.613287] ? __lock_acquire+0x1657/0x5b00 [ 1295.614192] ___sys_sendmsg+0xc6/0x170 [ 1295.615009] ? sendmsg_copy_msghdr+0x160/0x160 [ 1295.615946] ? vmacache_find+0x55/0x2a0 [ 1295.616775] ? lock_acquire+0x197/0x470 [ 1295.617586] ? find_held_lock+0x2c/0x110 [ 1295.618425] ? __might_fault+0xd3/0x180 [ 1295.619257] ? lock_downgrade+0x6d0/0x6d0 [ 1295.620112] ? asm_exc_page_fault+0x1e/0x30 [ 1295.621020] __sys_sendmmsg+0x195/0x470 [ 1295.621840] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1295.622710] ? lock_downgrade+0x6d0/0x6d0 [ 1295.623576] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1295.624551] ? wait_for_completion_io+0x270/0x270 [ 1295.625556] ? rcu_read_lock_any_held+0x75/0xa0 [ 1295.626502] ? vfs_write+0x354/0xa70 [ 1295.627290] ? fput_many+0x2f/0x1a0 [ 1295.628052] ? ksys_write+0x1a9/0x260 [ 1295.628838] ? __ia32_sys_read+0xb0/0xb0 [ 1295.629672] __x64_sys_sendmmsg+0x99/0x100 [ 1295.630537] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1295.631608] do_syscall_64+0x33/0x40 [ 1295.632364] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1295.633405] RIP: 0033:0x7fa76daafb19 [ 1295.634163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1295.637894] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1295.639447] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1295.640935] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1295.642401] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1295.643860] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1295.645322] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 [ 1295.651007] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1295.651007] program syz-executor.2 not setting count and/or reply_len properly 00:13:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:13:02 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 13) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) [ 1295.734717] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1295.734717] program syz-executor.2 not setting count and/or reply_len properly [ 1295.766193] FAULT_INJECTION: forcing a failure. [ 1295.766193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1295.768894] CPU: 1 PID: 11680 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1295.770253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1295.771907] Call Trace: [ 1295.772434] dump_stack+0x107/0x167 [ 1295.773147] should_fail.cold+0x5/0xa [ 1295.773902] _copy_from_user+0x2e/0x1b0 [ 1295.774696] __copy_msghdr_from_user+0x91/0x4b0 [ 1295.775616] ? __ia32_sys_shutdown+0x80/0x80 [ 1295.776497] ? udp_v6_push_pending_frames+0x360/0x360 [ 1295.777522] ? inet6_sendmsg+0xbd/0x140 [ 1295.778327] ? inet6_compat_ioctl+0x320/0x320 [ 1295.779209] ? __sock_sendmsg+0x55/0x190 [ 1295.780012] sendmsg_copy_msghdr+0xa1/0x160 [ 1295.780892] ? do_recvmmsg+0x6d0/0x6d0 [ 1295.781665] ? __lock_acquire+0x1657/0x5b00 [ 1295.782523] ___sys_sendmsg+0xc6/0x170 [ 1295.783320] ? sendmsg_copy_msghdr+0x160/0x160 [ 1295.784219] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1295.785098] ? _raw_spin_unlock_irq+0x27/0x30 [ 1295.785985] ? lock_acquire+0x197/0x470 [ 1295.786756] ? find_held_lock+0x2c/0x110 [ 1295.787575] ? __might_fault+0xd3/0x180 [ 1295.788363] ? lock_downgrade+0x6d0/0x6d0 [ 1295.789179] ? io_schedule_timeout+0x140/0x140 [ 1295.790085] __sys_sendmmsg+0x195/0x470 [ 1295.790863] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1295.791729] ? lock_downgrade+0x6d0/0x6d0 [ 1295.792567] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1295.793528] ? wait_for_completion_io+0x270/0x270 [ 1295.794477] ? rcu_read_lock_any_held+0x75/0xa0 [ 1295.795393] ? vfs_write+0x354/0xa70 [ 1295.796143] ? fput_many+0x2f/0x1a0 [ 1295.796855] ? ksys_write+0x1a9/0x260 [ 1295.797620] ? __ia32_sys_read+0xb0/0xb0 [ 1295.798435] __x64_sys_sendmmsg+0x99/0x100 [ 1295.799278] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1295.800304] do_syscall_64+0x33/0x40 [ 1295.801031] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1295.802031] RIP: 0033:0x7fa76daafb19 [ 1295.802755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1295.806317] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1295.807814] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1295.809217] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1295.810606] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1295.811991] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1295.813362] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:13:02 executing program 0: ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000000)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x7fffffff) 00:13:02 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:13:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="020000000201010300100000000000000a0200"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0xf04ae98708687f81, 0x0, 0x4}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x80) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x9, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x1ff}}, @NFULA_CFG_MODE={0xa, 0x2, {0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7f}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000040) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x338, r3, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_IE={0x30, 0x2a, [@mic={0x8c, 0x18, {0xf02, "be45a65bca44", @long="095e3452327202111bac454a807cce29"}}, @mic={0x8c, 0x10, {0x3ee, "e4778ecfbafc", @short='\f:t_kqo['}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xff}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7ff}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}]}, @NL80211_ATTR_IE={0x2ac, 0x2a, [@preq={0x82, 0x41, @ext={{0x1, 0x0, 0x1}, 0x2, 0x9, 0x20, @broadcast, 0x0, @broadcast, 0xba, 0xfffffffd, 0x3, [{{0x1, 0x0, 0x1}, @broadcast, 0xffffffff}, {{0x0, 0x0, 0x1}, @device_a, 0x80000001}, {{}, @device_b, 0x80}]}}, @perr={0x84, 0x111, {0x2, 0x13, [@ext={{}, @device_a, 0x9, @device_a, 0x18}, @not_ext={{}, @device_b, 0xffffffff}, @not_ext={{}, @broadcast, 0x2, "", 0x3b}, @not_ext={{}, @device_a, 0xff, "", 0x16}, @ext={{}, @device_a, 0xff, @device_b, 0x18}, @not_ext={{}, @broadcast, 0x0, "", 0x28}, @not_ext={{}, @device_b, 0x3, "", 0x25}, @ext={{}, @device_a, 0x5, @device_a, 0x3c}, @not_ext={{}, @broadcast, 0x800000, "", 0x2a}, @not_ext={{}, @broadcast, 0x101, "", 0x30}, @ext={{}, @device_a, 0xffff, @device_b, 0x41}, @not_ext={{}, @device_a, 0x8521, "", 0x21}, @not_ext={{}, @device_b, 0x8001, "", 0x3d}, @not_ext={{}, @device_b, 0x5, "", 0x29}, @not_ext={{}, @broadcast, 0x1000, "", 0x17}, @not_ext={{}, @device_b, 0x3, "", 0x6}, @not_ext={{}, @device_a, 0x5, "", 0xe}, @not_ext={{}, @device_a, 0x6, "", 0x12}, @not_ext={{}, @device_b, 0x7, "", 0xe}]}}, @random={0x8, 0xd4, "03fba7daa32ff6c1cf1f27653547842a6be5ee7799e7f8072522ea0111d60c8aae64cf55cfe62fd2b310c67e4a8a8e113ae7ef78ef16db234723f93acd595081cc1a2aa96b409ebd84944b5de62ae4d449123a6e96f03450526f554bb4203a9a6a56b21dfaf24953ff97ba919e228276cd71bae6d1b90e250264bb0951b22b28dc627a536d676331ef0f0d807799b52d229709b8cc2d365cefc3657472c00a7f6ec63d220fdd1043134bedfb39643aafa8866e45570b0e2c54d0b95b8aa1c4e88088c54e8cc3d9f0ed7da9fdea038e57d79bdaff"}, @mesh_id={0x72, 0x6}, @preq={0x82, 0x72, @not_ext={{0x0, 0x1}, 0x7, 0x2, 0x3ed3, @device_b, 0xffffffc1, "", 0xffffffff, 0x80, 0x8, [{{0x1}, @device_b}, {{}, @device_a, 0xffffffe0}, {{0x0, 0x0, 0x1}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @broadcast, 0x40}, {{0x0, 0x0, 0x1}, @device_b, 0x40}, {{0x0, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, @device_a, 0x1000}, {{0x0, 0x0, 0x1}, @broadcast, 0x452}]}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0x338}, 0x1, 0x0, 0x0, 0x810}, 0x80) [ 1295.889139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:13:02 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 14) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:13:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x300b4e2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x7f, 0x34, 0x1000, 0x1f}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000b16d4914dc4b2a1be9cb20a76d9899227657c52bfa46f181ae442ca7adb6ffb5bb5f2cc3304014c8a7c85b1ea8c441568b8b965e1f767cb5240c14d4f248968390b163f2e3e2b695a649103d12b46c765371572d1edc622d64a664280a86b80aaf7db2d471f780e6bae495b10ff8109b1597e7dda6c7f9bfa4cf2a8fc7c5668c", @ANYRES16=r5, @ANYBLOB="010000000000000000007e0000000000000006c6c62559f95a2cbfc2ae9865a10092aab562f80afdde1f7f0622ff8b5320805198dff09559e03ad5c12cff166a640677872867b86530229e41872e050de48c9c17adf0628d07bdd7da648b1748b38af561358c72a070c6018f8d", @ANYRES32=0x0, @ANYBLOB="d77662fea97a101f78936bda3824eda0b9e07a10aa7916f6f1c1c20d6a55bb2c19933d79b1c2090c30a041f77749faa62ed7b64113961ef439008bd0ce9914e6cbd0998e548a7f1cc4034c7630274306d584c0fe2b58d3d514594377dd2ffc8b0ce5d88ccbb6bb9287a5a83891b88ee5aebc3a1a456475fc0b26e418a24307b5d4dc3f452cba1e8a871d3b"], 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001c80)={0x11, 0x0, 0x0}, &(0x7f0000001cc0)=0x14) sendmmsg$inet6(r2, &(0x7f0000005400)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @loopback}, 0x1c, &(0x7f0000001780)=[{&(0x7f00000001c0)="304cc298152ef9639271b0abcf1ce0d8857b3a4b88fb3d94c182bf2bc4a07e46d81514e89c7a09bbe5ef3b0453c8630035f1", 0x32}, {&(0x7f0000000540)="959f109aa5e2884fb24ed5bf35d15b315f3bd27791fd06fcbbaacf000b085cc37db2e18273d28083ea52c4804e7098fcfdca7893f0b0212b70c12090196267fea3fbed2497f0662f6656c98210a02fa01a65cf0b858e9e474b70f998210fce75883253416c8e631295d465798a523d94c4048e8ce693b192", 0x78}, {&(0x7f00000005c0)="19d2a8b0a53fdea47bb5e88da647a3349b643fc2f7866f8dc2d905c18ecb85095c7dd0d97110340a9ca4e8ddf8c82967ce364b81771b1939b581f6309f7cffd99c37fee5b6e485bff98660cfde75650570c4e73a46ae44cdc8941bcdcc8bf7aba5f0574106db6c1c737081f4bf1b09dc11e9b6eaf40e6983eccc90eb7f9459d9d179d9fd69253f5847a8c92cf1d17261ea3980561913709fdf714575a690c4e685040e1f9a68022305ec02a43a9d7545495dc4c083b550a5a36f15cc48644fd187290ebae812aabfe70c98df39edd46ee337fd540b3b796a64bca99ddb0fd12993df02766f4187312d44ea77c7aba81f12a36e2a8eeef5e9f845ce1a11b87133a5aa50d9b80edb3d380603a1c96893cc23becd5004b8c1469e21152fbc0a946c50a099733a4ff90d235afb2e488651d10da044f33c6f83ba692c026decdef7292bfa8f28978db7e9f143cd48f54bc87730cb102399b1f4fa09c8a81327b62a9f5f5e725b7065da2c9e39d076fe8a335440e4f711c3f47c1dbafe68b263944b1da51c935f4847f2316bf769a8304fe0deac8e535b07d5b05e55e5982f8376ca9e93f85d97912e0ed783504e0d07dcc2f433479c234e94cc9594b698d1c01a75fbc184a94cbcc04a1127629bd96cc7aa28e69b12ab34f2ce90af2310eca89dee0a60e37975eaab4b14104745f9502ae5905e653b34d5ab13ffc32b4be732717ba82a1a0032a841cf785ccbc55105647cf18215424dd783866e2ee8282f118b8923e58526ccf4ffa5e6de8f88459613d4177cf0cf3a8e9f1f0492b2f84379b980e9f31d6fba7c6fc2c427f88f1502c14370b37e3823ec9b1c43d085f45fbcb431e149d87bb56378556fb0f2564e5bcaeac5039e2169e2e0f39d05a3fa5e42849490d210bd6921f8ff18c1a2dc617a8cfb1953f19e0b7b6181a7b3622809242f297d15aa730a3f8d94a9e4b5b577a5e87b3a637a32a445d5fcd76c9f1d1b99ff8767e58a89a3febbb0400616aa57edcaf686e5786f9d5b254336ddb84e1b6ec6a07ba2c0997bd0744a1639794f02bd1bfed944e03993895a4b2a8556bceb8a15116a946c84d59dd8cf19ebc5d08584a8b6c406efdb83e8f8e772e872970eb55535041b91d02b6082426e7bc6c8611de6fa6c5ae3da32076d6a0aa2872d6355673c67f77f673e7b16d14c497d29bfee22d8928d6247fea87158bb0af512a1ce74f5e81b0458f131c8d9544ad326bdc84f8055a01728806e24bff491c5211259f0373b659d125bb9dbee16f701d143e59356a1311704fad8a4b26945c40fc83f71b52714e2193598324b73ea80aa1e54eca7594926ce0cbc33889d728dc8dc2dcf88db99d6d6a30a1f029a103c151ca5cd54c84bdc9b4c977bd86b3e6ec80eeb38e89ca378d7b7e54e56af2e47607f6b4fa44d09f61ca15080d29ffbd1a8d27888b991d1a277cac29832ce7bd464c4c84c0a44b23190d36a696d64cf8397909ff9a37849af3b974332090ed5834c04d6607d1c9f2d3c041d2e12f2918cb270fe0bf15a50d359c4de53817b51e8807d8e3af89acc32b33cea8f15947794655c3169ca02ac8d95ef3f78eab486d04618064a6577fe5e523074b836073d72033849517366dac6e41c7f130a9d84190bb8252d07b32c35d7a1fad8e081c9ef444bfc657d49bea0d280699b69da61d5d9128983e268a54c0506d1b5761bf8dfdf67d386cef132c5db328511a3388fc8dc24a717958b7aba3fb983fdbc083d0b9b57a03a5d26d90946bd4496949a0e1acf439ae7513b8d4183531966f50912575085ae94cdbaf87c015c2ee52ab755b0484dbbf3c21d0c0447bda0be6f9e6d99effdc350b4efce3bd48e8e1aaa737a7adb845b968088f0b84d97bc8769e7c7249ebbca77db20dd39a90c7968444b6be08e708bfde5363b8967e21e297e07d10ed40a929fa58d0751085014b9a800594719e904e72ed0f188117de726ebd2271edffc6d3c4e8108ce89b2b2b626b2ce05d3201e43becd4ab5f9ec8aea1ead24b17d601f6295fe32937353b7cc2429fef3af336dd4f70bac069e7bf2c15674cf7476a7867e6bfd6dfd3d37ceaa0ac0ef1f9ca8b754dc6e085a454957440634feb1db3514df53fb288c15f8947114b4090f4e80ebf6db8f3dde041f62f7ffd95e1de30fb4500e661ea7761c8564d9e089bc75a57155ee16e0c689bd8fb7829d441e8d761d43ce5bf3e3a751dca25880da83b595ca181900cc6a876b0a6686e9e24289c7bc44322401c87032e51337972e27a3090a6fc4e516f9dafa8d4b08401d14b307f8458fb6d8b354297a50f8f9db35d29c579ce357be972472ba821d7884f1d8b9e3a76077802d1f54aff135c1557322b55cea58eeaf45d3a7e1c4a9b73f8176d22b109d0ea1a379d7400c657096a52f0b9b18fc6130e6cf5ee2cc609cbe634fe09c38d7a49841f5def3dc76dd44168c7df2ecf66a5bbf2db1ef05b24832f257e5f92abab635ed77c55d62e18a4d096901621c927f30002e10d075f2dea44e5a4be569409a2f0f5e6dbacbd260af38306c9296b9b3b224ad48d2fb80d2bf6924482b404720dbbcf90ece33ef12662042358eb3cf4816329c2b4f99aa958c76db55cf283ef20a1227cc029e019404b28623ae0e80c066841b8999db1c49ef7fad529dd829bc62175509dfb8035df166626ffabb629bba2070f4e7eaef6693ca3396ec0c8cb2939226b38d64f698f36075344f64305130cdc4dcdc18d9fde5f42eec2c380b352858514c1026101498cef101cf1046d99808859800be14367e6ab0c1aa40a504b33936e3178bcdbae4d74d53c8cb09c92ca9bedd05deae9dfb2313f9b9416dff39e471e06816b7804d05127629b8f8046c2ed902af7c0f063bca6a8963f71ac512a453e5dcf59ef1d15381c81fdd74eca0ce8a512f113fa2d526e0b6ebfe9426b1f05b7cf2dcbb6ff15c11db9c07ae507b20065053d567eec441565715e1aef7d52c2b319c644db3a5daf6c74baab77cd00e318ac402785fb2e7c23a74bd749e68dca1a1ed73bba60664241ea88bee0a83ebd5e5c06255487b7fdc7fb2c917557e62724d963f6ac9e9485ffdae050d581c1bfe301a134dd8db7c2732788289311aa000a9ef13b0082589fd395bf01d222e0253de9819662d294bd5ea465ec71f8cec3100e9f8b8ef6c5106075e8e98649bd8abf065350352abbd9131fa294389f64cfe6ecf3ba004111dd870e412301c440d8c53a412cdf701c4d73e86c6c699a8e506190f15eca6ac6ad605a160594babe10236b23c925c5520341e00f7810d2e95ac7e2ea6ee84b861a3d3a2e169efe5dfa24b81a524ed6149420b0657bee43df3e564b2355fb5f82e43b973a760dff7033cfca68f42f1020026dc308c45e68b2f7cec5596622898e25454d12d7127c31525739c6e457b0f2aad4f5fefaccac77cfaa418b074bb69beb56a3381122d881b8dc1e741d5f640c59d2f25edf8176b44e700cf1ba7518b619fd640f843efb6352999840c5c9f87d2db9b1285ad7f3a840c32969c7757938bbad0a5a8f9823ffde119ead85e4bba9fe7f314ea402bf6c28b38555ccdf6b221f1e1962b7a7357bb29db86a83885f8400905a8ef475974955a9c79b52766c5f3c5a64fcd9f5ea22d7d06d8234b6b105c2c804647640c84e2c51ac180f77634a373fde90ac0aeb7ed73b15ddc44eaa8cc5a5c1510e0a2d457bf0b61392572f374c06bc3fe5c2a1317f595e0c23b9b8062b8a6b08d6d72844be919f24481144583c846baa478e5b51681abfd9538374e78993f53665422171f92184f58dd37d721064a570e3f27ebcdcd4d79809e39fdbf15ca4be279e859b34c2a2634f57ad1378de9d9dd69c9259dceac02487b5a394d9c1493b597abcc57d6170c40b26204abf183270090316b0f69cc94ece4f3d7700b6d9abdfe78e5b14a785855a248931a9d96f921425d46f5f3a54ba235a872d9536a641f5c9414576418ef37b05d0ff57a65f6c611765bc874f2b6dfe250b19ade0c0417ec2c4bd42e66ff9113b8bc17648a0fdfab00e52fd22b50c5d2a233c6d46e262c93b7fbb65b42ecfde15507803c3e6e462c25af60aa641d2f302736cab347318998040f193005aacd68e70656685a060ad9195486819c5684a1d6347aa1c93d3cb1a77b6194af51ec1af199f14c3c21bc553901ba6b14bd74463f81192c0ca216f27d1ad1327f82d936966840788872acc170ec96b0f2ba6926f77bf713bd751fc4f4f8a18924436570133d8da26e4104dc5ac1f1ca738551bbc28db2fb5073d3cb57ad65b3817c09a74db18cda3eefacea8693727331b92e4be20e3149c283f238aea12ef5c3c1f3f4c00a12b09363a70e12ca3ef0e9244bd6382fea918ceba3464bfb68fa0b8f2d3776db6c6b84b5fe992b292ded183f5ddccd57a40a78754f0ba2c2706828871ebb84c325a76b99a1a0ea722491e2eb2482d9961186e52eb69fa1bb09fd23194596f61bfc710214d1e83b328d1f0928f639784433d7afa16b175dfb19a1431c4dfbd679a8778bd3fdea6894ee13f18c95d6c2bdf34e614c025e2991c1c6cc4de3e739b44185f00bfe40059410671342be75b6f920e62916df1e45bcd5afa3373b7d6c7a443dce62ee04790b794d86ba7b9dbe8cd6cdf5d49527f47a53091acc638993e393fc535eb3fbb7257bb22c011b43a50cc65726206894443adf9d9966aea91d199b1b23a0edbb5e4b70dbf80b3c4e2e0ea6264348fa52da6aa156fd29d7aedbe4206eb98d7bd4b15a64348ff773200ee6e6da0541b3767edd73a5456ee1a570e7f43b0499b8ac5197b616b4cbbcc62e5e17900b8af635b441d63d80199c8291cf10777cab3f2dfb692ffcb303fb954791fa09761900fe340f60f41e9a3baef58fa8bee78e4d6bfc8dce45f108eef02f9c4e179eb867b4e61eef3100ee6debde43fa32bca779270e8a3b25e4fc7e0b1e046788b77aa403501fc51511e0aaa57b0d627aed33eff973cc3e720527d911b2e71c0d7b0a14957fdb9f289f72d46d36b0d813eeb229cf29aee567c68e12a20aad10a09f695130158857fb350538b2abe5854fc9d2e2d981daead257038da524152d58904264e1b300d4941e5e7c4f8bbbb1146848255514cb3415dc4ee5993b8ddf71e28d58d382170de6b1989fc0d19bc125c9b22b3a0af150a55e74b9c3b3a230b7bef6d2664e808d79d7a8bf7dd0410eabf3b3980800f332c062ccf0d5b17c619c621ff28b2863643a8be13a7270b4fc7ebf74b32c2761fc79337c7609069a9a20333699ef2e6df5f6cc0fc472b45444b9b03f5852270bb0d21d25714681efc9df6073461be218875f3e299274271a756a9c8963df35de3ece3d081923e9afe5111c594a4cf48c6e818e5223af8b5b5ea7e179f57c2a6eee91b43549962b2afe3960f0105361ea75b2b5a9764b574b3200ac9daa57c425ef6a3df37beeacccccae65a9f1289657898e099281fa206853fbba7f46dded2d4e5b4f9afb3bdb6288a7e8fe7019cf67d44fe13fd8787ccf8a33cf95880ff8fdca3ae8cddc44cd98f2e84632477074ea8eea0c0d1dd7dd4fbd5357abb130b2be5c858413f6ed8c776852f4ed067373a1492fe9397acbb9d2eb1a29def4a3e58c98f332ff014959578e02bf73eb32099b0742e71422e7f0fad59ebaece3eb86e483a9c189d6f2d1cbe55044a6750d94fd4830ebbaa703169166458ba0a0428512143b623abeda062124eb849d8797ee96d25d6879b60fb3926dcc9f69c447d9c2d2608a7c42524cda72fc5f492edb9b", 0x1000}, {&(0x7f00000015c0)="80222027d9265dbbe1d9181fdd9d1059ae33b59450bed4e97b50a1fa76893b014be799f6fc0e46bae155a264f5d4c98fb5e2a433e13c76ce06cf15c6b88d56edce230732ebb475775912ce99c8b4cf9bdef4e2e2268d6f299c21c59d9850f8ff402080872a52e8bbbb280cc84a5fbce6ed99b241ec0aa74e96bc8d653186537ae4016381a93d8bd09a19421a3fa7b6257ecfd2b6599943cda781b176bbf3724a8cd1c0d3e41b7c58b4ebadf6235a4165b6a1d8d68921b294958c52326c145e5a518106a733df76d803ddaf7500c6beaafddc8f5980772dc9657d2bc8a5e94da01d9dad2f8f029fe46037caaef9eb", 0xee}, {&(0x7f0000000240)}, {&(0x7f00000016c0)="aa4db2a1033858f3b4cfb89e704eeff6a79194223cb89b55e64cecbd14f268a217a305bd2e28f5fb3765fc4e8241a8dcafc5287172de30d6d9b4587809650b83a6e21f63132ca297f1635657e1d8922f8e3fe45847fb4c3f35a71e0a2217ba335de9eed6676a652f843d668445543f392e588e1bc746788ac388bb35f2bb0e2c53f7014e65ac51a21fd4edc5796e93d2aa3f0662cddc9a7b927fe2a214df3c3fe432e473cf0a33128114f6986456474f85e3cc13622f91aa74852d5a17", 0xbd}], 0x6, &(0x7f0000001800)=[@rthdr={{0xa8, 0x29, 0x39, {0x2, 0x12, 0x2, 0x6, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @mcast2, @private0, @private1]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0xff, 0xe, 0x1, 0x7f, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x997d}}], 0x148}}, {{&(0x7f00000002c0)={0xa, 0x4e23, 0xde, @remote, 0x5}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000001980)="c3e0d4242bde0a003c43a175d7e759d5969f2c433f9459baa4cfb07f8942cc949715b8fae890f80341096c6841ee14fe8a071d8cb20b3a9ab1e3a307114677e863a3a81da2750f200e0d31e2a25308e86cb0c61c1227f35aa93e869da4fbc650afd48c47396ddcf50c693528cd2afb6c856e7a97f040e05492beeb97c3a6819d9932e7251665c1cd950bc6ceacee8b44427ee4d1c918d0aa6ccc8308238fcace6e7476b62e00e26f3838d859d0dd05c888695160f1cb220376b84a04418d2d8b66e498", 0xc3}, {&(0x7f0000001a80)="946a1582f9e01990f33692cafb2eee74a03864e5b67927c6f611d97ab3061476f662474e0f8a9710635becbefc3670abb19cb711e4d9a86f0a7cb1eca0747d1f0cc8b5b2f724cb284b1262332ec41bd26f", 0x51}, {&(0x7f0000001b00)="fc3ccabe344593aa9195e556375f78d3f8a57ac0a8c9e2195761d697552074b4e79c3f1aa36c77946d280f58ed59fdc50f459f03a9cd40457c3a4d31b5f37855087d21d8fa27f38fc8804f6f11e13011a8ebcd28392dd5f429cc8067c66a10d4afadb291b3b7a2782989c34437e2a2f86b3c3ae37b6e6212a1", 0x79}, {&(0x7f0000001b80)="a4c72f62e8604a3f6e6ee6575e2010ae4bb41e3cd7b71aa5a3c166d3cbbe06b4e4ae839b686a04446233239fd267ee5da225c601b4a526224072d9d9b811aaf7980a7556c9b6e509588e1901126ac10d10d2a32aee069c3e0fecb8bdf25b4f40e188b9efa7319bed4e40da8cdce33df7cab5fb0f5d4eacf36f3773cde767e836a0f83443991b04a360c48d8a7a6f85dd5f5176ed2ac26c1dedb11c0a66871419d420f0d6a1631f880c49286b5b730fd36b07cd83ae5cbbacc6b52d6954e2e724", 0xc0}], 0x4, &(0x7f0000001e00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hopopts={{0x48, 0x29, 0x36, {0x29, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0xffff}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @jumbo={0xc2, 0x4, 0x1}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0xd0, 0x29, 0x37, {0x21, 0x16, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x80, 0xe45, [0x4, 0xde67]}}, @ra={0x5, 0x2, 0x200}, @generic={0x5e, 0x96, "f31b042ce2a9f018b9c33595ffb1e7a19d37c3a8ceb135e4b199774ba7bfd9a4c0ffce766bc42d163b2475a5714d9a0cfdd2dc8291b77d9e27321296670d7e612f74215c31b01ac19248770ea0b5d6aa2cecceae5ffa406e45149fdbda7fd61c0bc1bab97da0b57a2e24b2abf8daf38e88b869e32516c3362c675288622fc72bd0117afd0b7c1c6e0060397383e3f90824a2cb1fc070"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r6}}}, @dstopts_2292={{0x1060, 0x29, 0x4, {0x16, 0x208, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x3f, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x7b}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @pad1, @jumbo={0xc2, 0x4, 0x80000001}]}}}, @flowinfo={{0x14}}, @hopopts={{0x38, 0x29, 0x36, {0x4, 0x3, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x1a2}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0xff00}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0xad4}]}}}, @dstopts_2292={{0x10e0, 0x29, 0x4, {0x3a, 0x218, '\x00', [@enc_lim, @generic={0x2, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0xfffffff7}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x67, "e3f6205857597144d36ca6da538759b52df01ab18baa7a5a22b0eca9b08f2ab3da1986d1afd2c53c545e7e67e24a8875561e88da89289c2595ddbb3f68e285854ae407411fbb04b79f974a32730ba3f63dbdf03cbece454cc19ec7c5de24e1ca1c80c4247c0b47"}, @pad1, @generic={0x2, 0x40, "080478d7afe9a8ff0fa42851a41f9f13c1413e3c3540fd1b29ca02979aa59fd516a7b0bcf73d2990ab3ab0ce8ce4e9c9927cad6c08726e9610a6ba422a560291"}]}}}], 0x22e8}}, {{&(0x7f0000001d00)={0xa, 0x4e23, 0x2, @mcast2, 0x99}, 0x1c, &(0x7f0000005340)=[{&(0x7f0000004100)="78d9b4debf8058aec376c07f2bb4984f8665e65a4cd163a3bd5e9996cfb46e7aca01ad298e98993cf78f4cf0da5d2b17404e5c3e35f5a6b904da7a22a01c1dcd2f2b1439846a7867883adfecf430415c874ed080b9d0dcef5930e91e789dcad81da905d4edc60cf60dc1c2e8a2b0cd02a75f086835b2e7e300831c68841ff9cf1a0720dbc523b01b7c11739e96f5912b7fdbbb5e93947c141a48b5ea9b9c7dc3a6ce9eca37328753e269871a38037c017e5e4b94228501f5aa5f6e7c1cb97e0d56e1099a05aa621da7fbe58b6e", 0xcd}, {&(0x7f0000004200)="7caa8a01489eae1671ae7739d21b026f04ea8191fee6718defc4029554fe0d58d7099c0df0ec16f31e4d944225f55d56a591772d61e9b8a5189248afa0b0c69e663717a99119fc6cd2c43872", 0x4c}, {&(0x7f0000001d40)="2dbbf24b6b7728458a1b6eee41707f2ac0239c57af113d7ee2d6ae6ab54cbdba016f69b1b323e5", 0x27}, {&(0x7f0000004280)="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", 0x1000}, {&(0x7f0000005280)="d10b84457b34ff92aa9244cfd24c4740c89b07f2b342f5d57464b237785cfea6633c8c3f30a7c217535063d160ca1197a10c52e2a4dcf0c4d0b56403d96a9f5798328da3c900346093415448fb2edfcf39bbd183dcc00311e9c003e16a8e11370aefd98c016d1a7a4099da864a8442ac687335816cc5b65656e015dcdd22c66c958a5979db295962fcf5e6bdb25e2ff43cce88112de6324053256ec4496e1a02d766d50badfa17197c5a", 0xaa}], 0x5, &(0x7f00000053c0)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x73, 0x0, 0x0, 0x2b}}}], 0x18}}], 0x3, 0xd4) 00:13:03 executing program 6: syz_80211_inject_frame(&(0x7f0000000300)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x1c}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:13:03 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0xeba0bc7d55f68ba0, 0x0) fcntl$setpipe(r0, 0x407, 0x7fffffff) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) 00:13:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x4) r3 = dup2(r2, r1) inotify_init() r4 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x10041, 0x742ed6893dacb9f4) openat(0xffffffffffffffff, 0x0, 0x4440, 0x189) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r5, 0x2, &(0x7f0000000180)=[&(0x7f0000001440)={0x0, 0x0, 0x0, 0xa, 0x3, r4, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r0}]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x10000, 0x6}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) openat(r3, &(0x7f0000000240)='./file2/file0\x00', 0x200000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000440)={0x0, 0x0, "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", "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"}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r3, 0x7, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r6, r3, 0x0, 0x7ffffff9) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb24}}, './file1\x00'}) [ 1295.996124] FAULT_INJECTION: forcing a failure. [ 1295.996124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1295.998513] CPU: 1 PID: 11695 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1295.999765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1296.001246] Call Trace: [ 1296.001731] dump_stack+0x107/0x167 [ 1296.002371] should_fail.cold+0x5/0xa [ 1296.003074] _copy_from_user+0x2e/0x1b0 [ 1296.003793] __copy_msghdr_from_user+0x91/0x4b0 [ 1296.004621] ? __ia32_sys_shutdown+0x80/0x80 [ 1296.005406] ? udp_v6_push_pending_frames+0x360/0x360 [ 1296.006320] ? inet6_sendmsg+0xbd/0x140 [ 1296.007047] ? inet6_compat_ioctl+0x320/0x320 [ 1296.007825] ? __sock_sendmsg+0x55/0x190 [ 1296.008553] sendmsg_copy_msghdr+0xa1/0x160 [ 1296.009306] ? do_recvmmsg+0x6d0/0x6d0 [ 1296.010007] ? __lock_acquire+0x1657/0x5b00 [ 1296.010783] ___sys_sendmsg+0xc6/0x170 [ 1296.011507] ? sendmsg_copy_msghdr+0x160/0x160 [ 1296.012309] ? vmacache_find+0x55/0x2a0 [ 1296.013012] ? lock_acquire+0x197/0x470 [ 1296.013716] ? find_held_lock+0x2c/0x110 [ 1296.014474] ? __might_fault+0xd3/0x180 [ 1296.015201] ? lock_downgrade+0x6d0/0x6d0 [ 1296.015934] ? asm_exc_page_fault+0x1e/0x30 [ 1296.016721] __sys_sendmmsg+0x195/0x470 [ 1296.017410] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1296.018174] ? lock_downgrade+0x6d0/0x6d0 [ 1296.018942] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1296.019815] ? wait_for_completion_io+0x270/0x270 [ 1296.020671] ? rcu_read_lock_any_held+0x75/0xa0 [ 1296.021500] ? vfs_write+0x354/0xa70 [ 1296.022162] ? fput_many+0x2f/0x1a0 [ 1296.022835] ? ksys_write+0x1a9/0x260 [ 1296.023497] ? __ia32_sys_read+0xb0/0xb0 [ 1296.024211] __x64_sys_sendmmsg+0x99/0x100 [ 1296.024944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1296.025851] do_syscall_64+0x33/0x40 [ 1296.026503] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1296.027409] RIP: 0033:0x7fa76daafb19 [ 1296.028041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1296.031220] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1296.032599] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1296.033864] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1296.035129] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1296.036349] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1296.037563] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 [ 1296.037941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:13:03 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:13:03 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1104000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x50, 0x453, 0x400, 0x70bd2a, 0x25dfdbfc, "6d50b20a2af898ec67247915f0e39b1ae1896c75f935e359763348447fb23c2e65b9507916c62871c8a73688afc058fb7007e1c256420187ff9c97c9541f95", ["", "", "", "", ""]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x20008010) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x3) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000240)={{0x6}, 0x100, './file0\x00'}) write$vga_arbiter(r2, &(0x7f0000000200), 0xf) [ 1296.379785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:13:16 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40a741, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) 00:13:16 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:13:16 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:13:16 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 15) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:13:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x300b4e2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x7f, 0x34, 0x1000, 0x1f}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000b16d4914dc4b2a1be9cb20a76d9899227657c52bfa46f181ae442ca7adb6ffb5bb5f2cc3304014c8a7c85b1ea8c441568b8b965e1f767cb5240c14d4f248968390b163f2e3e2b695a649103d12b46c765371572d1edc622d64a664280a86b80aaf7db2d471f780e6bae495b10ff8109b1597e7dda6c7f9bfa4cf2a8fc7c5668c", @ANYRES16=r5, @ANYBLOB="010000000000000000007e0000000000000006c6c62559f95a2cbfc2ae9865a10092aab562f80afdde1f7f0622ff8b5320805198dff09559e03ad5c12cff166a640677872867b86530229e41872e050de48c9c17adf0628d07bdd7da648b1748b38af561358c72a070c6018f8d", @ANYRES32=0x0, @ANYBLOB="d77662fea97a101f78936bda3824eda0b9e07a10aa7916f6f1c1c20d6a55bb2c19933d79b1c2090c30a041f77749faa62ed7b64113961ef439008bd0ce9914e6cbd0998e548a7f1cc4034c7630274306d584c0fe2b58d3d514594377dd2ffc8b0ce5d88ccbb6bb9287a5a83891b88ee5aebc3a1a456475fc0b26e418a24307b5d4dc3f452cba1e8a871d3b"], 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001c80)={0x11, 0x0, 0x0}, &(0x7f0000001cc0)=0x14) [ 1309.783882] FAULT_INJECTION: forcing a failure. [ 1309.783882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1309.786437] CPU: 1 PID: 11730 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1309.787874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1309.789541] Call Trace: [ 1309.790089] dump_stack+0x107/0x167 [ 1309.790825] should_fail.cold+0x5/0xa [ 1309.791618] _copy_from_user+0x2e/0x1b0 [ 1309.792435] __copy_msghdr_from_user+0x91/0x4b0 [ 1309.793386] ? __ia32_sys_shutdown+0x80/0x80 [ 1309.794280] ? udp_v6_push_pending_frames+0x360/0x360 [ 1309.795337] ? inet6_sendmsg+0xbd/0x140 [ 1309.796146] ? inet6_compat_ioctl+0x320/0x320 [ 1309.797199] ? __sock_sendmsg+0x55/0x190 [ 1309.798029] sendmsg_copy_msghdr+0xa1/0x160 [ 1309.798895] ? do_recvmmsg+0x6d0/0x6d0 [ 1309.799692] ? __lock_acquire+0x1657/0x5b00 [ 1309.800671] ___sys_sendmsg+0xc6/0x170 [ 1309.801538] ? sendmsg_copy_msghdr+0x160/0x160 [ 1309.802566] ? vmacache_find+0x55/0x2a0 [ 1309.803393] ? lock_acquire+0x197/0x470 [ 1309.804195] ? find_held_lock+0x2c/0x110 [ 1309.805017] ? __might_fault+0xd3/0x180 [ 1309.805714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1309.805832] ? lock_downgrade+0x6d0/0x6d0 [ 1309.805850] ? asm_exc_page_fault+0x1e/0x30 [ 1309.805888] __sys_sendmmsg+0x195/0x470 [ 1309.810200] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1309.811075] ? lock_downgrade+0x6d0/0x6d0 [ 1309.811962] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1309.813043] ? wait_for_completion_io+0x270/0x270 [ 1309.814140] ? rcu_read_lock_any_held+0x75/0xa0 [ 1309.815081] ? vfs_write+0x354/0xa70 [ 1309.815853] ? fput_many+0x2f/0x1a0 [ 1309.816589] ? ksys_write+0x1a9/0x260 sendmmsg$inet6(r2, &(0x7f0000005400)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @loopback}, 0x1c, &(0x7f0000001780)=[{&(0x7f00000001c0)="304cc298152ef9639271b0abcf1ce0d8857b3a4b88fb3d94c182bf2bc4a07e46d81514e89c7a09bbe5ef3b0453c8630035f1", 0x32}, {&(0x7f0000000540)="959f109aa5e2884fb24ed5bf35d15b315f3bd27791fd06fcbbaacf000b085cc37db2e18273d28083ea52c4804e7098fcfdca7893f0b0212b70c12090196267fea3fbed2497f0662f6656c98210a02fa01a65cf0b858e9e474b70f998210fce75883253416c8e631295d465798a523d94c4048e8ce693b192", 0x78}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="80222027d9265dbbe1d9181fdd9d1059ae33b59450bed4e97b50a1fa76893b014be799f6fc0e46bae155a264f5d4c98fb5e2a433e13c76ce06cf15c6b88d56edce230732ebb475775912ce99c8b4cf9bdef4e2e2268d6f299c21c59d9850f8ff402080872a52e8bbbb280cc84a5fbce6ed99b241ec0aa74e96bc8d653186537ae4016381a93d8bd09a19421a3fa7b6257ecfd2b6599943cda781b176bbf3724a8cd1c0d3e41b7c58b4ebadf6235a4165b6a1d8d68921b294958c52326c145e5a518106a733df76d803ddaf7500c6beaafddc8f5980772dc9657d2bc8a5e94da01d9dad2f8f029fe46037caaef9eb", 0xee}, {&(0x7f0000000240)}, {&(0x7f00000016c0)="aa4db2a1033858f3b4cfb89e704eeff6a79194223cb89b55e64cecbd14f268a217a305bd2e28f5fb3765fc4e8241a8dcafc5287172de30d6d9b4587809650b83a6e21f63132ca297f1635657e1d8922f8e3fe45847fb4c3f35a71e0a2217ba335de9eed6676a652f843d668445543f392e588e1bc746788ac388bb35f2bb0e2c53f7014e65ac51a21fd4edc5796e93d2aa3f0662cddc9a7b927fe2a214df3c3fe432e473cf0a33128114f6986456474f85e3cc13622f91aa74852d5a17", 0xbd}], 0x6, &(0x7f0000001800)=[@rthdr={{0xa8, 0x29, 0x39, {0x2, 0x12, 0x2, 0x6, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @mcast2, @private0, @private1]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0xff, 0xe, 0x1, 0x7f, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x997d}}], 0x148}}, {{&(0x7f00000002c0)={0xa, 0x4e23, 0xde, @remote, 0x5}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000001980)="c3e0d4242bde0a003c43a175d7e759d5969f2c433f9459baa4cfb07f8942cc949715b8fae890f80341096c6841ee14fe8a071d8cb20b3a9ab1e3a307114677e863a3a81da2750f200e0d31e2a25308e86cb0c61c1227f35aa93e869da4fbc650afd48c47396ddcf50c693528cd2afb6c856e7a97f040e05492beeb97c3a6819d9932e7251665c1cd950bc6ceacee8b44427ee4d1c918d0aa6ccc8308238fcace6e7476b62e00e26f3838d859d0dd05c888695160f1cb220376b84a04418d2d8b66e498", 0xc3}, {&(0x7f0000001a80)="946a1582f9e01990f33692cafb2eee74a03864e5b67927c6f611d97ab3061476f662474e0f8a9710635becbefc3670abb19cb711e4d9a86f0a7cb1eca0747d1f0cc8b5b2f724cb284b1262332ec41bd26f", 0x51}, {&(0x7f0000001b00)="fc3ccabe344593aa9195e556375f78d3f8a57ac0a8c9e2195761d697552074b4e79c3f1aa36c77946d280f58ed59fdc50f459f03a9cd40457c3a4d31b5f37855087d21d8fa27f38fc8804f6f11e13011a8ebcd28392dd5f429cc8067c66a10d4afadb291b3b7a2782989c34437e2a2f86b3c3ae37b6e6212a1", 0x79}, {&(0x7f0000001b80)="a4c72f62e8604a3f6e6ee6575e2010ae4bb41e3cd7b71aa5a3c166d3cbbe06b4e4ae839b686a04446233239fd267ee5da225c601b4a526224072d9d9b811aaf7980a7556c9b6e509588e1901126ac10d10d2a32aee069c3e0fecb8bdf25b4f40e188b9efa7319bed4e40da8cdce33df7cab5fb0f5d4eacf36f3773cde767e836a0f83443991b04a360c48d8a7a6f85dd5f5176ed2ac26c1dedb11c0a66871419d420f0d6a1631f880c49286b5b730fd36b07cd83ae5cbbacc6b52d6954e2e724", 0xc0}], 0x4, &(0x7f0000001e00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hopopts={{0x48, 0x29, 0x36, {0x29, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0xffff}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @jumbo={0xc2, 0x4, 0x1}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0xd0, 0x29, 0x37, {0x21, 0x16, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x80, 0xe45, [0x4, 0xde67]}}, @ra={0x5, 0x2, 0x200}, @generic={0x5e, 0x96, "f31b042ce2a9f018b9c33595ffb1e7a19d37c3a8ceb135e4b199774ba7bfd9a4c0ffce766bc42d163b2475a5714d9a0cfdd2dc8291b77d9e27321296670d7e612f74215c31b01ac19248770ea0b5d6aa2cecceae5ffa406e45149fdbda7fd61c0bc1bab97da0b57a2e24b2abf8daf38e88b869e32516c3362c675288622fc72bd0117afd0b7c1c6e0060397383e3f90824a2cb1fc070"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r6}}}, @dstopts_2292={{0x1060, 0x29, 0x4, {0x16, 0x208, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x3f, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x7b}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @pad1, @jumbo={0xc2, 0x4, 0x80000001}]}}}, @flowinfo={{0x14}}, @hopopts={{0x38, 0x29, 0x36, {0x4, 0x3, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x1a2}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0xff00}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0xad4}]}}}, @dstopts_2292={{0x10e0, 0x29, 0x4, {0x3a, 0x218, '\x00', [@enc_lim, @generic={0x2, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0xfffffff7}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x67, "e3f6205857597144d36ca6da538759b52df01ab18baa7a5a22b0eca9b08f2ab3da1986d1afd2c53c545e7e67e24a8875561e88da89289c2595ddbb3f68e285854ae407411fbb04b79f974a32730ba3f63dbdf03cbece454cc19ec7c5de24e1ca1c80c4247c0b47"}, @pad1, @generic={0x2, 0x40, "080478d7afe9a8ff0fa42851a41f9f13c1413e3c3540fd1b29ca02979aa59fd516a7b0bcf73d2990ab3ab0ce8ce4e9c9927cad6c08726e9610a6ba422a560291"}]}}}], 0x22e8}}, {{&(0x7f0000001d00)={0xa, 0x4e23, 0x2, @mcast2, 0x99}, 0x1c, &(0x7f0000005340)=[{&(0x7f0000004100)="78d9b4debf8058aec376c07f2bb4984f8665e65a4cd163a3bd5e9996cfb46e7aca01ad298e98993cf78f4cf0da5d2b17404e5c3e35f5a6b904da7a22a01c1dcd2f2b1439846a7867883adfecf430415c874ed080b9d0dcef5930e91e789dcad81da905d4edc60cf60dc1c2e8a2b0cd02a75f086835b2e7e300831c68841ff9cf1a0720dbc523b01b7c11739e96f5912b7fdbbb5e93947c141a48b5ea9b9c7dc3a6ce9eca37328753e269871a38037c017e5e4b94228501f5aa5f6e7c1cb97e0d56e1099a05aa621da7fbe58b6e", 0xcd}, {&(0x7f0000004200)="7caa8a01489eae1671ae7739d21b026f04ea8191fee6718defc4029554fe0d58d7099c0df0ec16f31e4d944225f55d56a591772d61e9b8a5189248afa0b0c69e663717a99119fc6cd2c43872", 0x4c}, {&(0x7f0000001d40)="2dbbf24b6b7728458a1b6eee41707f2ac0239c57af113d7ee2d6ae6ab54cbdba016f69b1b323e5", 0x27}, {&(0x7f0000004280)="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", 0x1000}, {&(0x7f0000005280)="d10b84457b34ff92aa9244cfd24c4740c89b07f2b342f5d57464b237785cfea6633c8c3f30a7c217535063d160ca1197a10c52e2a4dcf0c4d0b56403d96a9f5798328da3c900346093415448fb2edfcf39bbd183dcc00311e9c003e16a8e11370aefd98c016d1a7a4099da864a8442ac687335816cc5b65656e015dcdd22c66c958a5979db295962fcf5e6bdb25e2ff43cce88112de6324053256ec4496e1a02d766d50badfa17197c5a", 0xaa}], 0x5, &(0x7f00000053c0)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x73, 0x0, 0x0, 0x2b}}}], 0x18}}], 0x3, 0xd4) 00:13:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) [ 1309.817360] ? __ia32_sys_read+0xb0/0xb0 [ 1309.818388] __x64_sys_sendmmsg+0x99/0x100 [ 1309.819265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1309.820310] do_syscall_64+0x33/0x40 [ 1309.820322] nfs: Unknown parameter '#' [ 1309.821861] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1309.822891] RIP: 0033:0x7fa76daafb19 [ 1309.823658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1309.827445] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1309.828973] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 r1 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="b489bb1fd2f13bc631e82319572d9dbc6946dd1d7a3a0d34a8f7b963ec0df66166100ee29b594c9183ca95d78a42bde473d9734e18359b54f8f233216acae336e4ee85e383f84a576d754112701b173efaa3c4bcdfcaff0b5424670536ec845e140020cc46c110e889fbecdf9f23970128c4eb9d2af912f732dd5c8f4a2c8b9bee3947151d2447ee891c5aaf91024456fe710d2323fd2775b9ef68c9a063954796b859917a5fdd49aa0787fe0020d4f2f8d3821e7c1984fe2f4c724a714d5687170ee5ae78ddf69f74b434ceee7e42b75a5450ee52ed26c720fe654c206e74e05d0c10a474", 0xe5, 0x7}, {&(0x7f00000003c0)="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", 0x1000, 0x1}, {&(0x7f00000000c0)="4bb9364b00179ab1738a3146258d", 0xe, 0x9}], 0x14004, &(0x7f00000013c0)={[{}, {}, {'#'}, {'::},^{,'}, {}, {'^'}, {'\x12'}, {}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}]}) openat(r1, &(0x7f0000001400)='./file1\x00', 0x0, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0xff, 0x9, 0x6, 0x0, 0x0, 0x10020, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x7, 0x71}, 0x12, 0x8000, 0x3, 0x1, 0x0, 0x8, 0x2, 0x0, 0xa2b80000, 0x0, 0x7}, 0xffffffffffffffff, 0x9, r0, 0x9) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r2) lseek(r2, 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) 00:13:16 executing program 6: syz_80211_inject_frame(&(0x7f0000000300)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x1d}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:13:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) [ 1309.830531] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1309.832096] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.833528] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1309.834966] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:13:17 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:13:17 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) 00:13:17 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 16) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:13:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX]) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) [ 1310.085020] FAULT_INJECTION: forcing a failure. [ 1310.085020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1310.087891] CPU: 0 PID: 11752 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1310.089388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1310.091136] Call Trace: [ 1310.091668] dump_stack+0x107/0x167 [ 1310.092467] should_fail.cold+0x5/0xa [ 1310.093316] _copy_from_user+0x2e/0x1b0 [ 1310.094129] __copy_msghdr_from_user+0x91/0x4b0 [ 1310.095082] ? __ia32_sys_shutdown+0x80/0x80 [ 1310.096031] ? udp_v6_push_pending_frames+0x360/0x360 [ 1310.097133] ? inet6_sendmsg+0xbd/0x140 [ 1310.097972] ? inet6_compat_ioctl+0x320/0x320 [ 1310.098892] ? __sock_sendmsg+0x55/0x190 [ 1310.099774] sendmsg_copy_msghdr+0xa1/0x160 [ 1310.100685] ? do_recvmmsg+0x6d0/0x6d0 [ 1310.101513] ? __lock_acquire+0x1657/0x5b00 [ 1310.102392] ___sys_sendmsg+0xc6/0x170 [ 1310.103192] ? sendmsg_copy_msghdr+0x160/0x160 [ 1310.104142] ? vmacache_find+0x55/0x2a0 [ 1310.104958] ? lock_acquire+0x197/0x470 [ 1310.105763] ? find_held_lock+0x2c/0x110 [ 1310.106613] ? __might_fault+0xd3/0x180 [ 1310.107449] ? lock_downgrade+0x6d0/0x6d0 [ 1310.108348] ? asm_exc_page_fault+0x1e/0x30 [ 1310.109268] __sys_sendmmsg+0x195/0x470 [ 1310.110110] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1310.110986] ? lock_downgrade+0x6d0/0x6d0 [ 1310.111853] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1310.112904] ? wait_for_completion_io+0x270/0x270 [ 1310.113935] ? rcu_read_lock_any_held+0x75/0xa0 [ 1310.114896] ? vfs_write+0x354/0xa70 [ 1310.115730] ? fput_many+0x2f/0x1a0 [ 1310.116525] ? ksys_write+0x1a9/0x260 [ 1310.117335] ? __ia32_sys_read+0xb0/0xb0 [ 1310.118214] __x64_sys_sendmmsg+0x99/0x100 [ 1310.119091] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1310.120198] do_syscall_64+0x33/0x40 [ 1310.120953] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1310.121992] RIP: 0033:0x7fa76daafb19 [ 1310.122746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1310.126471] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1310.128027] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1310.129457] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1310.130899] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1310.132364] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1310.133903] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 [ 1310.140807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:13:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r0, 0x0, 0x120) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x38, 0x6}}, './file0\x00'}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') write$vga_arbiter(r1, &(0x7f0000000200), 0xf) fallocate(r0, 0x19, 0x2, 0xf88f) 00:13:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="01000a05da44a7d1e1c7943fb39b760700abe8c80989", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) setsockopt$inet6_tcp_int(r2, 0x6, 0x11, &(0x7f0000000200)=0x20, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0x6, 0x4) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x12, r3, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000840), 0x401, 0x28180) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x8, 0x7f, 0x9, 0x81, 0x0, 0x2947, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffff046, 0x2}, 0x0, 0xc5c1, 0xfc9, 0x2, 0x2, 0x7, 0x0, 0x0, 0x10001, 0x0, 0x5}, 0x0, 0xe, r0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="041a3a4985d424bdce9675f286982a09f7fe7569cb2c6e71f89e8019678c585aa70cc9e2435235dcb0b3434020d0f4d5613bb8bde96608eaf4af1834720900b040007af6d3edc14cd7ab81c733b614b0835ac6af8173be3b00015a826f2562ae98feb0d40000f80000", 0xff69, 0x3ff03) openat(r4, &(0x7f0000000180)='./file0\x00', 0x80000, 0x0) 00:13:17 executing program 6: syz_80211_inject_frame(&(0x7f0000000300)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x27}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:13:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) [ 1310.294986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1310.611004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:13:36 executing program 6: syz_80211_inject_frame(&(0x7f0000000300)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x60}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:13:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x4, &(0x7f0000000140)=ANY=[]) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)) openat$urandom(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2400) socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, 0x0, 0x83) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="91012dbd7000fedbdf251d000000"], 0x14}}, 0x0) 00:13:36 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = creat(0x0, 0x101) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000002c0)={0x0}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r8, &(0x7f00000000c0)=""/149, 0x95) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="001800001cf4d4447646b37bb9ab2b3b8d7d4ebbce54cdb6a46100008be3a0642cf5dc46855e3ace55d874c740080d888b96e4757e36cc2100ada6b9397961091969756aef14d6673fa1ff20091748b7a93ee050ba01fce417472c6e66abb26a8cf4a3d10c128e096410313c9d9adcdce087d7a4bac9d20f094728a0e7e3421d17d84cadda33dcd71483e2f4a2ecd2b9070a70221820a47488219ba25005cde7e5e06d00"/187, @ANYRESDEC=r7, @ANYRESHEX=r8]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={r7, 0x2, r0, 0x3f, 0x80000}) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x214080, 0x0) ioctl$DVD_AUTH(r9, 0x5390, &(0x7f0000000180)=@lsc={0x3, 0x3, "022359584d488b883cbc"}) r10 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r10, 0x0, 0x120) dup2(r10, r4) 00:13:36 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 17) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:13:36 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX]) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:13:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:13:36 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r1, 0x5310, &(0x7f0000000080)={@msf, 0x0, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x3e) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000280)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x20, 0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{}], 0x1, 0x0) r3 = dup(r0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000340)=0x22fd, &(0x7f00000003c0)=0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000440)=ANY=[@ANYBLOB="01007663bd93de41f8c3722b4c1d83765ccf39", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) syz_io_uring_setup(0x5f3f, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0xfffffffc}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000240)=@req={0x28, &(0x7f0000000300)={'veth1_vlan\x00', @ifru_mtu}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000200)={'sit0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x2, 0x7, 0x20, @mcast2, @mcast2, 0x7, 0x1, 0x8, 0x102}}) [ 1329.469700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:13:36 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="0980c2000000aaaaaaaaaaaa080045000048000000000001906fac1c14bbac1414aa05009078000000004b00e3b10000000000110000ac1414bbac14140044140001000000010000000085f14655827563dcdbffffffff0000000044040003"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x353) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$tun(r2, &(0x7f0000000f00)={@val={0x0, 0x9000}, @val={0x2, 0x4, 0x8, 0x1, 0x9, 0x6}, @x25={0x1, 0x1f, 0x27, "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"}}, 0x1011) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@void, @void, @llc={@snap={0xf5856b3fe47c4dc4, 0x0, "9486", "968f41", 0x5, "f511bdef60600917dcacf048c8430685ea1738cfe1320ac7c814c25b5ddc6d26d0635d67a983beca252cffed1e3c51a252fe78e2123fab5d0232822fa30cd75ef91e91dbf8eada98a57ef701133d28cd724542420f28054082610ea6e6cb75d3b671d33a0bd5b716e3dd6f7a4c580a6641bc05445c02310eafeecd2d3780eae671b24a47e7d9516f2815c137abe5de799fe595828b5a0dbbeaaa6b00ee6af0419bdf9b8f8e1daf2462f72f4a2ed15fe9358a4dfd7547e35c2a43b1d154408c61358a3726f7893afb"}}}, 0xd1) write$tun(r2, &(0x7f0000000500)={@val, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv4={0x800, @igmp={{0x28, 0x4, 0x3, 0x4, 0x176, 0x68, 0x0, 0x80, 0x2, 0x0, @multicast1, @local, {[@rr={0x7, 0x1b, 0xef, [@dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x1d}, @empty, @private=0xa010100, @remote, @loopback]}, @ssrr={0x89, 0xf, 0xae, [@local, @private=0xa010101, @multicast1]}, @cipso={0x86, 0x24, 0xfffffffffffffffe, [{0x7, 0x2}, {0x6, 0x8, "db96474927f3"}, {0x5, 0xa, "cc3d6da7b64401e8"}, {0x7, 0xa, "c847df42b61618a0"}]}, @generic={0x86, 0x12, "d2a9f5ee2f9b7696f1490c573cfa460e"}, @timestamp={0x44, 0x2c, 0x27, 0x0, 0x7, [0x9, 0x1, 0x10001, 0x21, 0x9, 0x8, 0x1000, 0x0, 0x3, 0xcc]}]}}, {0x16, 0x0, 0x0, @rand_addr=0x64010100, "ed27cf7b816c060d058b7c12cf9795d8f7e7f170778b96cfcd28e71bdb40f3c1bd9f4e0a539833ee42287613dc454193ea2f1ca7ac69fbed6d5d38e300c7912577b5831b62f3e832ff78dfd12e03ada722893d61b26f9fd09eba47fa741e78141ed3d97669594d6b60b9bdabcb2645842d5b2f047db9f20cdc93488ab49295829f79e1fc3d6e1c037b974dc8a53bf4e6fcc56c530cab0a68ff89411ff0ffa095b08009f8a92352a77c0c31179c5764fddc4ec3b5a8b80a849c790cee95e52ddd485d2668341c219a8c4888ba9eaf"}}}}}}, 0x188) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$tun(r3, &(0x7f00000006c0)={@val={0x0, 0x6000}, @void, @ipv4=@gre={{0x10, 0x4, 0x0, 0x14, 0x19e, 0x64, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@noop, @ssrr={0x89, 0x27, 0x63, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x22, 0x1, [0x392c, 0x1], "257ba52a3e8c36c6287c228fefc2bb1a2eaa963b4a0c686f17dd43ef587b44ef2559"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x1f], "cc63be1690d0e4859aba92dc5ebe439014806c3bb5bb"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x6a, 0x8001, 0x9], "5a5d35574bfdb9b845bdf3d2cd70679f45"}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x3, 0x2, 0x1, 0x0, 0x0, 0xc6}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x2, {0x3, 0x101, 0x0, 0x4, 0x0, 0x1, 0x2}}}, {0x8, 0x6558, 0x3, "038eaefff4efcff45a8ccd5b3f237f8e38ef422a5d549fb4da071bf78aab39d7ef16ec7c1a9288352696343bc755a4aaafa7545286ba293b2461d7835e283f32f2c65c4d06c7b7675fd430e1b237e2c1e05a59f6f8a8ee08e722f750f83a546edc4c947a0307051f05c175246928b6b0eb62396f975dd84ba4f436d3a5c4118fd65f21afe5f58f35549f25036f0e6a15b74a5b7a4e1139fc9bddf88d7de3c982c1e2107240a750c2ca663617b0c3d4fe6078366a58b8e1d22e7e699f7e01c750fd08544618"}}}}, 0x1a2) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) write$tun(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="45bc147d9fe324fe7c29e10665e65bd58b45056474f8d9641db5f766af6b9e2d3c0f48b066484b0b20a011af620d41c29373ea59a91c431c6145fb2c05df8c8fddea944dd665f51b0230f068a0ed7a3d8bd5670e1f569007499eae7f314ecbb2a585037b164da9381aec7e539c0492b04745afc31bb03912ae9040917a91a68211f062cc3ed83608004a89e82de024c818ccae", @ANYRES32=r4, @ANYRES32=0x41424344, @ANYRES64=r0], 0xec) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x402, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000340)={'wlan0\x00'}) [ 1329.503991] FAULT_INJECTION: forcing a failure. [ 1329.503991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1329.506826] CPU: 1 PID: 11788 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1329.508251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1329.509959] Call Trace: [ 1329.510511] dump_stack+0x107/0x167 [ 1329.511265] should_fail.cold+0x5/0xa [ 1329.512081] _copy_from_user+0x2e/0x1b0 [ 1329.512915] __copy_msghdr_from_user+0x91/0x4b0 [ 1329.513870] ? __ia32_sys_shutdown+0x80/0x80 [ 1329.514762] ? udp_v6_push_pending_frames+0x360/0x360 [ 1329.515861] ? inet6_sendmsg+0xbd/0x140 [ 1329.516684] ? inet6_compat_ioctl+0x320/0x320 [ 1329.517607] ? __sock_sendmsg+0x55/0x190 [ 1329.518446] sendmsg_copy_msghdr+0xa1/0x160 [ 1329.519316] ? do_recvmmsg+0x6d0/0x6d0 [ 1329.520133] ? __lock_acquire+0x1657/0x5b00 [ 1329.521028] ___sys_sendmsg+0xc6/0x170 [ 1329.521829] ? sendmsg_copy_msghdr+0x160/0x160 [ 1329.522778] ? vmacache_find+0x55/0x2a0 [ 1329.523615] ? lock_acquire+0x197/0x470 [ 1329.524427] ? find_held_lock+0x2c/0x110 [ 1329.525279] ? __might_fault+0xd3/0x180 [ 1329.526089] ? lock_downgrade+0x6d0/0x6d0 [ 1329.526946] ? asm_exc_page_fault+0x1e/0x30 [ 1329.527865] __sys_sendmmsg+0x195/0x470 [ 1329.528680] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1329.529566] ? lock_downgrade+0x6d0/0x6d0 [ 1329.530432] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1329.531435] ? wait_for_completion_io+0x270/0x270 [ 1329.532436] ? rcu_read_lock_any_held+0x75/0xa0 [ 1329.533397] ? vfs_write+0x354/0xa70 [ 1329.534159] ? fput_many+0x2f/0x1a0 [ 1329.534907] ? ksys_write+0x1a9/0x260 [ 1329.535694] ? __ia32_sys_read+0xb0/0xb0 [ 1329.536536] __x64_sys_sendmmsg+0x99/0x100 [ 1329.537403] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1329.538454] do_syscall_64+0x33/0x40 [ 1329.539214] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1329.540259] RIP: 0033:0x7fa76daafb19 [ 1329.541033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1329.544809] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1329.546361] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1329.547834] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1329.549270] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1329.550711] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1329.552162] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:13:36 executing program 0: clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x406, r0) recvmmsg(r2, 0x0, 0x0, 0x2102, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1f}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) syz_open_procfs(0x0, &(0x7f0000003ac0)='oom_adj\x00') r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r4, &(0x7f0000000200), 0xf) [ 1329.589017] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 00:13:36 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x48, 0x3, &(0x7f00000003c0)=[{&(0x7f00000000c0)="4a105ccd1d0bedc2c90ed5ebde606267e675528a87355bea219ec435c2ef23d2d362656bbfd601d9aae86c39ee1808b34d6475a9962a91f2fe0da3392049d40c61b92b0f38dfd0586f1b809366d8e9a541794ad39bd9b10faf6941568030a531b04e2e606b842a8990c78e102dd0e737af5d72d395c165a89a1332a58b3366be0eb1d160f323f247dc4de297db0c9c", 0x8f, 0x4}, {&(0x7f0000000180)="694964331ba688fb948ce69f3fbe27e869ede4689f098ca7d8c89fb311dae0789a0e250a683ac2dca8feba9326b744fda9e10e4b2a77d2a72434df6e7913cf51c44df6d8c9e0dfb1c22cd0eda82533be4b2af93cdf02475b77352b4bc6b4ff2e07dea764af84593455cb2ed1cb9ed1f91f7ef112467843d3247dce6e90ea060c4e17201eae89c6e67b59f192ae297a9d21d804b426fa5b58245f9a29060f1a662a53606411a75e50f08c1175a4a89b5d87dff9c5c40b99f479b6be989becef9239c650180a887a89cf399e7ccdb9afe86e2b13b66e605c41a6ca9bd805de4ccebe9921eea0dab52106bbdc736e02aaf5e2148d8fa268f92b", 0xf8, 0xfff}, {&(0x7f0000000340)="6c96ed86de32b8052a978ca396714608db8a0c83dd71ef32ac3caa743d1f9f1ed3469d4972370b107846a07b62d7e8cde127272f884aa11d8135f3e370402d2a8906d763f6261f398daa6fc5b21e99380936e302abe645971e025b32e7900d5423769e8f33152121c9f6c920d746af5b6e4e9ae6762a460f8f97f6cf14c6", 0x7e, 0x3}], 0x1000, &(0x7f0000000440)={[{@journal_async_commit}, {@noauto_da_alloc}, {@minixdf}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@journal_checksum}, {@oldalloc}, {@norecovery}], [{@obj_type}, {@euid_lt={'euid<', 0xee01}}, {@subj_type}, {@euid_gt={'euid>', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '(%'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fsname}]}) openat(r0, &(0x7f00000002c0)='./file0\x00', 0x40, 0x100) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c00000000000000000000000200000008000000511c052c3ce7e12131c8c2b1ce37ba225a2b54c6e896ee881781edb71c5e47a3e1603f6f2256b844cb62040e1620e3fb6b0aa0c24929ae9bd4ad76421f42bfd5b97410233c9167f459ccbbbbb0602b330754d794d7e86f3e03c339e267be1f29ab87e39c3c518a8ba67bd17ebe411a5acff9fb388b16a81cdaede9c07c08a4004fe0bd8079b6d4a953bead14126f966fe1cdfc7b9cde12a4a4f4898a6141f1806f7aeb845d2c7d83cc8d39accfda95d5ef9abd34baeb998b57c10b4905813801e6a0d6f4c64be5c8bc008a1408389a4bbd9bf4f2de8638523257056dc546f4762083b0cacf6436e2485d1a80f21000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0xc12) [ 1329.795646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1329.834818] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 00:13:51 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 18) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:13:51 executing program 0: shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x410c0) write$vga_arbiter(r1, &(0x7f0000000040), 0xf) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) 00:13:51 executing program 3: shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000001c0)) r3 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010000001800007b", @ANYRES32=r4, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='}\xfc\\-+*{\x00', &(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x2) 00:13:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xfdef) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x184) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000002c0)={0x0, 0x0, 0x101, 0x0, r2}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x4, 0xde, 0x0, 0x1, 0x7fff, r2}) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x40, 0x8, 0x80, 0x9, 0x0, 0xffffffff80000000, 0x8080, 0x11, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x2, 0x5}, 0x49083, 0xffff, 0x1, 0x6, 0x82f7, 0x8, 0x60, 0x0, 0x7fffffff, 0x0, 0x6}, r2, 0x2, r1, 0x3) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000012c, 0x4000850) 00:13:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:13:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r1, 0x5310, &(0x7f0000000080)={@msf, 0x0, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x3e) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000280)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x20, 0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{}], 0x1, 0x0) r3 = dup(r0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000340)=0x22fd, &(0x7f00000003c0)=0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000440)=ANY=[@ANYBLOB="01007663bd93de41f8c3722b4c1d83765ccf39", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) syz_io_uring_setup(0x5f3f, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0xfffffffc}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000240)=@req={0x28, &(0x7f0000000300)={'veth1_vlan\x00', @ifru_mtu}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000200)={'sit0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x2, 0x7, 0x20, @mcast2, @mcast2, 0x7, 0x1, 0x8, 0x102}}) 00:13:51 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:13:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX]) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) [ 1344.037041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1344.048915] FAULT_INJECTION: forcing a failure. [ 1344.048915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.051853] CPU: 0 PID: 11828 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1344.053266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1344.054956] Call Trace: [ 1344.055501] dump_stack+0x107/0x167 [ 1344.056273] should_fail.cold+0x5/0xa [ 1344.057034] _copy_from_user+0x2e/0x1b0 [ 1344.057849] __copy_msghdr_from_user+0x91/0x4b0 [ 1344.058789] ? __ia32_sys_shutdown+0x80/0x80 [ 1344.059689] ? udp_v6_push_pending_frames+0x360/0x360 [ 1344.060742] ? inet6_sendmsg+0xbd/0x140 [ 1344.061549] ? inet6_compat_ioctl+0x320/0x320 [ 1344.062456] ? __sock_sendmsg+0x55/0x190 [ 1344.063286] sendmsg_copy_msghdr+0xa1/0x160 [ 1344.064165] ? do_recvmmsg+0x6d0/0x6d0 [ 1344.064957] ? __lock_acquire+0x1657/0x5b00 [ 1344.065843] ___sys_sendmsg+0xc6/0x170 [ 1344.066635] ? sendmsg_copy_msghdr+0x160/0x160 [ 1344.067557] ? vmacache_find+0x55/0x2a0 [ 1344.068403] ? lock_acquire+0x197/0x470 [ 1344.069210] ? find_held_lock+0x2c/0x110 [ 1344.070043] ? __might_fault+0xd3/0x180 [ 1344.070852] ? lock_downgrade+0x6d0/0x6d0 [ 1344.071708] ? asm_exc_page_fault+0x1e/0x30 [ 1344.072602] __sys_sendmmsg+0x195/0x470 [ 1344.073421] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1344.074296] ? lock_downgrade+0x6d0/0x6d0 [ 1344.075152] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1344.076136] ? wait_for_completion_io+0x270/0x270 [ 1344.077115] ? rcu_read_lock_any_held+0x75/0xa0 [ 1344.078050] ? vfs_write+0x354/0xa70 [ 1344.078787] ? fput_many+0x2f/0x1a0 [ 1344.079521] ? ksys_write+0x1a9/0x260 [ 1344.080312] ? __ia32_sys_read+0xb0/0xb0 [ 1344.081125] __x64_sys_sendmmsg+0x99/0x100 [ 1344.081981] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1344.083001] do_syscall_64+0x33/0x40 [ 1344.083772] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1344.084794] RIP: 0033:0x7fa76daafb19 [ 1344.085537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1344.089256] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1344.090788] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1344.092235] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1344.093668] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.095108] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1344.096553] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:13:51 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 19) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:13:51 executing program 0: r0 = getpid() capset(&(0x7f00000001c0)={0x19980330, r0}, &(0x7f0000000240)={0x9, 0x1, 0xd1b, 0x10000, 0x80000001, 0xffffff80}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) r2 = memfd_create(&(0x7f0000000040)='\x00', 0x2) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r3, 0x0, 0x120) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r4, 0x0, 0x120) r5 = dup2(r3, r4) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) syz_io_uring_submit(r6, r10, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1, 0x0, r5, 0x0, r2, 0x2, 0x0, 0x1}, 0x89) dup2(r1, r2) write$vga_arbiter(r1, &(0x7f0000000200), 0xf) [ 1344.220098] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) 00:13:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) [ 1344.321081] FAULT_INJECTION: forcing a failure. [ 1344.321081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.323998] CPU: 0 PID: 11854 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1344.325407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1344.327063] Call Trace: [ 1344.327674] dump_stack+0x107/0x167 [ 1344.328480] should_fail.cold+0x5/0xa [ 1344.329248] _copy_from_user+0x2e/0x1b0 [ 1344.329976] __copy_msghdr_from_user+0x91/0x4b0 [ 1344.330826] ? __ia32_sys_shutdown+0x80/0x80 [ 1344.331983] ? udp_v6_push_pending_frames+0x360/0x360 [ 1344.333029] ? inet6_sendmsg+0xbd/0x140 [ 1344.333835] ? inet6_compat_ioctl+0x320/0x320 [ 1344.334715] ? __sock_sendmsg+0x55/0x190 [ 1344.335523] sendmsg_copy_msghdr+0xa1/0x160 [ 1344.336387] ? do_recvmmsg+0x6d0/0x6d0 [ 1344.337202] ? __lock_acquire+0x1657/0x5b00 [ 1344.338083] ___sys_sendmsg+0xc6/0x170 [ 1344.338859] ? sendmsg_copy_msghdr+0x160/0x160 [ 1344.339795] ? vmacache_find+0x55/0x2a0 [ 1344.340589] ? lock_acquire+0x197/0x470 [ 1344.341365] ? find_held_lock+0x2c/0x110 [ 1344.342188] ? __might_fault+0xd3/0x180 [ 1344.342980] ? lock_downgrade+0x6d0/0x6d0 [ 1344.343820] ? asm_exc_page_fault+0x1e/0x30 [ 1344.344715] __sys_sendmmsg+0x195/0x470 [ 1344.345520] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1344.346397] ? lock_downgrade+0x6d0/0x6d0 [ 1344.347245] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1344.348204] ? wait_for_completion_io+0x270/0x270 [ 1344.349160] ? rcu_read_lock_any_held+0x75/0xa0 [ 1344.350091] ? vfs_write+0x354/0xa70 [ 1344.350831] ? fput_many+0x2f/0x1a0 [ 1344.351558] ? ksys_write+0x1a9/0x260 [ 1344.352333] ? __ia32_sys_read+0xb0/0xb0 [ 1344.353141] __x64_sys_sendmmsg+0x99/0x100 [ 1344.353992] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1344.355010] do_syscall_64+0x33/0x40 [ 1344.355751] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1344.356784] RIP: 0033:0x7fa76daafb19 [ 1344.357519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1344.361131] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1344.362633] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1344.364063] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1344.365460] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.366887] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1344.368326] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:13:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x7ffffffff000, 0xf0ff1f00000000) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote, 0xffff}, 0x1c) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x41) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @ipv4=@dev}]}]}, 0x28}}, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000100)=0x1c) sendmmsg$inet6(r1, &(0x7f0000000840)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000200)="effda64b972d00efa4fb130d00c9ebd64678e9505a86a7b382443ce6a8083362dfbd75cca16b69c6a33c1c631f8811aaf23963480ffa71d8cc0e0038a5633bda39bca6a07319a9fa1a5abd6914402846fb1852664ca87edc0f9f82d942fd60112177bab84ba8a9adb3955a28c4dff457289eaa95c2d9090790980d151ad6bb4da12a4c183509ab8ae99d2796656afaad676b8b5b27ea9f0a66feac78eac4dbefc5351c672b8035db", 0xa8}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="a489eb28ac6950eb8ee0d0af427a0bc75fd1c098328d505a2a4f8fdf2681c15f7a766a542f761080e66fbc30ef703de382600e2b4b878612b2b9d3b9292731c217ac7aa4670c140a1eda21035cfb31f0ccb198a57f8a20236c0ec4af2226cfd7e9dd84af01b8345831e15933", 0x6c}, {&(0x7f0000000380)="efa377d7b4926390f3602dfd0786e84f1c3db4cea473cb", 0x17}, {&(0x7f0000000400)="46a4c60288f8aae18b851c93c54504e12f8a2b3df57473ec4d081fefe7f498876e448974bf407a1634f4f5306ce2a70e08f196fb95b6b8354ddc082ce0e30464ccc7577d88ac45c0a213c9e209ffeb44b278db647b4593f527a9114597449cab6b4b95432b8d95261ddcbdb559365fa94af32e0835e23124416ad10ae02081c4dc", 0x81}, {&(0x7f00000004c0)="273030071b432ef91d9939ac7199c89b93055f037e66311fa96c7f27fe2f9f81104ef737679f0df506d6dbb0892268e87ad87adb830c612ed9e13e8643bc3222fbd5f0e327", 0x45}], 0x6}}, {{&(0x7f00000005c0)={0xa, 0x4e22, 0x8, @mcast2, 0x800}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000600)="a7e699548ffc", 0x6}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f0000000640)="e66d49ce161bf05a0f7dc376f5953ffd774a52317f", 0x15}, {&(0x7f00000006c0)="51ae8dc99ed5b5be56ed51ce1400b2", 0xf}, {&(0x7f00000030c0)="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", 0x1000}], 0x5, &(0x7f0000000780)=[@hoplimit={{0x14, 0x29, 0x34, 0xffffff01}}, @hopopts={{0x78, 0x29, 0x36, {0x73, 0xb, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x40, {0x3, 0xe, 0x2, 0xb2d0, [0x100000000, 0x6, 0x5, 0x7ff, 0x9, 0x40, 0xffffffffffff699b]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7bc}}], 0xa8}}], 0x2, 0x20008000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x11, 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) pread64(r2, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec02", 0x2e}], 0x2) 00:13:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB]) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) [ 1344.421051] mac80211_hwsim hwsim16 wlan1: refused to change device tx_queue_len 00:13:51 executing program 3: shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000001c0)) r3 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010000001800007b", @ANYRES32=r4, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='}\xfc\\-+*{\x00', &(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x2) 00:13:51 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') write$vga_arbiter(r0, &(0x7f0000000200), 0xf) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) recvmsg$unix(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0x6e, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/183, 0xb7}], 0x2, &(0x7f0000001380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}, 0x100) sendmsg$802154_raw(r3, &(0x7f00000015c0)={&(0x7f00000014c0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000001580)={&(0x7f0000001500)="eba8f8e9e2d5c79f351ad660aa812009b85994e4f405bd87dd2b3cc2790de6403075822603b826c90cdcc7098228f0b5128f122e0aa2eff16f47c45c021b1c68635a5a4c361eb438cba63c1328144b820c8247ed5097f4f8b02d91", 0x5b}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r5, 0x0, 0x120) sendfile(r4, r5, &(0x7f0000001600)=0x7fff, 0x8) r6 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$vga_arbiter(r6, &(0x7f0000000000), 0xf) [ 1344.475568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:13:51 executing program 2: shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000001c0)) r3 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010000001800007b", @ANYRES32=r4, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='}\xfc\\-+*{\x00', &(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x2) 00:13:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) [ 1344.532959] mac80211_hwsim hwsim16 wlan1: refused to change device tx_queue_len 00:13:51 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{0x2}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:13:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB]) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:13:51 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 20) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) [ 1344.653445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1344.688404] FAULT_INJECTION: forcing a failure. [ 1344.688404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.691325] CPU: 1 PID: 11984 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1344.692738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1344.694433] Call Trace: [ 1344.694981] dump_stack+0x107/0x167 [ 1344.695738] should_fail.cold+0x5/0xa [ 1344.696524] _copy_from_user+0x2e/0x1b0 [ 1344.697343] __copy_msghdr_from_user+0x91/0x4b0 [ 1344.698284] ? __ia32_sys_shutdown+0x80/0x80 [ 1344.699192] ? udp_v6_push_pending_frames+0x360/0x360 [ 1344.700263] ? inet6_sendmsg+0xbd/0x140 [ 1344.701060] ? inet6_compat_ioctl+0x320/0x320 [ 1344.701981] ? __sock_sendmsg+0x55/0x190 [ 1344.702792] sendmsg_copy_msghdr+0xa1/0x160 [ 1344.703672] ? do_recvmmsg+0x6d0/0x6d0 [ 1344.704450] ? __lock_acquire+0x1657/0x5b00 [ 1344.705335] ___sys_sendmsg+0xc6/0x170 [ 1344.706107] ? sendmsg_copy_msghdr+0x160/0x160 [ 1344.707029] ? vmacache_find+0x55/0x2a0 [ 1344.707845] ? lock_acquire+0x197/0x470 [ 1344.708646] ? find_held_lock+0x2c/0x110 [ 1344.709455] ? __might_fault+0xd3/0x180 [ 1344.710258] ? lock_downgrade+0x6d0/0x6d0 [ 1344.711085] ? asm_exc_page_fault+0x1e/0x30 [ 1344.712001] __sys_sendmmsg+0x195/0x470 [ 1344.712793] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1344.713666] ? lock_downgrade+0x6d0/0x6d0 [ 1344.714515] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1344.715494] ? wait_for_completion_io+0x270/0x270 [ 1344.716469] ? rcu_read_lock_any_held+0x75/0xa0 [ 1344.717413] ? vfs_write+0x354/0xa70 [ 1344.718149] ? fput_many+0x2f/0x1a0 [ 1344.718890] ? ksys_write+0x1a9/0x260 [ 1344.719664] ? __ia32_sys_read+0xb0/0xb0 [ 1344.720496] __x64_sys_sendmmsg+0x99/0x100 [ 1344.721325] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1344.722371] do_syscall_64+0x33/0x40 [ 1344.723117] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1344.724166] RIP: 0033:0x7fa76daafb19 [ 1344.724913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1344.728628] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1344.730146] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1344.731607] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1344.733017] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.734461] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1344.735910] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 [ 1344.984525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:14:04 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{0x3}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:14:04 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x220}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x3, 0x2}, 0x0, 0x20, 0x0, 0x0, 0x0, 0xd5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c00000001015a56000000000000000007000001081851000c400000000380ececb89dc8fe9f2dff070000000000000acb57ab5c44f4a3c392065096dcaee6adf80ea5a9a0bfa21595cbe299b4b99ad4766c482f6cafad92e6e8336b3e7abb2856341cc991ebc0b192e5430cf600529a0e7ccbb35dc5514c0cda4310a8940191f591face3aaad34e4186bc5ef41cf82448b2bab198104b46a5f7aa2410240e"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20044004) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[{0x0}], 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='environ\x00') ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x200, 0x14, 0x15}, 0x18) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x2, 0x74, 0x4, 0x0, 0x101, 0x10054, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0x4, @perf_config_ext={0x3, 0x1}, 0x1020, 0xa7, 0x0, 0x0, 0x0, 0x4, 0x66, 0x0, 0x101}, r0, 0xffffffffffffffff, r3, 0x8) unlink(&(0x7f00000003c0)='./file0\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0}, 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0xa, &(0x7f0000000ac0)=[{&(0x7f00000002c0)="0e08e2663bb5b2c3181dd66172fdbdf3f69803b45b6284fa448ff47e64d69002c2c5959f0e98a7700b5c119b827a183f0946294f6a7af0ca2d1e791c1fffc81a7df7cfca2755a00d42b0fdfd7506c0c2be6e2920ca2fc99451a124aa571220cb85a62d4791e2fee22c2e5122bab2868587760c2f1bbc258c31509a28726331d053845a68fe0027a29bd7f44592cc42dc6179d3a01d90f4f263aa8db5eb0f81932f1440172698995091286e2326701549bfcb7715b47e936eb7b607446002939006", 0xc1, 0x1}, {&(0x7f0000000480)="c7523740a7d858e5a88fc470a8bf60f37c6dfa087437174db4a47aacb8c5d2a64c7a69207fc0fc109f7eb204bdc8645e83fab838e521ef01eaeca98b2474dcf685246290bd5b7362ccdeca1e8fd3345857c880b533920fcdbf41fc1e853019272c593a45a5a043bf13c8b83fbd909cf7bc14972e5b46b6a748eb919800f9d29584ca8e7633a57a3771ddb58e8759403eb2f572e611a1e13a2171c7d42f4c18815298fde24adc34308f89ebf599658d9ee810c72e710e3da533eb07d16d2e49540eb4b9310f1ae3ae90e82bcbe854535ba19952fbcd0276b7ee0d941e775143", 0xdf, 0x7}, {&(0x7f0000000580)="3858d4ec319379114f64cc280e8909b4a0c3842e56fd393e0106c3070a3f4c41feae3b7cdb59aa0022b5980c573ed3186b5a28a86fb0cd6c1d14301c30d59e78ee083570f981d1edc050d8b33355a24f6d51336fde8ecdf1ce8d6b404369426888c7131b03f5920047d689892536cba39aeea7487f72df35cabbd1801794015cd0a4cfb0d98804c32bbb2a1a2989acf4c51cac3fb55f7ded0645e03b4ee9c96106ce6d649c8a4c2cf217656af4803b146689405344f143391c585b8957e4e4cf94d7d324262337b3465d10471762b9dadef6f62428fa8d40d598fbf9ab4aa9894e47ec5c3b724c5ef8767387d0d830d73560a55fb253", 0xf6, 0x3}, {&(0x7f0000000680)="c8028ec43525182e5e4e40e6954ab981f48218c2beff0134c27578f37c921d4ac93b8f3a2839915e71ba5eca33565d307da37e11523296e5d95ad1a2be8c8d52e90b16f4ccd3fc488d40c15e80bfbed11be51f0b1e1d758820196b3d517946d65ac6b8992c1daa85920c605f85437285a46cd5f88f05d353e90f55df0e29c0c9cc0e2488427d6bb8283140284628cb888bcb18aa8549", 0x96, 0x1}, {&(0x7f0000000740)="35933ba849a905649a5f437327e24b8a3f9974340bb862f1ba16efc0ff2822783cc7fbb2dbae7733670a72d4c578917421dc3e8a77f39c5318d043ac5351db73b64a8cbc02fc9af2beaf63e58a293791ad93280790603196337ef43b6b1ef47d4002fd047dab0fa63d5bee39ac61c6158b7d85a769e3c9e5", 0x78, 0x7fff}, {&(0x7f0000000400)="489bccd0b7495247ebf6ce280217db8c594cbbd779346d134062cc9f03b3d9e7108f3f97862ca13b5e61cd2ead", 0x2d, 0x7}, {&(0x7f00000007c0)="81cde3da681bc0de836af2585c2ec9111d78e00a4e08023169cf0a7a87cfe00e667b1d5a73a8bed10e66228d4eb1d2e56b84340ce12cfeea310a781b81fe9ce57a7eb1ebec1b86944f54586359a12703ba21dff643cb2e7f0e28422b69e8ddf7b6fb38d479ed1065f56fb6cb8302b69c9380760dbd0c82c146ffab0161fec655759d1e7be67c52098f3463f4387040e748986c03f258486f7f0c058edfd438b1c8184631740ee1d3916e18cdfb7cf269972e9efbcf0840685e3559e835823819e4344ffa824d3173c9ba219ee3626976fdbb9c0acc102511f1c4d27f44ab55a6afad40766fe5840ffd9b13d5", 0xec}, {&(0x7f00000008c0)="ca4fb2ae2a98792660b8e9c017cce6d201edb18355904338e2eea78aaeb1b6f2fb", 0x21, 0x2}, {&(0x7f0000000900)="abda50b1e2d4db78e23f117e7b24e56127c4500b6f488fb4aeb9e5621d9c42bd80bdcb5450f7bdb7caf1ba87d08df097056e6a09b2d94652ad347a5b48f2d01417347486470fd83f557e63e599bd60a18802c3ae9590e318e3590cf971c47bb32851276f8c9423864960a71bd8a155286bca2e0cebddb81a89340eae9231d65d2e7dc33c5891cde2b66184a720d9f74199c9871de2b72db3a575e836c31e1caeb1412f87aacb89e8b5ea9007698bd67221e3e75de7", 0xb5, 0x2a1a46df}, {&(0x7f00000009c0)="fedd6eda5d1351d36c4d786376ec657a1d0c01ad5140a16befda5570ae468f48a6fd3f355576bbf39fbe8a1ecd1e15ba285ebc666b2673242def275ee51ca5cfb66795116e77965ddfe96671d0c3fd46fd46a621682c262263d90e3a8192ff72bb73802885a4b6a3f511858465d07529cd10fd63da7d98f8152cbfe935fdd147768e8e578b80bc21bac8f558dfb3e4287045fe86a3c0f0e38d5e81944e68c7da2958e2d21510ae3e8b8b18de08d7e70801da230dda10c92f67765f914de31a71a96a6713876a8ea407a4bba2fde78a39b6cfa5c7f67a70c325828f", 0xdb, 0x5e}], 0x804, &(0x7f0000000c00)={[{@errors_continue}, {@norecovery}, {@dioread_nolock}], [{@uid_lt={'uid<', r4}}]}) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x3, 0x7, 0x1, 0x6, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp, 0x232, 0x0, 0x2, 0x0, 0x1, 0x8, 0x3f, 0x0, 0xfffffffc, 0x0, 0xf1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xa) ptrace$setopts(0x4200, r0, 0x1, 0x32) r6 = fcntl$getown(r5, 0x9) ptrace$getenv(0x4201, r6, 0x3, &(0x7f0000000c80)) 00:14:04 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x1, 0x20, 0xc518, 0x3, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x67, 0x0, 0x5b, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', r1, 0x4, 0x2, 0x81, 0x7, 0x10, @loopback, @private0, 0x8000, 0x7, 0x100, 0x20}}) clone3(&(0x7f00000004c0)={0x4000000, &(0x7f00000001c0), &(0x7f00000002c0)=0x0, &(0x7f0000000300), {0x1f}, &(0x7f0000000340)=""/30, 0x1e, &(0x7f0000000380)=""/209, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) perf_event_open(&(0x7f0000000240)={0xf, 0x80, 0x1, 0x40, 0x81, 0x7f, 0x0, 0x650000, 0x0, 0xc, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000180), 0x2}, 0x8000, 0x0, 0x75c, 0x8, 0x9, 0x9, 0x7ff, 0x0, 0x1, 0x0, 0x400}, r2, 0xb, 0xffffffffffffffff, 0x18) 00:14:04 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 21) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:14:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX]) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:14:04 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) [ 1357.604536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:14:04 executing program 3: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='logon\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3, 0xa}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r2) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000000000000102030405060708090a0b0c0d0e1e1f20212223242526272c292a2b32333435363723c8081953e7c5383b3a3b3c3d453f4000"/79], 0x48, r1) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x800) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000600)=0x1e) preadv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000740)=""/9, 0x9}, {&(0x7f0000000780)=""/27, 0x1b}, {&(0x7f00000007c0)=""/150, 0x96}], 0x4, 0x5, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:14:04 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB]) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) [ 1357.635154] FAULT_INJECTION: forcing a failure. [ 1357.635154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1357.637986] CPU: 0 PID: 12000 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1357.639404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1357.641116] Call Trace: [ 1357.641661] dump_stack+0x107/0x167 [ 1357.642415] should_fail.cold+0x5/0xa [ 1357.643205] __alloc_pages_nodemask+0x182/0x600 [ 1357.644170] ? lock_chain_count+0x20/0x20 [ 1357.645043] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1357.646309] alloc_pages_vma+0xbb/0x410 [ 1357.647131] wp_page_copy+0xee7/0x1f00 [ 1357.647966] ? print_bad_pte+0x5a0/0x5a0 [ 1357.648803] ? lock_downgrade+0x6d0/0x6d0 [ 1357.649661] ? vm_normal_page+0x162/0x2e0 [ 1357.650520] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1357.651601] do_wp_page+0x27b/0x1390 [ 1357.652386] handle_mm_fault+0x1cc7/0x3500 [ 1357.653258] ? __lock_acquire+0x1657/0x5b00 [ 1357.654160] ? __pmd_alloc+0x5e0/0x5e0 [ 1357.654975] ? vmacache_find+0x55/0x2a0 [ 1357.655821] do_user_addr_fault+0x56e/0xc60 [ 1357.656718] exc_page_fault+0xa2/0x1a0 [ 1357.657518] asm_exc_page_fault+0x1e/0x30 [ 1357.658373] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1357.659401] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca e9 f1 2c 1e 02 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d2 2c 1e 02 66 90 48 bb f9 ef ff ff ff 7f [ 1357.663206] RSP: 0018:ffff8880368bfcf0 EFLAGS: 00050293 [ 1357.664312] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020005038 [ 1357.665783] RDX: 0000000000040000 RSI: ffffffff830fa4f2 RDI: ffff888017792378 [ 1357.667256] RBP: 000000000004c000 R08: 0000000000000000 R09: 0000000000000000 [ 1357.668740] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000000c [ 1357.670202] R13: 0000000020005000 R14: 0000000000000400 R15: 00000000000003ff [ 1357.671683] ? __sys_sendmmsg+0x1c2/0x470 [ 1357.672568] __sys_sendmmsg+0x1cf/0x470 [ 1357.673390] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1357.674274] ? lock_downgrade+0x6d0/0x6d0 [ 1357.675145] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1357.676151] ? wait_for_completion_io+0x270/0x270 [ 1357.677139] ? rcu_read_lock_any_held+0x75/0xa0 [ 1357.678091] ? vfs_write+0x354/0xa70 [ 1357.678864] ? fput_many+0x2f/0x1a0 [ 1357.679620] ? ksys_write+0x1a9/0x260 [ 1357.680421] ? __ia32_sys_read+0xb0/0xb0 [ 1357.681269] __x64_sys_sendmmsg+0x99/0x100 [ 1357.682132] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1357.683194] do_syscall_64+0x33/0x40 [ 1357.683977] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1357.685026] RIP: 0033:0x7fa76daafb19 [ 1357.685793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1357.689576] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1357.691145] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1357.692909] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1357.694616] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1357.696347] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1357.698045] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:14:04 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:14:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000, 0x4, 0x0, 0x0, 0x0, 0xc0000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x2d0d) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r1, 0x0, 0x120) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/22, 0x16}], 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20602, 0x11f) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x6, 0xb0, 0x5}) openat$incfs(r3, &(0x7f0000000240)='.pending_reads\x00', 0xf0540, 0x88) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x6, 0x40, 0x2, 0x1, 0x0, 0x2, 0x10, 0x11, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x4, 0x3}, 0x19008, 0x3, 0x6, 0xe, 0x9, 0xfffffff9, 0x5405, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x2) sendfile(r0, r2, 0x0, 0x100000001) 00:14:04 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 22) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:14:04 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,sm']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) [ 1357.846399] FAULT_INJECTION: forcing a failure. [ 1357.846399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1357.849891] CPU: 0 PID: 12030 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1357.851406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1357.853243] Call Trace: [ 1357.853791] dump_stack+0x107/0x167 [ 1357.854540] should_fail.cold+0x5/0xa [ 1357.855330] _copy_from_user+0x2e/0x1b0 [ 1357.856176] __copy_msghdr_from_user+0x91/0x4b0 [ 1357.857125] ? __ia32_sys_shutdown+0x80/0x80 [ 1357.858031] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1357.859116] sendmsg_copy_msghdr+0xa1/0x160 [ 1357.860015] ? do_recvmmsg+0x6d0/0x6d0 [ 1357.860810] ? handle_mm_fault+0x9e9/0x3500 [ 1357.861701] ? __lock_acquire+0x1657/0x5b00 [ 1357.862585] ? find_held_lock+0x2c/0x110 [ 1357.863427] ___sys_sendmsg+0xc6/0x170 [ 1357.864240] ? sendmsg_copy_msghdr+0x160/0x160 [ 1357.865174] ? vmacache_find+0x55/0x2a0 [ 1357.865989] ? do_user_addr_fault+0x5b0/0xc60 [ 1357.866920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1357.868011] ? exc_page_fault+0xca/0x1a0 [ 1357.868850] ? trace_hardirqs_on+0x5b/0x180 [ 1357.869734] ? exc_page_fault+0xca/0x1a0 [ 1357.870562] ? asm_exc_page_fault+0x1e/0x30 [ 1357.871462] __sys_sendmmsg+0x195/0x470 [ 1357.872291] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1357.873167] ? lock_downgrade+0x6d0/0x6d0 [ 1357.874034] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1357.875019] ? wait_for_completion_io+0x270/0x270 [ 1357.876020] ? rcu_read_lock_any_held+0x75/0xa0 [ 1357.876969] ? vfs_write+0x354/0xa70 [ 1357.877731] ? fput_many+0x2f/0x1a0 [ 1357.878483] ? ksys_write+0x1a9/0x260 [ 1357.879272] ? __ia32_sys_read+0xb0/0xb0 [ 1357.880136] __x64_sys_sendmmsg+0x99/0x100 [ 1357.881010] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1357.882083] do_syscall_64+0x33/0x40 [ 1357.882855] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1357.883945] RIP: 0033:0x7fa76daafb19 [ 1357.884718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1357.888530] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1357.890110] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1357.891602] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1357.893073] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1357.894524] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1357.895990] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:14:04 executing program 2: prlimit64(0x0, 0x6, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r1, 0xffffffffffffffff}}, './file1\x00'}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x100000003) setresuid(0xee00, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) 00:14:04 executing program 3: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='logon\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3, 0xa}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r2) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000000000000102030405060708090a0b0c0d0e1e1f20212223242526272c292a2b32333435363723c8081953e7c5383b3a3b3c3d453f4000"/79], 0x48, r1) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x800) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000600)=0x1e) preadv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000740)=""/9, 0x9}, {&(0x7f0000000780)=""/27, 0x1b}, {&(0x7f00000007c0)=""/150, 0x96}], 0x4, 0x5, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1357.932302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:14:05 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000071c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid}, {@version_L}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@version_9p2000}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) syz_mount_image$vfat(&(0x7f0000000600), &(0x7f0000000ac0)='./file0\x00', 0x3, 0x8, &(0x7f0000007040)=[{&(0x7f0000005b40)="796bf0594a5f29d53e9922231487bbe0fc29abfc36d2a7a3915b8fe3af3fc4a1d52d01ceb916ad12d56182579721a26cffc0a018071a394bc29683954b9aa7b69e6a200f89e8a8d27ba9a78ec6e6ecd1535ad7da67454d0871933a8042ecee79a93bf4272c02ae3382febd0966face03b51598bb6f85ba3412e8af14dfe23c8eed477d0291031a768faf252130fbd9feee6349707825f68b1180aadc0aceba17e782a09d0e8974560bf10e303fbc2f2d7168d9f92e61f82324ac3b4ed35fe4f0ab", 0xc1, 0x10d32534}, {&(0x7f0000005c40)="3e23b8fc9370d150cb1ddd14f2b767d41459955869a92f5ee97e5683865b60", 0x1f}, {&(0x7f0000005c80)="8be4d88b41c362efd369a28c2cc1de55f810a6cb5c1fd9a715610fd1929a0762d453becde1db14545bf61c31c060c8daeea9fc728b9ff54e9e1cefd26863908813c8c90034ca5516f4bef842d5b6d032656103f55ca780292a1edbd1217d83e9254a270c513ef0439db2d031f3f5825f99944be21b87678b3594a0b97091f5b52e9980e2efbe0afda736551f3bc4c7e11a69b74fdd7274576fc29c0ba8ed135b16dbfe542988cb7d78f0f179f1856496176864f34d16d11c174c3e159d608a776c", 0xc1, 0x4}, {&(0x7f0000005d80)="45cf13f3c5ee5bc003db542628503a498215fdfa3dc8d73e18dad200cd1bee9ea2b05c2869c70ca0ef5bc5a6a614f5a87e0a760749221a6cdca840853e738f8ad85151a2defc5531c1c66555b874d98f316ac0698c1c1c1e64368e79a105c90a004bddb21c2523c848128137e331124de8960a736b7d3d68d1d1d239a9b3f8d3e0", 0x81, 0x3f}, {&(0x7f0000005e40)="68975fe16280797a7f863a0b591de7a1cb883509facacfb4c5f4939ae973426faa51e18fd71266b1398b11f01f2d5bcf66f285ade3f76fe5d3655b45bef684e8af2df5c41f8c553f58f78c3a8467fa2184f09ba009f8ecba5d43c24657336b9fc3a627a431720b3fd7dd4b45df3b707faeb1fbbfa90b9d59392c8e479b7e9f9834e1", 0x82, 0x10001}, {&(0x7f0000005f00)="7a04f37c72600f5b3a38ea5e61f739892a105441a9deed765dca13c0d2ab3626572b55106780bb32b794a08488d8301e30a5ba09eb32b5db4a659dba170e81cf4f652f2bef285d79dd2015dd05caa55a37bfe2215633407053e2d12a3f6f96aeb095f41814305e4bd5e87a21fcf09fccd5266dc7ba4f28bc300f59abd915d2e71ab02eb5140ea95bc2d136e91c06ac481861522d8e6d27a80eb00f2bdf85578e9afcbdc6013c8b2df5e4330983e2faecdaca0dd75841f2927bfb81135eb83bc8ebced2bf4de8e4f84ada134b4d812dae5d6deac9fd17e0981bca3317c88c7ec1452f7d7e93ab14e517e7cf25dc70cad3cea478cfbc61c9", 0xf7, 0x1}, {&(0x7f0000006000)="a9be83fdca181f7b239faeef2418e0ca04a6", 0x12, 0x1}, {&(0x7f0000006040)="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", 0x1000, 0x8}], 0x0, &(0x7f0000007100)={[{@nonumtail}, {@uni_xlate}, {@numtail}, {@utf8}, {@fat=@gid={'gid', 0x3d, r2}}], [{@obj_user={'obj_user', 0x3d, 'queue1\x00'}}, {@subj_type={'subj_type', 0x3d, 'queue1\x00'}}, {@measure}, {@euid_eq}]}) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$vga_arbiter(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="ac55696cd4835f3c4b9099ef09088d670f64966f1d8849ee4968be452c366a539c14a7541724f8f6df9ada1192b94bd4012cc3cbb583e302ade82e2778a6f879252291c88d29abb36ac1e4be3323dc335eeee6ec3c5a48dd498fe5dfae9bdb66309b811e82012fec52bef29c2d464e3407fa672b775bf93b4da4241ca1f503423b7d3e056b33e61f55c3f18ff29b98f9c2166a47ec8145e86962658282b13e16c2d3f81c39a540b36e9fce5fade8dec5feff3bb9f852bc438d0b23289feeb335b4a756a5"], 0xa) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x20010, r4, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x80000001, @empty, 0xfff}, 0x1c) recvmmsg(r4, &(0x7f0000004900)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000300)=""/62, 0x3e}, {&(0x7f0000000480)=""/122, 0x7a}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/90, 0x5a}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/12, 0xc}, {&(0x7f0000000680)=""/89, 0x59}], 0x7, &(0x7f0000000780)=""/215, 0xd7}, 0x100}, {{&(0x7f0000000880)=@nfc, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000900)=""/88, 0x58}, {&(0x7f0000000980)=""/68, 0x44}, {&(0x7f0000000a00)=""/135, 0x87}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)=""/206, 0xce}], 0x5, &(0x7f0000000c80)=""/4096, 0x1000}, 0x1ff}, {{&(0x7f0000001c80)=@tipc, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/69, 0x45}, {&(0x7f0000002d80)=""/162, 0xa2}, {&(0x7f0000002e40)=""/207, 0xcf}], 0x4, &(0x7f0000002f80)=""/233, 0xe9}, 0xd020}, {{&(0x7f0000003080)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000003280)=[{&(0x7f0000003100)=""/1, 0x1}, {&(0x7f0000003140)=""/198, 0xc6}, {&(0x7f0000003240)=""/36, 0x24}], 0x3, &(0x7f00000032c0)=""/38, 0x26}, 0x9188}, {{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/70, 0x46}, {&(0x7f0000004380)=""/13, 0xd}, {&(0x7f00000043c0)=""/116, 0x74}, {&(0x7f0000004440)=""/54, 0x36}, {&(0x7f0000004480)=""/199, 0xc7}, {&(0x7f0000004580)=""/242, 0xf2}, {&(0x7f0000004680)=""/193, 0xc1}], 0x8, &(0x7f0000004800)=""/226, 0xe2}, 0x7}], 0x5, 0x10002, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r10, 0x0, 0x83, &(0x7f0000005a80)={'nat\x00', 0x0, 0x4, 0x1000, [0xfffffffffffffff8, 0x7, 0x3, 0x7, 0xe367a21, 0x2a6], 0x1, &(0x7f0000004a40)=[{}], &(0x7f0000004a80)=""/4096}, &(0x7f0000005b00)=0x78) 00:14:05 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:14:05 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,sm']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) [ 1358.051221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1358.363356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:14:22 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) write$vga_arbiter(r1, &(0x7f0000000000)=@other={'lock', ' ', 'io'}, 0x8) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) 00:14:22 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 23) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:14:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:14:22 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,sm']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:14:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x50}, {0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x40, r4, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000014c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x122c, r1, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x17}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x94, 0x3, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x8a, 0x1, "4c14abb57e00015d110c36ad4fbc7dbbe714051e2997fa090b287b5335aad25f069a32fbaff45f77042fed7ffcae220e97f20d0e74badf0f311707d875ecf9f11e060d98cd9c182a35492803b9fbcba02b8a32f068d1b331a47ec34cc7487cdae98c117d1976f71e7db5c06c3e3f3c4533036fb9534f0941306736ec2beb39ab8347db00c2be"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10b0, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}}, {0x98, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x93, 0x2, "87b74543fd28304c349f67887da90fb7d349dba02c3f326bbea1755e2295560c9e301b6e2efea267ebad648d92d585e032f600fdbf69755906890b774e16a69e4fafb77bb6c15f0c6f31af005e5bd826ebc47c6ea8c2b4040891480f1189e0f442816d847e6522b0efdb4b8fe22c154b2d32e954ad2fb12ad885d24290f5b400467b72ec0c724cc0a6d280072a6629"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xa8, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x2d, 0x2, "daac6242bcbd238065ac5b05dc7559371e778ff28a1f41337f5cfd9d86019fa1f36a64e95818e54c2d"}}, {0x70, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x6c, 0x1, "ea9bf7e730c2e14d9290e047ff9e7e1431c433a6a89d3517092dd9cb8f5fba887f6ab9eef1f7214fa12b35e07c06c8dd399f34104cd083a6923e6af89eba0e0ac73a574a42faf320570562b45630345edfb3b6955ffbdee0106ce27172eed5c97e9de81024d602de"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x7b5c}]}, 0x122c}, 0x1, 0x0, 0x0, 0x804}, 0x4000005) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fcntl$dupfd(r0, 0x406, r7) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffec7, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:14:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000140)=']\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)=']$-\x00'], 0x1000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x40, 0x9a) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) stat(&(0x7f0000000500)='./file1\x00', &(0x7f0000000540)) socket$netlink(0x10, 0x3, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x8) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000480)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 00:14:22 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x2}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:14:22 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f00000002c0)="ed4100000093b200dff4655fe0f4655fe0f4655f00000800001f0a4a92bfe733eb50e35c3fa4fad2c5", 0x29, 0x20fe}], 0x2000, &(0x7f0000000140)=ANY=[]) r1 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="ae792074d1284d2c88a40b9551bd9ea887ddea017de80f55c5d2aee68a6c8caf631221afb32af08cdc2b2da14a9d31aedc3eabc9e74f6d63649f7d8398aae705105b4981fd3c82059742868af5d11d33d5844bad4d27cae820a7f7529ddec02414462df29fee9093e31b75a94166605cc658526acdc0a9e745d40aebe75efe8329def2e573cd9d8e79a44007bfb5fca4eb1e30ca01a9a0cecc987454244aa6152cc9d223c14d4373d2b2e1d1af0e5d36a34524aba40f25ef17747791e4729df19414cd3d20e39bf1ce46a19a81ee06fbe30caf0d3d536045684a92debb45037a891f5b44905ac935fb388830cdf521473d45458c0b219630ed", 0xf9}], 0x0, &(0x7f0000000400)={[{@dmode}, {@map_normal}, {@check_strict}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x37, 0x35, 0x37, 0x34, 0x36, 0x36, 0x35], 0x2d, [0x55, 0x66, 0x62, 0x31], 0x2d, [0x37, 0x30, 0x66, 0x35], 0x2d, [0x62, 0x36, 0x69, 0x61], 0x2d, [0x37, 0x65, 0x30, 0x64, 0x66, 0x66, 0x32, 0x35]}}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}, {@appraise}, {@subj_role={'subj_role', 0x3d, 'ext4\x00'}}]}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x2, 0x5, {0x0, r1}, 0x3, 0xf, 0x1, {0x0, r5, r0}}, 0x9) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) [ 1375.099249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1375.112206] FAULT_INJECTION: forcing a failure. [ 1375.112206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1375.114928] CPU: 0 PID: 12070 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1375.116306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1375.117948] Call Trace: [ 1375.118477] dump_stack+0x107/0x167 [ 1375.119211] should_fail.cold+0x5/0xa [ 1375.119977] _copy_from_user+0x2e/0x1b0 [ 1375.120793] __copy_msghdr_from_user+0x91/0x4b0 [ 1375.121718] ? __ia32_sys_shutdown+0x80/0x80 [ 1375.122591] ? udp_v6_push_pending_frames+0x360/0x360 [ 1375.123618] ? inet6_sendmsg+0xbd/0x140 [ 1375.124414] ? inet6_compat_ioctl+0x320/0x320 [ 1375.125286] ? __sock_sendmsg+0x55/0x190 [ 1375.126120] sendmsg_copy_msghdr+0xa1/0x160 [ 1375.126970] ? do_recvmmsg+0x6d0/0x6d0 [ 1375.127756] ? __lock_acquire+0x1657/0x5b00 [ 1375.128636] ___sys_sendmsg+0xc6/0x170 [ 1375.129422] ? sendmsg_copy_msghdr+0x160/0x160 [ 1375.130318] ? vmacache_find+0x55/0x2a0 [ 1375.131111] ? lock_acquire+0x197/0x470 [ 1375.131905] ? find_held_lock+0x2c/0x110 [ 1375.132735] ? __might_fault+0xd3/0x180 [ 1375.133520] ? lock_downgrade+0x6d0/0x6d0 [ 1375.134346] ? asm_exc_page_fault+0x1e/0x30 [ 1375.135214] __sys_sendmmsg+0x195/0x470 [ 1375.136033] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1375.136885] ? lock_downgrade+0x6d0/0x6d0 [ 1375.137733] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1375.138686] ? wait_for_completion_io+0x270/0x270 [ 1375.139634] ? rcu_read_lock_any_held+0x75/0xa0 [ 1375.140573] ? vfs_write+0x354/0xa70 [ 1375.141310] ? fput_many+0x2f/0x1a0 [ 1375.142042] ? ksys_write+0x1a9/0x260 [ 1375.142794] ? __ia32_sys_read+0xb0/0xb0 [ 1375.143613] __x64_sys_sendmmsg+0x99/0x100 [ 1375.144470] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1375.145504] do_syscall_64+0x33/0x40 [ 1375.146253] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1375.147271] RIP: 0033:0x7fa76daafb19 [ 1375.148034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1375.151703] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1375.153230] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1375.154643] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1375.156066] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1375.157473] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1375.158882] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:14:22 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xfffffffffffffd17) 00:14:22 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 24) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:14:22 executing program 1: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in=@multicast1}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) ftruncate(r1, 0x6) ftruncate(r0, 0x1000003) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) ioctl$KDSKBLED(r1, 0x4b65, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) dup2(0xffffffffffffffff, r3) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x5, 0x7fffffff, 0x51b2}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x4010, r4, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x0, 0x4}, {0x5}]}, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 00:14:22 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfl']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:14:22 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x12100, 0x114}, 0x18) 00:14:22 executing program 2: getgroups(0x0, &(0x7f0000000180)) mount$tmpfs(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="ebec7bfed5a3e187a3698addc4100a6894cfa4493e0517ada6054af331782c3685f01c05662618bdc55c920ddc302197982e82845ce1ca7931239d258ed20566f98b2985d24340576dbb3cb16c", @ANYRES16=r4, @ANYBLOB="440200"/18, @ANYRESDEC=r1, @ANYBLOB="00006500fbff000006006500ff00000006006500010000003b005b0036bb1a6a06a95fe6cf645f9562206bfd49392e43ab875f3bc7dd35c80a7c3ca63afa659948effd32c65ea56353da57cb978d575c11882b0000005b007b7632985b2dfcc91cd241fa11de9cd60a474fbcad10bf4b86b4a1495fe864f5e3f8c1cf14deaa48fbbb35be3ca785fbab45e8f6839d4b65e7b5d1a67d3f005ad4fe78dde994e592194872ac3f000000"], 0x128}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004840) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r7 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r8 = fcntl$dupfd(r7, 0x406, r7) ioctl$VFAT_IOCTL_READDIR_SHORT(r8, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r6, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 1375.349315] FAULT_INJECTION: forcing a failure. [ 1375.349315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1375.352248] CPU: 1 PID: 12087 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1375.353655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1375.355313] Call Trace: [ 1375.355851] dump_stack+0x107/0x167 [ 1375.356614] should_fail.cold+0x5/0xa [ 1375.357407] _copy_from_user+0x2e/0x1b0 [ 1375.358252] __copy_msghdr_from_user+0x91/0x4b0 [ 1375.359323] ? __ia32_sys_shutdown+0x80/0x80 [ 1375.360292] ? udp_v6_push_pending_frames+0x360/0x360 [ 1375.361337] ? inet6_sendmsg+0xbd/0x140 [ 1375.362153] ? inet6_compat_ioctl+0x320/0x320 [ 1375.363066] ? __sock_sendmsg+0x55/0x190 [ 1375.363890] sendmsg_copy_msghdr+0xa1/0x160 [ 1375.364786] ? do_recvmmsg+0x6d0/0x6d0 [ 1375.365586] ? __lock_acquire+0x1657/0x5b00 [ 1375.366479] ___sys_sendmsg+0xc6/0x170 [ 1375.367267] ? sendmsg_copy_msghdr+0x160/0x160 [ 1375.368214] ? vmacache_find+0x55/0x2a0 [ 1375.369038] ? lock_acquire+0x197/0x470 [ 1375.369851] ? find_held_lock+0x2c/0x110 [ 1375.370701] ? __might_fault+0xd3/0x180 [ 1375.371513] ? lock_downgrade+0x6d0/0x6d0 [ 1375.372361] ? asm_exc_page_fault+0x1e/0x30 [ 1375.373268] __sys_sendmmsg+0x195/0x470 [ 1375.374090] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1375.374979] ? lock_downgrade+0x6d0/0x6d0 [ 1375.375848] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1375.376854] ? wait_for_completion_io+0x270/0x270 [ 1375.377838] ? rcu_read_lock_any_held+0x75/0xa0 [ 1375.378783] ? vfs_write+0x354/0xa70 [ 1375.379542] ? fput_many+0x2f/0x1a0 [ 1375.380293] ? ksys_write+0x1a9/0x260 [ 1375.381081] ? __ia32_sys_read+0xb0/0xb0 [ 1375.381925] __x64_sys_sendmmsg+0x99/0x100 [ 1375.382799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1375.383858] do_syscall_64+0x33/0x40 [ 1375.384636] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1375.385680] RIP: 0033:0x7fa76daafb19 [ 1375.386446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1375.390207] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1375.391752] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1375.393224] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1375.394690] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1375.396143] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1375.397585] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 [ 1375.415030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:14:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup(0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f00000003c0)) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000400)={0x101, 0x8, 0x7ff, 0x0, 0x5}) r2 = openat(r0, &(0x7f00000001c0)='./file1/file0\x00', 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000002600)=ANY=[@ANYBLOB="1100000001000000c5e1ffff47c3c1a27c965a7afe11586f5f90fffe2038ebe164ef09a0704c86c00a7f0deb139fb46126dd40d652dff281b50968d0b8f0c40280d58c8972c45650fdd5ae5697eaeb0f4a1e7212471588b056d325587a9ac36ae56b541b58b76af96d77101d50885a13a8dd736d770fa498e7601ae1fdb0bc14e6a591a21ba579633c4d", @ANYRES32, @ANYBLOB="ffffff7f000000002e2f66696c65312f66696c653000"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) pwrite64(r2, &(0x7f00000026c0)="f50744686ee4ed92d60597345b5f8c663269997f1c09a9774f6e22aa9f1d39d13aad58db31a7df1b7518427749f3a62f9c3b39e7bf65ca361231d093473eedecd5a092da6c9046d079c1fbabd72323694c3ba41db0b013f7124c5287b1947f6f8c752cb560c2fff7a9af621e6bb672c5c26c3a15ca50d8bd681a52f011d3a7e14b6c724a2ed9c3512461fc2b8b04f2e5b12410d3c085c45129d521d59eb5322b1be19896fc1af6a7b1ac6c697bee0ae790483b8f2ca5a3926da7197cd48de452c9cebd915faf72b5dcbc3f6df0d3e43511233cc9a05a5582b1d3f32d78d3a808a1c287ea1846cf5224b6ca43735bacd81260d3b5b1713cd263ddad2aae3853e12e2e3b5981d2b1ea103b8fe51efb98e7f17a2f0f99628273e1a8ab5031c4215510e8a8a6bfb43f33c6312b38beabadcfee8cea1b90fc2ed5726befb746a0809c36e68ee406fbbff2abbdd64f2dd77448ccc8e2e9545d60db06514a902a59b9232ba419f0f86125b951f682385ae30b7bd3839840d6cf182cf0a4eaa259d34191c17e56ab6d49c9dc2977c7e5e4d475c190b614030fbbf5daab1ef33b58c04566d515cf060642089b80f43ff993a36abf224db15a00b1f7a0a76ad18f6d8836b8b3f0fc5f3830b08072f551dc5fecf17f77ec8dad345c7feebd4550b6453031ce7bd179866da60e980bb9f0b1668532692ae188bb6879f37de0d7dcc5144eb018bbd6a267dc9b158a9269f1c83e119a8f099c30a99edfd4a3ca38d9048a5fb9719cb0da5ef029e831040e260cc536fcf3b261c6268d7a5dfb2762e1330327da2aecf5f48bacd28df6ea67f4c8899c2c2939547070a0b3c06094e87d94841de26950113050cd41ef36e09e85a5f0b7c0eb8cc52436f9a2d9752774a1215593b446282b5ecae7b5eb8e45331b3396ff02decdfa6516103780dc0efa0b0f24d1c04a6123918193558c6f9ba6c9ca5f7c2992a27a337fb7193a1be7d37cf18d1312f6354e03111dffa9a15009893d46e04df824ee05c6b011ed199ac4e563af06cd3cebe937bb86f7aea44fba71dbbb3816e2f28ba5390c32f8376e2d8f8f6699b04e4ac37785d65e21a52a4d4158b41e364160f766ce0c802e8232ace6c5552364635dc62d90591195b06009a6c9d86e94cb95d97a7ab846ab9a04f83b9fe06d3e9db63a4bdf6d5dcd82b2f1a6548eb0ffec8abfaba5fce9a5f0d39891a201dd7d5b5774adf143529ed09b23ce9c901d04d3e48020cab250b5d0de8ceeb66a120cd0d4356ce3ea38d59fa652ac60cc0263a3d21247eec7168b5dfa34eb62d3169c39c45bdf6c11d02a2b99e44a38e6981a8d12440ce5def43092c0e537f424189f5537bc6b2ce0dcd38b11690bd7d4998fe679ce8fd9e1362c99453aace21088710f767b9973107aed179062aaca3725c85ef300ec46777cd259c243f5ca9b009fecf8c192ac7b14cd792cae262332d158d29cfb1d7737cdffc90ffcddafe0ead6e9315c569ffebc00a077838845b147a2dc50eb7462edd8ff52f6b0bfebfa0a3c0f9d0e5fe821c6dfb754f5a9a22513d6687f3ef5b35860daad5a8eb7baa33ec8bbc32c26884111733759c460d0b49b6c87f8881e4bd017f56809742858fb498fa084bfde11f39b81badf0599b4ed6705be319a5bf95e4834fd028785b087a62d5098c69df3c1540c75c5eefc74fe003fd58d34cc7f1fd130be131779ce55c8026a9e4294da27cd2a1030468b28abe4032c1a5bf364ceb952faffb38b606a89dfb711d899778ecdc471cc616e43e213673f09db92aaaa9056fb119b71ce9cf86f2a818481809b03eb6e008c0d5446c59242672b4149c5b62fb54da89fb43744c78e219f0d3b77e06e4fd39839248f2ee2fbd7362307b0ecd59a655de6384c7f838ec587a7fa5a9c7c4e0c678c7b2411ec2f9b42476b1a1afe4de4e484103bd561212cf7c3cc127a0505fa9be66bd9d97f28b229fb32086f93a5e3408ab5f319feca4e2519775c66c85571af3e01c68f152479ff3997579f3585b21ba479212b05bcf97d7ac9572bcbe6eea8dc14608793b70f436c9adc6644df0d5791fe517c5c974a3b260fd2bda2cbe2e1b309eb599ce6eabe0c472adc9e099c1ffdf53ab8b4d761863edd9da459f84dac135863ce2cb1c959c7608d192abea5b7c442597e4d2c9ae947a47ad5bcf0df5bd45866b686826e8e6a5f74cb95ac533880316de61bc9fed25721269841411f587f734dc62b415cb179ef71a379b48a807b4aac013d587771a933819d0365fd0f271e5d14de778eb2cd1e762cf53f910231277bc3fde4f02defc380e8942afb0b07b7e193a8fd1d496ffb9912431501d84ac756b0c3b08409c9f9ef08100b296c853cfd95f54eb6c28807505bb8be06319b390b029fb232d9e75a5e3656897b5bbdca8cf89484faef31d32a32d92575a5628053294256e436cbaeab509e9ea46d274699be0454206886f627c725ac400b39af537bfa20a5c9d000e2ab967d0f35d4ea5c4077e572bd809c26d1a15b80d35d9aff901ec478674c88b5998ff0ada22cc2429953da6166686776aa93cf07592a2a21692125c50368912c9fdcc6f2df602c1670133525f13625db789341f4abb9eafc2c7d3c1af52807bd35144615f8c35d5d14404734091c54c3d79915016fdec317cc3e60fb0f326822629af6cb9f5678ed0e0665103176b479af9ee1d29bbf3ffba922ca9d2b84e6db086117ad3bfcd9f638ab9be7a7107ae5c4a375680fa4d2bc8023bbd55dbce2a3cdaac52692acc04af8323af57a4502755c843b6d006cf89fee19c07bbebb434d3037d4c15b113b5ad351f580df69d41d3ff682de2f231a609889527a39e0e35def1d965c7e0c003f689f731fdf6027a018314998b4aff51562fc7063ec87d7c8f1b88f045de7be2192482e08e50229effa799d473fa07d3f9f309d1687763a24197676b1bb621683bd500ce4d24a936ecaa979e6efd59be4ca4875bc64cfd4ca3571e0ed07031db929de4796e156b521e7f3bafed93a1cdbab40da307cad96297fc77971d5c7457a9d4fadee666ea733b80fee2e4cd1c45e08d8043767539d4dbbf0bd3a520e0d0527eb7e7b161af58a54bdec972885a9db3491220c91db9118e92aa085902e01e79af7b26da37c330f990d3cc758ba288348dc2268e43ec5ea09867f4675b74d8c48ec360aeaba5456914539ac0c2368eb1d84d5fe49d958dc2e4b1fee646b20af56e63f140240303f16ae23c7f7b71703de1bd14c073abe5ef6a1aca5567e3ceea9e6f75f94bfb109a1172d3566dd3be764e82d65d493ae798d981e0a6e863a3c43f351069c7e9d024ac5b781eb6ab5917edef5d5b4d22c3f0447b8aebad932dc5bb0ba333d00f6a56b90f1b34ba203aed8ee57afe2690b4fb0d8a15c2a9c7db52f86a24199e32341bd4fcfd29bffe9ae9bc214b057f89b46107e01ce8f79e734723efdf66e8d2f15e0fce569f43d0b3a83630574a31ed72b9f9bd2e45a86e3bd1b7bc62c28e69f69b1ff2b0f635445ce26faf3c1a00b9e96aa8fd9db1ed0a73689aded54de99b87489ea591a06b4b2f7ae138a618fd1955db8a8f274a8e619a097b86c7d0fc3bf1d80a4b32f923728a1d311bc9dd1e5e4fee9dbd4b573b7020f3519104c9109af1ae2320fac114f1d2b076a62b61ad80de14175d88847a2370e385a690ccea8b1ed7010774d2e88e6d2c5966d8be67fdb8d20e021368eeba91e30f1fed536db7244704ee06c5eb0ef94d8cc14a7ba15c9e75efb954f9b09c496f706f73db20c5905c94d1fe0fda8dc1ce6cd9c29b8d4083cb834018b35b283a6fea8a7e6faeb6665f08965f1a32b5db27de7fb61c642576586c1eaec6c11f63518cbf9e6cb593fbf1e5999ac1f77628efef5ac43d9bf101e302a7001d7a8cee21dd3e95a30473f56a599be25ade22fb00f8ee454a87ce773654624ab2913bad9e22d8ea07c845bea1aa4401bf951c14d32bac4fd58a1dba8472029445d931ec299857f5f1a05f47d0b26a32c6f9c3b4aec5881f58b57f4b8a1627885645fdb66173e744d706f2e9e267a21e5acaf8e55920e58b2e62785df3990fedcb94f383db905ab70cc17bff13b44a819eea6ee8839023e050ff43a69e61df337ea9b9e997ad02ba8676b1f6aff8b30fb2dd6f1287f246bcbd16086e79ee7588d6637e4201038d338a756d652026fb6ecf6eb440185f47d5bb8272a6bada8381fcbd507b963381a3862bce8c3f67874368f70c0ce23707bdc50d6a9f098bfb6c3489d2d9114a0374527fd01cd6e00fd0c01c0566aa531844152cb8e4fd5a7674e9e9517a1ee0d8553e2d891c7704ab018e9354e3e3de7a232bf54b0fa85ed899ba1dc0fdcc9f9e6ede3f70a8da773308c98a36144bd8d471f6bb99b9f0ce402c2fd17d2c5f8d9ac608e43cc7da3fa7d7f3a17568a79a2a0031e05cde64619eec9cbc650260dfe8c6876a5450584ecbf9113e1f00c4f75a37c55b015a8cd10fa1cd0f0b624a14a4fd00ebf0f1c9bf6ca048608c6a603dd874681744d60dfd814789e65e42a82e8313a74824ef6f7163587164d0aaab67dc3bab883e3f73323a544d8a00975f383c9b4362b6c9ab98e1496cfba6ae08577dfd44d2ba446be8bc80f405306b7d51aad2de8a9dc723eb7a0b46c24b9145fb0c9f0192f3ab9026f8b32be846755124c177e2cb8307ed83a980b79fc479488e96f4b953a3d18895b371d2adf6a660a37ce6d8cfe14ce541e99a812036a0dd2753cc0acf3163bb81774083567867f18a6e77766aa104138cb0aafa52cc7e254dc2e55dc75b731c4c7a6a793f5f039b708421c887af0e78b8634e81b8c1383e0d2fce509524d8c26ad311d2531a48a91ced5be824a2d21cf703c69b80c3ba27c233fda270277b17e147c2e63616edee5782af7b5af1273db00bdc0282dba7739db9a1762fa628786f6f2efd64f8bc3b061ee8fd177741f3bdc3d93eac72843773188d9a8719553b8acc5fe316e54e4b0b11f47406c96a3d1ef87f5e6317b85db40e67e8d6f917b5a974507eb5045ca4c32e97146f0823c29b85c821e0286ec4990a8d0a65623de26105a64e080b5aacca222d1087efd3391fd91c68deaae8ed785141f4335efac8e0ae2e24640957fae09bb63beadc1853bb52475c88cd12cb09ce73942f5fae6e89f19a844bcceb6efd930112e6e3d277c74e08fdce1332e20593a0171387575d51422d6c42a68dd7cc7c0e0dd13dff5ff563ac9c187766117d9ee41771de93905d13339818bd1337c2883ce1df4801babfc94b645b9ece880857c49fd8296598dcaca88867853c876c54411bca700e674468806d1c75bda3953de433fe720422f35f90d84a0ebca8dc7029798b88d314982b04c06f81558c238f7a0bb8dcd757ce667255bcb5bfe6d0c7b5b01dc658891901e5c54f5fbfb4810eda1f429e8b660cffc342227777a6f1344dffc12f1dc6c3ba72a1f4a603b21ac776ffdacc4bcbe590dd11994a283a884b3fdc920a72e632fbe4e07ff54f42f78fad493f867c3f5c7e8e3fa2fe1e479c71b13f27374d32181aa92a58b51579f5e25c54c6b87c683b4910b6f47483e66efc6c6008507c9946ebd34d92f383a52b9876dd4f34f980d745f6f3147068e08ff5055eb875f21050f80d866486d2510ab7e5f43d52544e252a327ac36f2a3f0c3a204c3ee6a21e0c2b2e6149afc339b73aa4d630a332693a564ad387551eda90f11608d6c08efb36b9fb11abf4367edcda12a9a10690c46c5b114ae75d6fad0ec2fac50ce01a97639a68f52154394da0824", 0x1000, 0x8d) recvmmsg(r2, &(0x7f0000007900)=[{{&(0x7f0000000100)=@sco={0x1f, @none}, 0x80, &(0x7f0000000280)=[{&(0x7f00000017c0)=""/215, 0xd7}, {&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000000480)=""/146, 0x92}, {&(0x7f0000000180)=""/3, 0x3}], 0x4, &(0x7f00000036c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f00000018c0), 0x80, &(0x7f0000001a40)=[{&(0x7f0000001940)=""/236, 0xec}], 0x1, &(0x7f0000001a80)=""/43, 0x2b}, 0x2}, {{&(0x7f0000001ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001b40)=""/187, 0xbb}, {&(0x7f0000001c00)=""/8, 0x8}, {&(0x7f0000001c40)=""/72, 0x48}, {&(0x7f0000001cc0)=""/74, 0x4a}, {&(0x7f0000001e00)=""/199, 0xc7}, {&(0x7f0000001f00)=""/204, 0xcc}, {&(0x7f0000002000)=""/241, 0xf1}, {&(0x7f0000002100)=""/69, 0x45}, {&(0x7f0000002180)=""/174, 0xae}], 0x9}, 0x100}, {{&(0x7f0000002300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000057c0)=[{&(0x7f0000002380)=""/220, 0xdc}, {&(0x7f0000002480)=""/109, 0x6d}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f0000002500)=""/236, 0xec}, {&(0x7f00000056c0)=""/221, 0xdd}], 0x5, &(0x7f0000005840)=""/4096, 0x1000}, 0x81}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000006840)=""/4096, 0x1000}], 0x1, &(0x7f0000007840)=""/171, 0xab}, 0x80000001}], 0x5, 0x1, &(0x7f0000007a40)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) accept4$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001580)=ANY=[@ANYBLOB="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"/576]) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000440)={0x101, 0x3, 0x2, 0x8000, 0x3}) sendmsg$nl_generic(r4, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x1018, 0x11, 0x20, 0x70bd2b, 0x25dfdbff, {0xb}, [@nested={0x1004, 0x20, 0x0, 0x1, [@generic="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"]}]}, 0x1018}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 00:14:22 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfl']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:14:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) [ 1375.533917] FAT-fs (loop2): bogus number of reserved sectors [ 1375.535749] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1375.598980] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:14:36 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 25) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:14:36 executing program 3: read(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1451c2, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1c8) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000400", @ANYRES16=r5, @ANYBLOB="010100000000000000002b0000000a0001007770616e300000000c0005000000000000000000"], 0x2c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, 0x0, 0x48011) pwrite64(r2, &(0x7f0000000480)="af", 0x1, 0x1000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x8, 0x0, 0x8000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) write$P9_RAUTH(r0, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x1, 0x3, 0x6}}, 0x14) 00:14:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2e, r1, 0x1, 0x800000, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x18}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008015) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1419ff07", @ANYRES16=r1, @ANYBLOB="040028bd7000fcdbdf250e00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x1914}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) fcntl$getownex(r9, 0x10, &(0x7f0000001ec0)={0x0, 0x0}) perf_event_open(&(0x7f0000001e40)={0x1, 0x80, 0x8c, 0x4, 0x8, 0x3f, 0x0, 0xd797, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xef, 0x4, @perf_bp={&(0x7f0000001e00)}, 0x14100, 0x1, 0x401, 0x4, 0x2, 0x6, 0x1, 0x0, 0x1, 0x0, 0x2}, r10, 0x5, 0xffffffffffffffff, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r9) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000001d40)={0xa8, r11, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0xffff}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b27d04f51089388b066765e07aa576ac19924edca26bf118"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4995f51d2a081e15c05b60c551a84526571a4f56390f2e74"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004010}, 0x40000080) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r8, 0x20, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 00:14:36 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfl']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:14:36 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x3}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:14:36 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x94203, 0x0) 00:14:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:14:36 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfl']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) [ 1389.729296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1389.743284] FAULT_INJECTION: forcing a failure. [ 1389.743284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1389.746141] CPU: 1 PID: 12122 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1389.747579] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1389.749301] Call Trace: [ 1389.749852] dump_stack+0x107/0x167 [ 1389.750608] should_fail.cold+0x5/0xa [ 1389.751386] _copy_from_user+0x2e/0x1b0 [ 1389.752227] __copy_msghdr_from_user+0x91/0x4b0 [ 1389.753185] ? __ia32_sys_shutdown+0x80/0x80 [ 1389.754083] ? udp_v6_push_pending_frames+0x360/0x360 [ 1389.755142] ? inet6_sendmsg+0xbd/0x140 [ 1389.755960] ? inet6_compat_ioctl+0x320/0x320 [ 1389.756886] ? __sock_sendmsg+0x55/0x190 [ 1389.757721] sendmsg_copy_msghdr+0xa1/0x160 [ 1389.758593] ? do_recvmmsg+0x6d0/0x6d0 [ 1389.759393] ? __lock_acquire+0x1657/0x5b00 [ 1389.760285] ___sys_sendmsg+0xc6/0x170 [ 1389.761096] ? sendmsg_copy_msghdr+0x160/0x160 [ 1389.762019] ? vmacache_find+0x55/0x2a0 [ 1389.762857] ? lock_acquire+0x197/0x470 [ 1389.763660] ? find_held_lock+0x2c/0x110 [ 1389.764515] ? __might_fault+0xd3/0x180 [ 1389.765329] ? lock_downgrade+0x6d0/0x6d0 [ 1389.766175] ? asm_exc_page_fault+0x1e/0x30 [ 1389.767078] __sys_sendmmsg+0x195/0x470 [ 1389.767900] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1389.768790] ? lock_downgrade+0x6d0/0x6d0 [ 1389.769654] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1389.770649] ? wait_for_completion_io+0x270/0x270 [ 1389.771635] ? rcu_read_lock_any_held+0x75/0xa0 [ 1389.772597] ? vfs_write+0x354/0xa70 [ 1389.773372] ? fput_many+0x2f/0x1a0 [ 1389.774115] ? ksys_write+0x1a9/0x260 [ 1389.774890] ? __ia32_sys_read+0xb0/0xb0 [ 1389.775723] __x64_sys_sendmmsg+0x99/0x100 [ 1389.776595] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1389.777644] do_syscall_64+0x33/0x40 [ 1389.778404] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1389.779447] RIP: 0033:0x7fa76daafb19 [ 1389.780220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1389.783969] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1389.785522] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1389.786967] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1389.788424] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1389.789882] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1389.791322] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:14:36 executing program 0: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x234900, 0x4}, 0x18) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0x2, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r1, &(0x7f0000000200), 0xf) 00:14:36 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 26) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:14:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRES16], 0x6) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mkdirat(r0, 0x0, 0x28) getpgrp(0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYBLOB, @ANYRESHEX, @ANYBLOB=',noextend,version=9p2000.L,f']) dup2(r0, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) [ 1389.966910] FAULT_INJECTION: forcing a failure. [ 1389.966910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1389.969184] CPU: 0 PID: 12149 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1389.969937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1389.970828] Call Trace: [ 1389.971118] dump_stack+0x107/0x167 [ 1389.971519] should_fail.cold+0x5/0xa [ 1389.971934] _copy_from_user+0x2e/0x1b0 [ 1389.972376] __copy_msghdr_from_user+0x91/0x4b0 [ 1389.972874] ? __ia32_sys_shutdown+0x80/0x80 [ 1389.973348] ? udp_v6_push_pending_frames+0x360/0x360 [ 1389.973905] ? inet6_sendmsg+0xbd/0x140 [ 1389.974331] ? inet6_compat_ioctl+0x320/0x320 [ 1389.974812] ? __sock_sendmsg+0x55/0x190 [ 1389.975251] sendmsg_copy_msghdr+0xa1/0x160 [ 1389.975715] ? do_recvmmsg+0x6d0/0x6d0 [ 1389.976143] ? __lock_acquire+0x1657/0x5b00 [ 1389.976617] ___sys_sendmsg+0xc6/0x170 [ 1389.977034] ? sendmsg_copy_msghdr+0x160/0x160 [ 1389.977521] ? vmacache_find+0x55/0x2a0 [ 1389.977947] ? lock_acquire+0x197/0x470 [ 1389.978376] ? find_held_lock+0x2c/0x110 [ 1389.978819] ? __might_fault+0xd3/0x180 [ 1389.979235] ? lock_downgrade+0x6d0/0x6d0 [ 1389.979683] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1389.980289] __sys_sendmmsg+0x195/0x470 [ 1389.980724] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1389.981195] ? lock_downgrade+0x6d0/0x6d0 [ 1389.981657] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1389.982173] ? wait_for_completion_io+0x270/0x270 [ 1389.982717] ? rcu_read_lock_any_held+0x75/0xa0 [ 1389.983210] ? vfs_write+0x354/0xa70 [ 1389.983621] ? fput_many+0x2f/0x1a0 [ 1389.984016] ? ksys_write+0x1a9/0x260 [ 1389.984446] ? __ia32_sys_read+0xb0/0xb0 [ 1389.984898] __x64_sys_sendmmsg+0x99/0x100 [ 1389.985355] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1389.985904] do_syscall_64+0x33/0x40 [ 1389.986315] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1389.986884] RIP: 0033:0x7fa76daafb19 [ 1389.987277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1389.989296] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1389.990123] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1389.990891] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1389.991653] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1389.992424] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1389.993174] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 [ 1390.032110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1396.067541] Bluetooth: hci2: command 0x0406 tx timeout 00:14:51 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 27) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:14:51 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) 00:14:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:14:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:14:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:14:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_setup(0x5c49, &(0x7f0000000240)={0x0, 0x1697, 0x23, 0x0, 0x27b}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0x2, 0x5, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="4c4ac5535b41197f579ff5284c7c62c3c216c1809f0efb59a1c16612c9404c88627341c5bc65da58b2", 0x29) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) io_uring_enter(r5, 0x277a, 0xfc50, 0x3, &(0x7f0000000140)={[0x1000]}, 0x8) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f000005eb40)={{0x0, 0x6912, 0x4, 0x3, 0x400, 0x100, 0x2, 0x9, 0x0, 0x0, 0x3, 0x6, 0x0, 0xff, 0x9}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x4084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0xdc, 0x400, 0x9, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:14:51 executing program 3: read(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1451c2, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1c8) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000400", @ANYRES16=r5, @ANYBLOB="010100000000000000002b0000000a0001007770616e300000000c0005000000000000000000"], 0x2c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, 0x0, 0x48011) pwrite64(r2, &(0x7f0000000480)="af", 0x1, 0x1000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x8, 0x0, 0x8000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) write$P9_RAUTH(r0, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x1, 0x3, 0x6}}, 0x14) 00:14:51 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x3}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 1404.079760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.096099] FAULT_INJECTION: forcing a failure. [ 1404.096099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1404.098878] CPU: 1 PID: 12169 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1404.100294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1404.102012] Call Trace: [ 1404.102543] dump_stack+0x107/0x167 [ 1404.103293] should_fail.cold+0x5/0xa [ 1404.104109] _copy_from_user+0x2e/0x1b0 [ 1404.104961] __copy_msghdr_from_user+0x91/0x4b0 [ 1404.105902] ? __ia32_sys_shutdown+0x80/0x80 [ 1404.106823] ? udp_v6_push_pending_frames+0x360/0x360 [ 1404.107879] ? inet6_sendmsg+0xbd/0x140 [ 1404.108719] ? inet6_compat_ioctl+0x320/0x320 [ 1404.109608] ? __sock_sendmsg+0x55/0x190 [ 1404.110440] sendmsg_copy_msghdr+0xa1/0x160 [ 1404.111330] ? do_recvmmsg+0x6d0/0x6d0 [ 1404.112132] ? __lock_acquire+0x1657/0x5b00 [ 1404.113065] ___sys_sendmsg+0xc6/0x170 [ 1404.113878] ? sendmsg_copy_msghdr+0x160/0x160 [ 1404.114821] ? vmacache_find+0x55/0x2a0 [ 1404.115653] ? lock_acquire+0x197/0x470 [ 1404.116453] ? find_held_lock+0x2c/0x110 [ 1404.117298] ? __might_fault+0xd3/0x180 [ 1404.118107] ? lock_downgrade+0x6d0/0x6d0 [ 1404.118977] ? asm_exc_page_fault+0x1e/0x30 [ 1404.119874] __sys_sendmmsg+0x195/0x470 [ 1404.120719] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1404.121619] ? lock_downgrade+0x6d0/0x6d0 [ 1404.122483] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1404.123498] ? wait_for_completion_io+0x270/0x270 [ 1404.124499] ? rcu_read_lock_any_held+0x75/0xa0 [ 1404.125448] ? vfs_write+0x354/0xa70 [ 1404.126210] ? fput_many+0x2f/0x1a0 [ 1404.126949] ? ksys_write+0x1a9/0x260 [ 1404.127715] ? __ia32_sys_read+0xb0/0xb0 [ 1404.128559] __x64_sys_sendmmsg+0x99/0x100 [ 1404.129436] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1404.130490] do_syscall_64+0x33/0x40 [ 1404.131262] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1404.132277] RIP: 0033:0x7fa76daafb19 [ 1404.133047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1404.136816] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1404.138384] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1404.139874] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1404.141377] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1404.142840] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1404.144300] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:14:51 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x6ac282, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) r1 = inotify_init() setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x0, 0x800, 0x54c2}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r2, 0x0, 0x120) dup2(r2, 0xffffffffffffffff) 00:14:51 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 28) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:14:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:14:51 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@unlock_all, 0xb) 00:14:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:14:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x911802, 0x140) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x80800, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0xff, 0x9, 0xc0, 0x80, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000180)}, 0x8, 0xffffffffffffff46, 0xcde9, 0x8, 0x7d89, 0xbe, 0x6, 0x0, 0x4e6, 0x0, 0x93}, 0xffffffffffffffff, 0x6, r2, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) 00:14:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x543, 0x0) close(r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_io_uring_setup(0x66ab, &(0x7f0000000000)={0x0, 0xb517, 0x4, 0x2, 0x35e, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="3d0000000000000000000000000000697526037dff099e60bca8a11cb1a943151770cf04b73b15cbe4c0c2f26f412d0017275b9bdf3528f3e5b8431b00fe59c94b7450d352cd591b532d60e79bc965165f", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) [ 1404.394294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.433014] FAULT_INJECTION: forcing a failure. [ 1404.433014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1404.435930] CPU: 0 PID: 12191 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1404.437424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1404.439199] Call Trace: [ 1404.439763] dump_stack+0x107/0x167 [ 1404.440540] should_fail.cold+0x5/0xa [ 1404.441370] _copy_from_user+0x2e/0x1b0 [ 1404.442239] __copy_msghdr_from_user+0x91/0x4b0 [ 1404.443250] ? __ia32_sys_shutdown+0x80/0x80 [ 1404.444175] ? udp_v6_push_pending_frames+0x360/0x360 [ 1404.445266] ? inet6_sendmsg+0xbd/0x140 [ 1404.446089] ? inet6_compat_ioctl+0x320/0x320 [ 1404.446992] ? __sock_sendmsg+0x55/0x190 [ 1404.447822] sendmsg_copy_msghdr+0xa1/0x160 [ 1404.448702] ? do_recvmmsg+0x6d0/0x6d0 [ 1404.449496] ? __lock_acquire+0x1657/0x5b00 [ 1404.450379] ___sys_sendmsg+0xc6/0x170 [ 1404.451167] ? sendmsg_copy_msghdr+0x160/0x160 [ 1404.452087] ? vmacache_find+0x55/0x2a0 [ 1404.452916] ? lock_acquire+0x197/0x470 [ 1404.453740] ? find_held_lock+0x2c/0x110 [ 1404.454575] ? __might_fault+0xd3/0x180 [ 1404.455385] ? lock_downgrade+0x6d0/0x6d0 [ 1404.456218] ? asm_exc_page_fault+0x1e/0x30 [ 1404.457138] __sys_sendmmsg+0x195/0x470 [ 1404.457955] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1404.458840] ? lock_downgrade+0x6d0/0x6d0 [ 1404.459697] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1404.460691] ? wait_for_completion_io+0x270/0x270 [ 1404.461672] ? rcu_read_lock_any_held+0x75/0xa0 [ 1404.462620] ? vfs_write+0x354/0xa70 [ 1404.463402] ? fput_many+0x2f/0x1a0 [ 1404.464151] ? ksys_write+0x1a9/0x260 [ 1404.464949] ? __ia32_sys_read+0xb0/0xb0 [ 1404.465796] __x64_sys_sendmmsg+0x99/0x100 [ 1404.466704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1404.467770] do_syscall_64+0x33/0x40 [ 1404.468542] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1404.469591] RIP: 0033:0x7fa76daafb19 [ 1404.470356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1404.474135] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1404.475672] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1404.477149] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1404.478585] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1404.480019] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1404.481467] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:14:51 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x6}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:14:51 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r1, 0x0, 0x120) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0xfb, 0x5a, 0x7, 0x7, "37c12eb2f0f0942de9078ec8faf353dd", "5225bd06d545497fe7cde0ca3c79c181180a2f2592add6591efe0779eea7e3832d772219ef7c64779de64ccf9aae0e2e9e3c8b5a4e3b34a0fe820f8e25bc386eb21b72cded"}, 0x5a, 0x1) [ 1404.594935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:14:51 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x5) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x1}, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f0000000080)={0x2000010}) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000140)={0x8}) openat(r6, &(0x7f0000000000)='./file0\x00', 0x94000, 0x80) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:14:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:14:51 executing program 0: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x46, 0x3, 0x0, 0xffff, 0x1, "b03dcf", 0x401, [0x80000001, 0x8, 0x7ff, 0x8, 0x1f]}}) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) 00:14:51 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 29) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) [ 1404.755659] syz-executor.1 (12194) used greatest stack depth: 23480 bytes left [ 1404.785003] FAULT_INJECTION: forcing a failure. [ 1404.785003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1404.787852] CPU: 0 PID: 12318 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1404.789303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1404.790995] Call Trace: [ 1404.791540] dump_stack+0x107/0x167 [ 1404.792285] should_fail.cold+0x5/0xa [ 1404.793089] _copy_from_user+0x2e/0x1b0 [ 1404.793901] __copy_msghdr_from_user+0x91/0x4b0 [ 1404.794866] ? __ia32_sys_shutdown+0x80/0x80 [ 1404.795769] ? udp_v6_push_pending_frames+0x360/0x360 [ 1404.796836] ? inet6_sendmsg+0xbd/0x140 [ 1404.797648] ? inet6_compat_ioctl+0x320/0x320 [ 1404.798562] ? __sock_sendmsg+0x55/0x190 [ 1404.799391] sendmsg_copy_msghdr+0xa1/0x160 [ 1404.800273] ? do_recvmmsg+0x6d0/0x6d0 [ 1404.801089] ? __lock_acquire+0x1657/0x5b00 [ 1404.801984] ___sys_sendmsg+0xc6/0x170 [ 1404.802781] ? sendmsg_copy_msghdr+0x160/0x160 [ 1404.803710] ? vmacache_find+0x55/0x2a0 [ 1404.804535] ? lock_acquire+0x197/0x470 [ 1404.805353] ? find_held_lock+0x2c/0x110 [ 1404.806184] ? __might_fault+0xd3/0x180 [ 1404.806998] ? lock_downgrade+0x6d0/0x6d0 [ 1404.807838] ? asm_exc_page_fault+0x1e/0x30 [ 1404.808745] __sys_sendmmsg+0x195/0x470 [ 1404.809555] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1404.810425] ? lock_downgrade+0x6d0/0x6d0 [ 1404.811282] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1404.812256] ? wait_for_completion_io+0x270/0x270 [ 1404.813248] ? rcu_read_lock_any_held+0x75/0xa0 [ 1404.814203] ? vfs_write+0x354/0xa70 [ 1404.814974] ? fput_many+0x2f/0x1a0 [ 1404.815717] ? ksys_write+0x1a9/0x260 [ 1404.816498] ? __ia32_sys_read+0xb0/0xb0 [ 1404.817341] __x64_sys_sendmmsg+0x99/0x100 [ 1404.818208] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1404.819264] do_syscall_64+0x33/0x40 [ 1404.820022] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1404.821092] RIP: 0033:0x7fa76daafb19 [ 1404.821847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1404.825587] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1404.827118] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1404.828565] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1404.829997] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1404.831431] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1404.832884] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 [ 1404.923132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:15:06 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000200), 0xf) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/365], 0x15) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f00000003c0)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000002480)={0x8b8, 0x60000000000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) fcntl$setpipe(r0, 0x407, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f0000001440)=""/4103, 0x1007}], 0x2, &(0x7f0000000480)}, 0x10100) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000100)=0xfffffffe, 0x4) write$binfmt_aout(r1, 0x0, 0x120) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r2, 0x0, 0x120) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000013c0)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r3, &(0x7f0000001400)=0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x1f}}, './file0\x00'}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000000)={0x8, 'veth0_to_team\x00', {'veth1_macvtap\x00'}, 0xadc}) 00:15:06 executing program 1: modify_ldt$read_default(0x2, &(0x7f00000017c0)=""/180, 0xb4) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) r3 = syz_open_dev$hidraw(&(0x7f00000015c0), 0x80000000, 0x1a0080) preadv(r3, &(0x7f0000001780)=[{&(0x7f0000001640)=""/201, 0xc9}, {&(0x7f0000001740)=""/27, 0x1b}], 0x2, 0x4, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000018c0)=ANY=[@ANYBLOB="0100000001000000182000007d4653810623a3bec002f36f90ae1d406880be62b211d8b16a5947a54851d3d447b3d15f34c25f81b7ec534a52b76d0d9a4da7842aa750263a047cef0f653f780684829abd280ec22b9fb1a3c1c6e92bcd15640ea7b7e532c7a6e33ffc3d66a5cd6b8af7487ea8c57413d5bf9b3dfa6573075c0d17076d41585a9d0aaff7c2b8", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) execveat(r4, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000001500)=[&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000380)='fd/4\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='mounts\x00', &(0x7f0000000440)='fd/4\x00', &(0x7f0000000480)='mounts\x00', &(0x7f00000014c0)='tmpfs\x00'], &(0x7f0000001580), 0x1000) pread64(r4, &(0x7f0000000180)=""/9, 0x9, 0xb8) openat(0xffffffffffffffff, &(0x7f0000001880)='./file0/../file0\x00', 0x28200, 0x10c) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 00:15:06 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:15:06 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 00:15:06 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') read(r0, 0x0, 0x25) pread64(r1, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000007d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0x4, 0x2}, {0x7fff, 0xa0d}], r3}, 0x18, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{}]}) fallocate(0xffffffffffffffff, 0x5, 0x4, 0x8) fallocate(0xffffffffffffffff, 0x5, 0x4, 0x8) accept4(0xffffffffffffffff, &(0x7f0000007a80)=@hci, &(0x7f0000007b00)=0x80, 0x0) fallocate(0xffffffffffffffff, 0x5, 0x0, 0x8) setresuid(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0x1) 00:15:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:15:06 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 30) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:15:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) [ 1419.831814] FAULT_INJECTION: forcing a failure. [ 1419.831814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1419.834737] CPU: 0 PID: 12335 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1419.836152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1419.837837] Call Trace: [ 1419.838384] dump_stack+0x107/0x167 [ 1419.839119] should_fail.cold+0x5/0xa [ 1419.839906] _copy_from_user+0x2e/0x1b0 [ 1419.840721] __copy_msghdr_from_user+0x91/0x4b0 [ 1419.841671] ? __ia32_sys_shutdown+0x80/0x80 [ 1419.842549] ? udp_v6_push_pending_frames+0x360/0x360 [ 1419.843597] ? inet6_sendmsg+0xbd/0x140 [ 1419.844391] ? inet6_compat_ioctl+0x320/0x320 [ 1419.845324] ? __sock_sendmsg+0x55/0x190 [ 1419.846146] sendmsg_copy_msghdr+0xa1/0x160 [ 1419.847029] ? do_recvmmsg+0x6d0/0x6d0 [ 1419.847811] ? __lock_acquire+0x1657/0x5b00 [ 1419.848714] ___sys_sendmsg+0xc6/0x170 [ 1419.849497] ? sendmsg_copy_msghdr+0x160/0x160 [ 1419.850425] ? vmacache_find+0x55/0x2a0 [ 1419.851238] ? lock_acquire+0x197/0x470 [ 1419.852045] ? find_held_lock+0x2c/0x110 [ 1419.852875] ? __might_fault+0xd3/0x180 [ 1419.853684] ? lock_downgrade+0x6d0/0x6d0 [ 1419.854510] ? asm_exc_page_fault+0x1e/0x30 [ 1419.855406] __sys_sendmmsg+0x195/0x470 [ 1419.856205] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1419.857098] ? lock_downgrade+0x6d0/0x6d0 [ 1419.857956] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1419.858943] ? wait_for_completion_io+0x270/0x270 [ 1419.859929] ? rcu_read_lock_any_held+0x75/0xa0 [ 1419.860886] ? vfs_write+0x354/0xa70 [ 1419.861674] ? fput_many+0x2f/0x1a0 [ 1419.862413] ? ksys_write+0x1a9/0x260 [ 1419.863179] ? __ia32_sys_read+0xb0/0xb0 [ 1419.864008] __x64_sys_sendmmsg+0x99/0x100 [ 1419.864882] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1419.865934] do_syscall_64+0x33/0x40 [ 1419.866689] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1419.867718] RIP: 0033:0x7fa76daafb19 [ 1419.868473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1419.872369] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1419.873946] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1419.875401] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1419.876864] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1419.878321] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1419.879776] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:15:06 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0xc101, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) [ 1419.965087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1424.797474] Bluetooth: hci4: command 0x0409 tx timeout [ 1426.845481] Bluetooth: hci4: command 0x041b tx timeout [ 1428.894449] Bluetooth: hci4: command 0x040f tx timeout [ 1429.465312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.467118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.470245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1429.529916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.531612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.534757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1429.678187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.982686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.941488] Bluetooth: hci4: command 0x0419 tx timeout 00:15:31 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(0x0, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:15:31 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:15:31 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 00:15:31 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000000900)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284b5cadcd57000f7ace1542ffcd84ec8e4bdf43b293e910438a3e0f267cfa2aa37227e255ac9d60653416908104427bb9f6192e717d14a2b0a0992d43a78de3590317fd93e0ce99c38543f7dd4d5808dcec0eaecf9acecbdea719d8e0233839b197ff2bdeb44891a7bb39a8ade756218f744c025f3e4f2d41cc612fe28ea14a6bf19a6d4c6c2c851ac649ebc4e8da98ea296b357f16a3d6294b7254c47e0c2307a0ef22b2bebdfa9e767cd93045513af4d2ee9e930b56e4f36ed44f8cd667c6c6db8ccf71cc50f6b8648bf549fa4f9acd4b715f439c74487de01eddf1d", 0x13e, 0x1}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f00000004c0)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x100}], 0x0, &(0x7f00000003c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x4}}, './file1\x00'}) execveat(r4, &(0x7f0000000180)='./file1\x00', &(0x7f0000000380)=[&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='$^\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00'], &(0x7f0000000400)=[&(0x7f00000003c0)='\x00'], 0x1000) r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000000c0)={0x1f, 0x200, 0x40, 0x6, 0x5}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r0, &(0x7f0000000440)={0x30000002}) 00:15:31 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 31) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:15:31 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') read(r0, 0x0, 0x25) pread64(r1, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000007d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0x4, 0x2}, {0x7fff, 0xa0d}], r3}, 0x18, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{}]}) fallocate(0xffffffffffffffff, 0x5, 0x4, 0x8) fallocate(0xffffffffffffffff, 0x5, 0x4, 0x8) accept4(0xffffffffffffffff, &(0x7f0000007a80)=@hci, &(0x7f0000007b00)=0x80, 0x0) fallocate(0xffffffffffffffff, 0x5, 0x0, 0x8) setresuid(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0x1) 00:15:31 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) [ 1444.481221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.488115] FAULT_INJECTION: forcing a failure. [ 1444.488115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1444.489530] CPU: 1 PID: 12932 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1444.490294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1444.491166] Call Trace: [ 1444.491464] dump_stack+0x107/0x167 [ 1444.491882] should_fail.cold+0x5/0xa [ 1444.492322] _copy_from_user+0x2e/0x1b0 [ 1444.492768] __copy_msghdr_from_user+0x91/0x4b0 [ 1444.493306] ? __ia32_sys_shutdown+0x80/0x80 [ 1444.493814] ? udp_v6_push_pending_frames+0x360/0x360 [ 1444.494377] ? inet6_sendmsg+0xbd/0x140 [ 1444.494796] ? inet6_compat_ioctl+0x320/0x320 [ 1444.495289] ? __sock_sendmsg+0x55/0x190 [ 1444.495764] sendmsg_copy_msghdr+0xa1/0x160 [ 1444.496254] ? do_recvmmsg+0x6d0/0x6d0 [ 1444.496672] ? __lock_acquire+0x1657/0x5b00 [ 1444.497171] ___sys_sendmsg+0xc6/0x170 [ 1444.497620] ? sendmsg_copy_msghdr+0x160/0x160 [ 1444.498161] ? vmacache_find+0x55/0x2a0 [ 1444.498633] ? lock_acquire+0x197/0x470 [ 1444.499112] ? find_held_lock+0x2c/0x110 [ 1444.499590] ? __might_fault+0xd3/0x180 [ 1444.500072] ? lock_downgrade+0x6d0/0x6d0 [ 1444.500577] ? asm_exc_page_fault+0x1e/0x30 [ 1444.501120] __sys_sendmmsg+0x195/0x470 [ 1444.501597] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1444.502096] ? lock_downgrade+0x6d0/0x6d0 [ 1444.502608] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1444.503176] ? wait_for_completion_io+0x270/0x270 [ 1444.503751] ? rcu_read_lock_any_held+0x75/0xa0 [ 1444.504301] ? vfs_write+0x354/0xa70 [ 1444.504746] ? fput_many+0x2f/0x1a0 [ 1444.505194] ? ksys_write+0x1a9/0x260 [ 1444.505649] ? __ia32_sys_read+0xb0/0xb0 [ 1444.506131] __x64_sys_sendmmsg+0x99/0x100 [ 1444.506636] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1444.507246] do_syscall_64+0x33/0x40 00:15:31 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) recvmsg$unix(r1, &(0x7f00000012c0)={&(0x7f0000000040), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/32, 0x20}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000140)=""/72, 0x48}], 0x3, &(0x7f0000001240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x10000) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001300), 0x608901, 0x0) [ 1444.507766] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1444.508462] RIP: 0033:0x7fa76daafb19 [ 1444.508907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.511124] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1444.512049] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1444.512919] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1444.513826] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.514590] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1444.515440] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:15:31 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) 00:15:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) 00:15:31 executing program 3: ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x7, 0xcd, 0x8, 0xc, 0x0, 0x0, 0x88040, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x0, 0x80200000, 0x6, 0x2, 0x7, 0x3, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffffffd}, 0x0, 0x10, r0, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c63616368657461673d162c64656275673d3078305330303030303030303030303030342c6d6d61702c6163636573733d616e792c64666c747569643dec6d7e2a3870e4537af48748f1327eecaae053efea0bb17b22c12c34f3cdc01620bf9585c2958ee7ed7f114d12854a60f3ce64f93839c2e93c443a0bd56fbec3807da4352b8e194c660a90f142b7af600ef02f5b6de03652bdcedd8ce1d682a79c0ce97b11aa7f6bf5d38fcdb7d2a163ddae2e979b36e1a22e84906955169c2733cf39f105432d1bf860cd50f85ae67f7b53631a1a095232e4ec", @ANYRESHEX=0xee00, @ANYBLOB="2c7375626a5f726f6c653d2dc32a2c7569643e", @ANYRESDEC=0xee01, @ANYBLOB=',smackfsfloor=,euid<', @ANYRESDEC=0x0, @ANYBLOB=',measure,func=POLICY_CHECK,\x00']) flock(0xffffffffffffffff, 0xa) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffe, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x404c008) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400040, 0x90) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x1f, 0x7, &(0x7f0000000980)=[{&(0x7f0000000300)="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", 0xff, 0xce}, {&(0x7f0000000400)="63cb9bb52d2d40762772bc1d2d1372e938cfbe84d53ccb844d4de528365438ba8a57d428ff38614430805b2ec42b1f338e44b5e898933d48bc7925f2cfbea258f150612ccd94e600ecf21192", 0x4c, 0x3}, {&(0x7f0000000640)="5db413a1547b535a497a1eeab23f835d8a3dda9d4337b98f2eefc0e17aae31eafaf9d86ca58cd1e76ad8b21b0b520380e1923597587798a764dc020c9d8c6eaf12ed62442ad1d4fd507e11353b38a78dfb5da0130914b911152c96880789685f1334658c7a8024dcb07321b3ebb1e284102501392ac29c33bc764a65943214ae51f6dc3b4067c87250c1875f71049c0b91655f894794bced321a804fb0ac4bb5983b5c15aef4f3777a5b8e0de1225876cd3109f883bc3dc24b356212f0fedb810a6167b323182fd81000fa6830c07087bcdf80e1d641726459e148001098a25f6ed6cdb4423f4c06e9577fdc3886167fe35cce9e", 0xf4, 0xf5}, {&(0x7f0000000740)="d3def2ffee6094", 0x7, 0x8}, {&(0x7f0000000780)="4a7546b2caa0f3c002e44fdc6e2ac8fae6ce076127e1bf75bbb27c63f83ce25231ab257e194b4dd4db58dbc753a6e6c572744e45e1c7887521f3df3643a56e36fb6eec5627f663d7b9e8fb5980cfd61315be16cce991e30f9e3f3933ea296bc0a105c21118cab7d210f68cb7b50c5393ca7b7c018fc2f4b18ac3939ed8453637327aa27b6c63be849d92", 0x8a, 0x3}, {&(0x7f0000000840)="1d0fb72ef6c45ee6e05571ed9672f9b5da2c401f08664417b0d2b793a5f061984ba49ec344294f015794410ddd03f80d315da5674bda3c14a24dd6ea4b295d70911f96109b24917fad1764d07f00c70526ff9593c91373bdb92ac9998e1a5190d2e667404b3be60feaa9a1371c18477209d26f931f2d2fd6bb33a07b2758fb7383450436a0ddbe444f313505a47e00b47026dc89261921b9ec32d891bd670185bff0db66b1df8b1c98d200b92264891d63c5af71ae5b6e760ee6f1c9338467462f0ce1b3db09042b343c55a3fbedc0c655427456266c8152d5", 0xd9, 0x2}, {&(0x7f0000000940)="4f37ad0c11a323789cc774228dbf6f9e1d7efde222f88c09015b3b02b54743d4bfe8518e5ac503af6e661e97f9bce24c11c59db38c97d868fa9a", 0x3a}], 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="6e6f61754cb85f64615f616cec6f632c7365636c6162656c2c666f777c6bc027abd26e65723d", @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imasig,mask=MAY_APPEND,func=POLICY_CHECK,\x00']) dup(r3) ioctl$VT_DISALLOCATE(r2, 0x5608) r4 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 00:15:31 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 32) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) [ 1444.666834] FAULT_INJECTION: forcing a failure. [ 1444.666834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1444.668189] CPU: 1 PID: 12953 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1444.668912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1444.669820] Call Trace: [ 1444.670106] dump_stack+0x107/0x167 [ 1444.670514] should_fail.cold+0x5/0xa [ 1444.670926] _copy_from_user+0x2e/0x1b0 [ 1444.671373] __copy_msghdr_from_user+0x91/0x4b0 [ 1444.671866] ? __ia32_sys_shutdown+0x80/0x80 [ 1444.672355] ? udp_v6_push_pending_frames+0x360/0x360 [ 1444.672908] ? inet6_sendmsg+0xbd/0x140 [ 1444.673367] ? inet6_compat_ioctl+0x320/0x320 [ 1444.673848] ? __sock_sendmsg+0x55/0x190 [ 1444.674298] sendmsg_copy_msghdr+0xa1/0x160 [ 1444.674752] ? do_recvmmsg+0x6d0/0x6d0 [ 1444.675187] ? __lock_acquire+0x1657/0x5b00 [ 1444.675660] ___sys_sendmsg+0xc6/0x170 [ 1444.676090] ? sendmsg_copy_msghdr+0x160/0x160 [ 1444.676593] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1444.677262] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1444.677749] ? trace_hardirqs_on+0x5b/0x180 [ 1444.678224] ? lock_acquire+0x197/0x470 [ 1444.678654] ? find_held_lock+0x2c/0x110 [ 1444.679108] ? __might_fault+0xd3/0x180 [ 1444.679534] ? lock_downgrade+0x6d0/0x6d0 [ 1444.679994] ? io_schedule_timeout+0x140/0x140 [ 1444.680487] __sys_sendmmsg+0x195/0x470 [ 1444.680942] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1444.681437] ? lock_downgrade+0x6d0/0x6d0 [ 1444.681917] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1444.682455] ? wait_for_completion_io+0x270/0x270 [ 1444.682994] ? rcu_read_lock_any_held+0x75/0xa0 [ 1444.683514] ? vfs_write+0x354/0xa70 [ 1444.683920] ? fput_many+0x2f/0x1a0 [ 1444.684324] ? ksys_write+0x1a9/0x260 [ 1444.684747] ? __ia32_sys_read+0xb0/0xb0 [ 1444.685221] __x64_sys_sendmmsg+0x99/0x100 [ 1444.685686] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1444.686254] do_syscall_64+0x33/0x40 [ 1444.686666] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1444.687220] RIP: 0033:0x7fa76daafb19 [ 1444.687629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.689665] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1444.690502] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1444.691289] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1444.692085] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.692882] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1444.693698] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:15:31 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80002, 0x1c0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e74}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x5, 0x0, @fd_index=0x4, 0x3ffc00, &(0x7f00000000c0)="c6cff9068d5328804ffe8818af617691e4", 0x11, 0x2}, 0x1) 00:15:31 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000040), 0xf) fcntl$setpipe(r0, 0x407, 0x0) 00:15:31 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:15:31 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(0x0, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:15:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x8, 0x1, 0x3f, 0x9, 0x0, 0x9, 0x24, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0), 0x1}, 0x8120, 0x4, 0x800, 0x8, 0x0, 0x16, 0x7fff, 0x0, 0x399}, r0, 0xf, 0xffffffffffffffff, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f0000000000)=0x80, 0x6) creat(&(0x7f0000000080)='./file0\x00', 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_mount_image$msdos(&(0x7f00000013c0), &(0x7f0000001400)='./file1\x00', 0x0, 0x0, &(0x7f0000001900), 0x50, &(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYRESDEC, @ANYBLOB="d2cc4c7927c428e32bd6fbffc51f173a91a59a045d062e7a1999a402000000001cc8c7cccdf691519db5ed7ff0bc8009bb02809c8476c1916fffff12d2280c2cf4140900c19af659e94f5fdf085f96ec86000000000000000000"]) [ 1444.819434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:15:31 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 33) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:15:31 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 1444.899066] FAULT_INJECTION: forcing a failure. [ 1444.899066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1444.900526] CPU: 1 PID: 12973 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1444.901313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1444.902219] Call Trace: [ 1444.902506] dump_stack+0x107/0x167 [ 1444.902897] should_fail.cold+0x5/0xa [ 1444.903303] _copy_from_user+0x2e/0x1b0 [ 1444.903734] __copy_msghdr_from_user+0x91/0x4b0 [ 1444.904225] ? __ia32_sys_shutdown+0x80/0x80 [ 1444.904697] ? udp_v6_push_pending_frames+0x360/0x360 [ 1444.905263] ? inet6_sendmsg+0xbd/0x140 [ 1444.905690] ? inet6_compat_ioctl+0x320/0x320 [ 1444.906159] ? __sock_sendmsg+0x55/0x190 00:15:31 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) fcntl$dupfd(r4, 0x0, r4) write$vga_arbiter(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="41ffffffffbf59ffff746172676574205043493a313048ac3d24779492cf4f048758746deb6a8f19850596d05f2528f13ea5b38f2f6b71b7f99b95e58fae9321ff9e4f3bcb9bc9c98d61edf5287e9213b3ce6adcdbebfdf07c04ddb256bd2c"], 0x16) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff, 0x7, 0x80000}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$mouse(&(0x7f00000001c0), 0x7, 0x28001) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) fcntl$dupfd(r5, 0x0, r0) r7 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x8, 0x2, 0xe5, 0x0, 0x0, 0x8, 0x4, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x100006, 0x4, @perf_config_ext={0x9, 0x7f}, 0x86c137f57dfba78, 0x5, 0x8, 0x9, 0x0, 0x3, 0x1, 0x0, 0x109, 0x0, 0x53972917}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x802, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r8, 0x0, 0x120) r9 = dup2(r7, r0) openat(r9, &(0x7f0000000100)='./file0\x00', 0x480a00, 0x1cc) 00:15:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x8, 0x1, 0x3f, 0x9, 0x0, 0x9, 0x24, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0), 0x1}, 0x8120, 0x4, 0x800, 0x8, 0x0, 0x16, 0x7fff, 0x0, 0x399}, r0, 0xf, 0xffffffffffffffff, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f0000000000)=0x80, 0x6) creat(&(0x7f0000000080)='./file0\x00', 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_mount_image$msdos(&(0x7f00000013c0), &(0x7f0000001400)='./file1\x00', 0x0, 0x0, &(0x7f0000001900), 0x50, &(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYRESDEC, @ANYBLOB="d2cc4c7927c428e32bd6fbffc51f173a91a59a045d062e7a1999a402000000001cc8c7cccdf691519db5ed7ff0bc8009bb02809c8476c1916fffff12d2280c2cf4140900c19af659e94f5fdf085f96ec86000000000000000000"]) 00:15:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$nl_netfilter(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000010c0)={0x14, 0x9, 0x2, 0x101}, 0x14}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r2, 0x0, 0x120) fsetxattr$security_capability(r2, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x1000000, [{0x10000, 0x7}]}, 0xc, 0x1) [ 1444.906594] sendmsg_copy_msghdr+0xa1/0x160 [ 1444.907258] ? do_recvmmsg+0x6d0/0x6d0 [ 1444.907700] ? __lock_acquire+0x1657/0x5b00 [ 1444.908162] ___sys_sendmsg+0xc6/0x170 [ 1444.908581] ? sendmsg_copy_msghdr+0x160/0x160 [ 1444.909081] ? vmacache_find+0x55/0x2a0 [ 1444.909510] ? lock_acquire+0x197/0x470 [ 1444.909949] ? find_held_lock+0x2c/0x110 [ 1444.910384] ? __might_fault+0xd3/0x180 [ 1444.910830] ? lock_downgrade+0x6d0/0x6d0 [ 1444.911268] ? asm_exc_page_fault+0x1e/0x30 [ 1444.911752] __sys_sendmmsg+0x195/0x470 [ 1444.912175] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1444.912655] ? lock_downgrade+0x6d0/0x6d0 [ 1444.913108] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1444.913641] ? wait_for_completion_io+0x270/0x270 [ 1444.914154] ? rcu_read_lock_any_held+0x75/0xa0 [ 1444.914673] ? vfs_write+0x354/0xa70 [ 1444.915071] ? fput_many+0x2f/0x1a0 [ 1444.915474] ? ksys_write+0x1a9/0x260 [ 1444.915880] ? __ia32_sys_read+0xb0/0xb0 [ 1444.916344] __x64_sys_sendmmsg+0x99/0x100 [ 1444.916797] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1444.917395] do_syscall_64+0x33/0x40 [ 1444.917790] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1444.918357] RIP: 0033:0x7fa76daafb19 [ 1444.918754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.920788] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1444.921606] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1444.922379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.923370] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1444.923378] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.923384] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1444.923390] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:15:32 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x80, 0x648c82}, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) 00:15:32 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) clone3(&(0x7f0000000140)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}]}}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x2e}}}}, [@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x2400c850}, 0x20000001) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 00:15:32 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 34) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:15:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) [ 1445.032214] FAULT_INJECTION: forcing a failure. [ 1445.032214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1445.033808] CPU: 1 PID: 12990 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1445.034543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.035412] Call Trace: [ 1445.035700] dump_stack+0x107/0x167 [ 1445.036091] should_fail.cold+0x5/0xa [ 1445.036506] _copy_from_user+0x2e/0x1b0 [ 1445.036933] __copy_msghdr_from_user+0x91/0x4b0 [ 1445.037436] ? __ia32_sys_shutdown+0x80/0x80 [ 1445.037906] ? udp_v6_push_pending_frames+0x360/0x360 [ 1445.038454] ? inet6_sendmsg+0xbd/0x140 [ 1445.038875] ? inet6_compat_ioctl+0x320/0x320 [ 1445.039346] ? __sock_sendmsg+0x55/0x190 [ 1445.039780] sendmsg_copy_msghdr+0xa1/0x160 [ 1445.040234] ? do_recvmmsg+0x6d0/0x6d0 [ 1445.040650] ? __lock_acquire+0x1657/0x5b00 [ 1445.041135] ___sys_sendmsg+0xc6/0x170 [ 1445.041547] ? sendmsg_copy_msghdr+0x160/0x160 [ 1445.042050] ? vmacache_find+0x55/0x2a0 [ 1445.042474] ? lock_acquire+0x197/0x470 [ 1445.042909] ? find_held_lock+0x2c/0x110 [ 1445.043339] ? __might_fault+0xd3/0x180 [ 1445.043778] ? lock_downgrade+0x6d0/0x6d0 [ 1445.044215] ? asm_exc_page_fault+0x1e/0x30 [ 1445.044696] __sys_sendmmsg+0x195/0x470 [ 1445.045126] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1445.045598] ? lock_downgrade+0x6d0/0x6d0 [ 1445.046043] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1445.046575] ? wait_for_completion_io+0x270/0x270 [ 1445.047080] ? rcu_read_lock_any_held+0x75/0xa0 [ 1445.047596] ? vfs_write+0x354/0xa70 [ 1445.047990] ? fput_many+0x2f/0x1a0 [ 1445.048378] ? ksys_write+0x1a9/0x260 [ 1445.048779] ? __ia32_sys_read+0xb0/0xb0 [ 1445.049232] __x64_sys_sendmmsg+0x99/0x100 [ 1445.049676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1445.050238] do_syscall_64+0x33/0x40 [ 1445.050631] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1445.051190] RIP: 0033:0x7fa76daafb19 [ 1445.051585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.053598] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1445.054400] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1445.055179] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1445.055958] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.056733] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1445.057496] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 [ 1445.267731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:15:46 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:15:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(0x0, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) [ 1459.354148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:15:46 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x3, &(0x7f0000001800)=0x3, 0x4) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/197, 0xc5}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/12, 0xc}, {&(0x7f0000000280)=""/18, 0x12}], 0x5, 0x4, 0x3) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) dup2(r0, r1) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x9201, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000051a40)={0x945, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3f, "128b4ed71253d5"}) r4 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {r6}, {}, {}, {}, {r8}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000000100)={r8, 0x1000}) writev(r1, &(0x7f0000001780)=[{&(0x7f0000001100)="a89dc3e66bd4bdaca7de2c5c21edd5e08e2e84579b0ae4b629a3f191bd94143dd8f4693f463456b572d750eda15ec1568bfe0d3649f0658c5c95164c9f54319b83a1c5d556dad993534bcb0468e5a8a06dacea92158faef2a510e3a64f5dd3b1878ec2d1c8dc3acd16207316bbfaaa90674dd66233be3db9146360d5d7dc8fe5ac62fbe9088f4e3151229018766066e05c1ab0174efe6baa44b5a9418f6f37561366a8cbae6c45b2dae83b3402d7e502174d541d3d7f927096a99cd40f20d90e2966da01d2", 0xc5}, {&(0x7f0000001200)="72bea2c9ec52f65db328ff6ae2db2ed328e3d834d59a18ee0b0f6b905f7b3f151d37705d6cf92e9f1bafbf72177c2b38ae9e", 0x32}, {&(0x7f0000001500)="e430a2d2814865815478901acc814a0e34b991330ebc5ae028b709be6c7be0e9b9c53ddb28950b71c804e5f56b2f45e42b86d3d5ada4d1460dd8a3ff9f00ffd6e7c13b1b7fc70bba7159f3cda2a20daac66aae17ee61ed802964a7078176f37a629381b3d7b1827c15de26a417c511767586f664333006c6e5036d7f407ca988112f145c90b8c3d0b2e8752af8b6daca5ebde2d4976dad652a517a6545ef512f971ffb651fb03efe3b7e7df8573bf4a1833d9c4f4c9f6ab4ebb17fbeb058faf7835589384264fa13848a2361d8604b341e100869964611539033b6be549425", 0xdf}, {&(0x7f0000001240)="dfd8c5d27fd6d8afbda1e04d2e4a71c24cbd450070d48c963875ea8769b85278a9f27ecada7b69ae0f2510ff8b9977ffb08b0b2028d66d982a5130ddca3b40b3a53bfbf6aac8edfb596d9b1ba97884efdcdf0aad26fe4c9604a947c685500b", 0x5f}, {&(0x7f00000012c0)="2537618de09ef86d4a5ceca370b8e7487e4bd44076cd3d23895511c38d8b12", 0x1f}, {&(0x7f0000001600)="cdc23ed60b8634de98e1504322af382f4d8c60cc08c996a882a58ab35febcd73763a1d9a7644d02e1d084a67ba136ac602b3353e450b4045552ffcf940839a6cc4883ebea4c630495737d7378da850b1c5cead2e238ddbfd8a527534c42a121e6846efb8c7a032c614f5a113bdd70ea598b9503e9e86c2ae3828c303bd6b657f4ea1a2c185d84f6c0a85d768bcfa88dc217d4183f4734a21dc9d82c7d6b36610afdc193f7021b11f8a419d5490f7479c07590dd944b8c1e40eab73852916660df38daf9f0ae8f4f9c91c319e67cd3b65d986f6c0", 0xd4}, {&(0x7f0000001700)="d0f0449172fbec4a9a0da13d61b33c1aa5327f7eaac41ede974fddb8194d9634793cd1d3138b6990e3cd29b906e70aa5d364467c1ebf210834b4f6794794780115c751a68d", 0x45}], 0x7) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052900)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x81, "d5e2b485aca084"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052a40)={0x1932, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r8}], 0x0, "4abc261bc0e3cc"}) 00:15:46 executing program 2: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="ce0093a339686c35fe05589e89d157b88691e92af2e4fe4bf8d4612c4d40b91abbb2099b7784f904f20325b4d603351c39bdd8340900000000000000750a8468a92e3e51dd7e39a148c27d2d3195b3fc9b5f4be0a5221cc352601a4e9b5bfa5e86187af61df95cbcef894964e172a9feb2a7e759ea5e37e3e2b809f82338149c3b1a19b576849fa5b3abd6f75746956de7c1c5241ba511433755e8f6df3cd5a11a90be42c8fad4fc3a1de0ff4f6665e166f0c80adb431271b2d38df2bbef5752a800f7130792c469497dac0df367c0", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ff0f0000000000002e2f66696c653000"]) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x40000, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x4000080}, 0x48015) 00:15:46 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/notes', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) sendfile(r2, r0, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pidfd_getfd(r3, r4, 0x0) 00:15:46 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x40, 0x10}, {0x40, 0x9}, 0x1, 0x2, 0x8}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) 00:15:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:15:46 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 35) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:15:46 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) [ 1459.415136] FAULT_INJECTION: forcing a failure. [ 1459.415136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1459.417982] CPU: 0 PID: 13018 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1459.419401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1459.421104] Call Trace: [ 1459.421666] dump_stack+0x107/0x167 [ 1459.422415] should_fail.cold+0x5/0xa [ 1459.423292] _copy_from_user+0x2e/0x1b0 [ 1459.424138] __copy_msghdr_from_user+0x91/0x4b0 [ 1459.425093] ? __ia32_sys_shutdown+0x80/0x80 [ 1459.426003] ? udp_v6_push_pending_frames+0x360/0x360 [ 1459.427076] ? inet6_sendmsg+0xbd/0x140 [ 1459.427887] ? inet6_compat_ioctl+0x320/0x320 [ 1459.428801] ? __sock_sendmsg+0x55/0x190 [ 1459.429663] sendmsg_copy_msghdr+0xa1/0x160 [ 1459.430548] ? do_recvmmsg+0x6d0/0x6d0 [ 1459.431355] ? __lock_acquire+0x1657/0x5b00 [ 1459.432242] ___sys_sendmsg+0xc6/0x170 [ 1459.433068] ? sendmsg_copy_msghdr+0x160/0x160 [ 1459.434008] ? vmacache_find+0x55/0x2a0 [ 1459.434832] ? lock_acquire+0x197/0x470 [ 1459.435635] ? find_held_lock+0x2c/0x110 [ 1459.436468] ? __might_fault+0xd3/0x180 [ 1459.437318] ? lock_downgrade+0x6d0/0x6d0 [ 1459.438159] ? asm_exc_page_fault+0x1e/0x30 [ 1459.439054] __sys_sendmmsg+0x195/0x470 [ 1459.439876] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1459.440752] ? lock_downgrade+0x6d0/0x6d0 [ 1459.441624] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1459.442608] ? wait_for_completion_io+0x270/0x270 [ 1459.443588] ? rcu_read_lock_any_held+0x75/0xa0 [ 1459.444526] ? vfs_write+0x354/0xa70 [ 1459.445298] ? fput_many+0x2f/0x1a0 [ 1459.446035] ? ksys_write+0x1a9/0x260 [ 1459.446806] ? __ia32_sys_read+0xb0/0xb0 [ 1459.447633] __x64_sys_sendmmsg+0x99/0x100 [ 1459.448489] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1459.449541] do_syscall_64+0x33/0x40 [ 1459.450297] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1459.451330] RIP: 0033:0x7fa76daafb19 [ 1459.452082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1459.455809] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1459.457364] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1459.458809] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1459.460246] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1459.461700] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1459.463137] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:15:46 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) [ 1459.666928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:16:00 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:16:00 executing program 0: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040004}, 0x44010) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r1, &(0x7f0000000200), 0xf) 00:16:00 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = epoll_create1(0x0) fallocate(r6, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) fsetxattr$security_selinux(r2, &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 00:16:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x6, 0xf9, 0x4, 0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x10, 0x3, 0x0, 0x9, 0x1, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) futex(0x0, 0x2, 0x2, 0x0, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000440)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r1, 0x9e46, 0x0) ioctl$TIOCCBRK(r0, 0x5428) openat$vcs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000540)=0x1) openat$hwrng(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) r2 = fork() ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000200)={{0x2, 0x7}, 0x100, './file0\x00'}) ptrace(0x10, r2) ptrace(0x4207, r2) 00:16:00 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FIOCLEX(r0, 0x5451) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') readv(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) 00:16:00 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:16:00 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:16:00 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 36) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) [ 1473.088548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:16:00 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x81]}, 0x8, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b000000000200002802000002", 0x61, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f0000000280)=ANY=[@ANYBLOB="004eacec960ffb88f61a07b8c3f3c1aa396415dd0a7ffd1ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x90900, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xa563, 0x0, "0489fdc1843fc745ea52a5fff7962e807836db"}) fork() ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x80) r4 = creat(&(0x7f0000000540)='./file0\x00', 0x0) pwrite64(r4, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x3) write$binfmt_aout(r1, &(0x7f0000001e00)={{0x10b, 0x3f, 0x6, 0xcf, 0x301, 0x1, 0x79}, "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"}, 0x1020) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x1, 0x8000, 0x9, 0x0, 0x11}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) [ 1473.142001] FAULT_INJECTION: forcing a failure. [ 1473.142001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1473.144885] CPU: 1 PID: 13053 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1473.146297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1473.147991] Call Trace: [ 1473.148529] dump_stack+0x107/0x167 [ 1473.149285] should_fail.cold+0x5/0xa [ 1473.150088] _copy_from_user+0x2e/0x1b0 [ 1473.150902] __copy_msghdr_from_user+0x91/0x4b0 [ 1473.151839] ? __ia32_sys_shutdown+0x80/0x80 [ 1473.152747] ? udp_v6_push_pending_frames+0x360/0x360 [ 1473.153802] ? inet6_sendmsg+0xbd/0x140 [ 1473.154607] ? inet6_compat_ioctl+0x320/0x320 [ 1473.155517] ? __sock_sendmsg+0x55/0x190 [ 1473.156341] sendmsg_copy_msghdr+0xa1/0x160 [ 1473.157218] ? do_recvmmsg+0x6d0/0x6d0 [ 1473.158043] ? __lock_acquire+0x1657/0x5b00 [ 1473.158079] ___sys_sendmsg+0xc6/0x170 [ 1473.158100] ? sendmsg_copy_msghdr+0x160/0x160 [ 1473.158115] ? vmacache_find+0x55/0x2a0 [ 1473.158137] ? __lockdep_reset_lock+0x180/0x180 [ 1473.158164] ? lock_acquire+0x197/0x470 [ 1473.158181] ? find_held_lock+0x2c/0x110 [ 1473.158205] ? __might_fault+0xd3/0x180 [ 1473.158224] ? lock_downgrade+0x6d0/0x6d0 [ 1473.158241] ? asm_exc_page_fault+0x1e/0x30 [ 1473.158280] __sys_sendmmsg+0x195/0x470 [ 1473.158306] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1473.158324] ? lock_downgrade+0x6d0/0x6d0 [ 1473.158363] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1473.158386] ? wait_for_completion_io+0x270/0x270 [ 1473.158408] ? rcu_read_lock_any_held+0x75/0xa0 [ 1473.158425] ? vfs_write+0x354/0xa70 [ 1473.158447] ? fput_many+0x2f/0x1a0 [ 1473.158467] ? ksys_write+0x1a9/0x260 [ 1473.158486] ? __ia32_sys_read+0xb0/0xb0 [ 1473.158513] __x64_sys_sendmmsg+0x99/0x100 [ 1473.158531] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1473.158550] do_syscall_64+0x33/0x40 [ 1473.158571] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1473.158583] RIP: 0033:0x7fa76daafb19 [ 1473.158602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.158612] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1473.158633] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1473.158644] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1473.158654] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.158664] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1473.158675] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:16:00 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:16:00 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1396c2, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000a40)='devices.deny\x00', 0x2, 0x0) recvmsg$unix(r0, &(0x7f00000008c0)={&(0x7f0000000100), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000000440)=""/158, 0x9e}, {&(0x7f0000000500)=""/212, 0xd4}, {&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000700)=""/102, 0x66}, {&(0x7f00000001c0)=""/19, 0x13}], 0x8, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}, 0x40012142) creat(&(0x7f0000000a80)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid}, {@posixacl}, {@msize}, {@access_user}], [{@dont_appraise}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@permit_directio}, {@uid_lt={'uid<', r1}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@measure}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@seclabel}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@permit_directio}]}}) 00:16:00 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup(r0) pidfd_send_signal(r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x2000000}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000300100000d4f4655fd4f4655fd4f4655f000000000000000501", 0x1d, 0x4100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="61f59600ff6753405c5e4331ef5b74fd3066ff6c8b761a312c"]) 00:16:00 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 37) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) [ 1473.412844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:16:00 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r1, 0x0, 0x120) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) dup2(r1, r2) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r3, 0x0, 0x120) fgetxattr(r3, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00', &(0x7f0000000100)=""/166, 0xa6) 00:16:00 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) [ 1473.446205] FAULT_INJECTION: forcing a failure. [ 1473.446205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1473.449037] CPU: 1 PID: 13079 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1473.450464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1473.452141] Call Trace: [ 1473.452682] dump_stack+0x107/0x167 [ 1473.453429] should_fail.cold+0x5/0xa [ 1473.454207] _copy_from_user+0x2e/0x1b0 [ 1473.455026] __copy_msghdr_from_user+0x91/0x4b0 [ 1473.455969] ? __ia32_sys_shutdown+0x80/0x80 [ 1473.456861] ? udp_v6_push_pending_frames+0x360/0x360 [ 1473.457924] ? inet6_sendmsg+0xbd/0x140 [ 1473.458758] ? inet6_compat_ioctl+0x320/0x320 [ 1473.459677] ? __sock_sendmsg+0x55/0x190 [ 1473.460517] sendmsg_copy_msghdr+0xa1/0x160 [ 1473.461431] ? do_recvmmsg+0x6d0/0x6d0 [ 1473.462243] ? __lock_acquire+0x1657/0x5b00 [ 1473.463133] ___sys_sendmsg+0xc6/0x170 [ 1473.463943] ? sendmsg_copy_msghdr+0x160/0x160 [ 1473.464873] ? vmacache_find+0x55/0x2a0 [ 1473.465697] ? __lockdep_reset_lock+0x180/0x180 [ 1473.466667] ? lock_acquire+0x197/0x470 [ 1473.467488] ? find_held_lock+0x2c/0x110 [ 1473.468334] ? __might_fault+0xd3/0x180 [ 1473.469165] ? lock_downgrade+0x6d0/0x6d0 [ 1473.470036] ? asm_exc_page_fault+0x1e/0x30 [ 1473.470952] __sys_sendmmsg+0x195/0x470 [ 1473.471783] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1473.472677] ? lock_downgrade+0x6d0/0x6d0 [ 1473.473570] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1473.474555] ? wait_for_completion_io+0x270/0x270 [ 1473.475544] ? rcu_read_lock_any_held+0x75/0xa0 [ 1473.476489] ? vfs_write+0x354/0xa70 [ 1473.477245] ? fput_many+0x2f/0x1a0 [ 1473.478007] ? ksys_write+0x1a9/0x260 [ 1473.478780] ? __ia32_sys_read+0xb0/0xb0 [ 1473.479613] __x64_sys_sendmmsg+0x99/0x100 [ 1473.480469] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1473.481519] do_syscall_64+0x33/0x40 [ 1473.482279] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1473.483340] RIP: 0033:0x7fa76daafb19 [ 1473.484117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.487927] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1473.489515] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1473.490986] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 00:16:00 executing program 0: ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0xe07d) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x3f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f00000000c0)) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xe100, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) [ 1473.492452] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.494051] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 00:16:00 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 1473.495527] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 [ 1473.560731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1473.877701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:16:15 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:16:15 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7461726765742050434960ea2f70aada2e8c3a62bf7b0070f2f5ed3f26dd5d6f515da8fc67f5160725722621d6bdfb5573d6b642e95df6048532d8b095bc53abf9443990e7462ad925793e543361c73097271cfc3db2b0cdd6ec30016acd8debf1eb6ea9b4281115980c2f930ee4178b517f969c2bc5d569659af6bf3cb762eb25d80391be98ee95059ae0e4a2b574cd1f1e8766e183a0315a601881e068e3005cb1464d5d0036dcd69358d47979aac49980c601"], 0x14) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) 00:16:15 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:16:15 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno=', @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:16:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x300b4e2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r4}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'wlan0\x00'}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x0, 0x8, 0x2, 0x8, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 00:16:15 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x6, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:16:15 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 38) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:16:15 executing program 2: mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x4, @thr={0x0, &(0x7f0000000140)="ee968433bcff5e13084c71a5779aad1f8a2c52eeffe263c729ccca4cab4c07d12cc1981a5c7d03a1fbea2f79f6361e369229db302043ce2a5447a671a5d5c2bf268e2704f01761ca985414b01e6b38f6ceea0e963c5ae3eb1f5836d51c423d11754d32d4861a2cebd3a8f567f3335e15c1c950b16aa9f923616a6b24afa6935f04befc25cc31ae0bea0d6e5e71cde511d937579e8999ee51b69aeab590"}}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x18) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80440, 0x29) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x8100, 0x0) syz_io_uring_setup(0x4bf1, &(0x7f0000000280)={0x0, 0x0, 0x4, 0xfffffcbf, 0x2f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mq_open(&(0x7f0000000380)='/dev/sr0\x00', 0x80, 0x38, &(0x7f00000003c0)={0x19, 0x7fff, 0x400, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r2, 0x0, 0x120) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r3, 0x0, 0x120) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000080)={r3}) mq_open(&(0x7f0000000200)='j*+\x00', 0x40, 0x4, &(0x7f0000000440)={0x8, 0x6, 0x7fff}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000000c0)={{0xff, @broadcast, 0x4e22, 0x2, 'nq\x00', 0x1d, 0x4a, 0x45}, {@local, 0x4e23, 0x1, 0x2, 0x0, 0x9}}, 0x44) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 1488.441960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1488.466051] FAULT_INJECTION: forcing a failure. [ 1488.466051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1488.468857] CPU: 1 PID: 13116 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1488.470293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1488.471986] Call Trace: [ 1488.472526] dump_stack+0x107/0x167 [ 1488.473277] should_fail.cold+0x5/0xa [ 1488.474068] _copy_from_user+0x2e/0x1b0 [ 1488.474878] __copy_msghdr_from_user+0x91/0x4b0 [ 1488.475823] ? __ia32_sys_shutdown+0x80/0x80 [ 1488.476719] ? udp_v6_push_pending_frames+0x360/0x360 [ 1488.477799] ? inet6_sendmsg+0xbd/0x140 [ 1488.478608] ? inet6_compat_ioctl+0x320/0x320 [ 1488.479537] ? __sock_sendmsg+0x55/0x190 [ 1488.480374] sendmsg_copy_msghdr+0xa1/0x160 [ 1488.481272] ? do_recvmmsg+0x6d0/0x6d0 [ 1488.482114] ? __lock_acquire+0x1657/0x5b00 [ 1488.483016] ___sys_sendmsg+0xc6/0x170 [ 1488.483835] ? sendmsg_copy_msghdr+0x160/0x160 [ 1488.484777] ? __lockdep_reset_lock+0x180/0x180 [ 1488.485741] ? lock_acquire+0x197/0x470 [ 1488.486563] ? find_held_lock+0x2c/0x110 [ 1488.487428] ? __might_fault+0xd3/0x180 [ 1488.488265] ? lock_downgrade+0x6d0/0x6d0 [ 1488.489144] ? io_schedule_timeout+0x140/0x140 [ 1488.490117] __sys_sendmmsg+0x195/0x470 [ 1488.490969] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1488.491847] ? lock_downgrade+0x6d0/0x6d0 [ 1488.492718] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1488.493714] ? wait_for_completion_io+0x270/0x270 [ 1488.494693] ? rcu_read_lock_any_held+0x75/0xa0 [ 1488.495673] ? vfs_write+0x354/0xa70 [ 1488.496449] ? fput_many+0x2f/0x1a0 [ 1488.497211] ? ksys_write+0x1a9/0x260 [ 1488.497995] ? __ia32_sys_read+0xb0/0xb0 [ 1488.498827] __x64_sys_sendmmsg+0x99/0x100 [ 1488.499704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1488.500781] do_syscall_64+0x33/0x40 [ 1488.501567] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1488.502601] RIP: 0033:0x7fa76daafb19 [ 1488.503359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1488.507151] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1488.508745] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1488.510193] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1488.511625] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1488.513110] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1488.514575] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:16:15 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r1, 0x0, 0x120) close(r1) 00:16:15 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:16:15 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) flock(r1, 0x2) r2 = io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1cf}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r4 = syz_io_uring_setup(0x623f, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x401}}, './file0\x00'}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x190}, 0x0, 0x80, 0x0, {0x0, r6}}, 0x9) r7 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) setsockopt$inet_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x181}, "038db6e8233c23d9", "b231e40393c68559be475c82199ac23c", "63d338fd", "5f2fdaeb8a6300bc"}, 0x28) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd, 0x3, 0x0, 0x6, 0x0, 0x0, {0x0, r6}}, 0xfffff3cd) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11684, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) dup3(r7, r0, 0x0) 00:16:15 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x0, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:16:15 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x200241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8900) write$vga_arbiter(r0, &(0x7f0000000100)=@other={'unlock', ' ', 'none'}, 0xc) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:16:15 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_capability(r0, &(0x7f0000000340), 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)='system_u:object_r:modules_object_t:s0\x00', 0x26, 0x7) fsetxattr$security_capability(r0, &(0x7f0000000180), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:16:15 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="cfeaffffffffffff00f4ff1c9477000007"], 0x14}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r0, 0x0, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8915, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) [ 1488.761264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1488.767898] device veth0_vlan entered promiscuous mode 00:16:15 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 39) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:16:15 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:16:15 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:16:15 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x15) write$vga_arbiter(r1, &(0x7f0000000040)=@target={'target ', {'PCI:', '14', ':', '11', ':', '19', '.', '3'}}, 0x16) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) [ 1488.857920] device veth0_vlan entered promiscuous mode [ 1488.862383] FAULT_INJECTION: forcing a failure. [ 1488.862383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1488.864929] CPU: 0 PID: 13151 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1488.866020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1488.867312] Call Trace: [ 1488.867718] dump_stack+0x107/0x167 [ 1488.868277] should_fail.cold+0x5/0xa [ 1488.868860] _copy_from_user+0x2e/0x1b0 [ 1488.869470] __copy_msghdr_from_user+0x91/0x4b0 [ 1488.870248] ? __ia32_sys_shutdown+0x80/0x80 [ 1488.870974] ? udp_v6_push_pending_frames+0x360/0x360 [ 1488.871791] ? inet6_sendmsg+0xbd/0x140 [ 1488.872417] ? inet6_compat_ioctl+0x320/0x320 [ 1488.873103] ? __sock_sendmsg+0x55/0x190 [ 1488.873732] sendmsg_copy_msghdr+0xa1/0x160 [ 1488.874403] ? do_recvmmsg+0x6d0/0x6d0 [ 1488.875012] ? __lock_acquire+0x1657/0x5b00 [ 1488.875685] ___sys_sendmsg+0xc6/0x170 [ 1488.876281] ? sendmsg_copy_msghdr+0x160/0x160 [ 1488.876975] ? vmacache_find+0x55/0x2a0 [ 1488.877605] ? __lockdep_reset_lock+0x180/0x180 [ 1488.878315] ? lock_acquire+0x197/0x470 [ 1488.878913] ? find_held_lock+0x2c/0x110 [ 1488.879544] ? __might_fault+0xd3/0x180 [ 1488.880159] ? lock_downgrade+0x6d0/0x6d0 [ 1488.880799] ? asm_exc_page_fault+0x1e/0x30 [ 1488.881483] __sys_sendmmsg+0x195/0x470 [ 1488.882100] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1488.882763] ? lock_downgrade+0x6d0/0x6d0 [ 1488.883401] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1488.884133] ? wait_for_completion_io+0x270/0x270 [ 1488.884866] ? rcu_read_lock_any_held+0x75/0xa0 [ 1488.885605] ? vfs_write+0x354/0xa70 [ 1488.886166] ? fput_many+0x2f/0x1a0 [ 1488.886725] ? ksys_write+0x1a9/0x260 [ 1488.887299] ? __ia32_sys_read+0xb0/0xb0 [ 1488.887916] __x64_sys_sendmmsg+0x99/0x100 [ 1488.888551] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1488.889339] do_syscall_64+0x33/0x40 [ 1488.889916] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1488.890692] RIP: 0033:0x7fa76daafb19 [ 1488.891274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1488.894115] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1488.895254] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1488.896333] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1488.897430] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1488.898548] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1488.899646] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:16:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x81, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="28138e98111b", 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x51, 0x0, 0x1f, 0x4, 0x0, 0x2, 0x40020, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x4, @perf_config_ext={0x1, 0x80}, 0x18200, 0x8, 0x10001, 0x9, 0x7, 0x1, 0x1000, 0x0, 0x1, 0x0, 0xee2}, r1, 0xd, 0xffffffffffffffff, 0x1) [ 1488.921739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1489.228790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:16:31 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:16:31 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:16:31 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 40) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) [ 1504.591360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1504.618369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:16:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x2c, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x2}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}]}, 0x54}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x52c, r1, 0x801, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x480, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x158, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x4}, {0x5, 0x9}, {0x6, 0x2}, {0x2, 0x3}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x1}, {0x3}, {0x3, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x52e9, 0x0, 0x2000, 0x4, 0x400, 0x7f, 0x360]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x3}, {0x1, 0x8}, {0x6, 0x8}, {0x3, 0xa}, {0x5, 0x2}, {0x7, 0x1}, {0x3, 0x8}, {0x1, 0x6}, {0x5, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x3, 0x6}, {0x1, 0xa}, {0x5}, {0x7, 0x7}, {0x0, 0x5}, {0x1, 0x1}, {0x3, 0x8}, {0x6, 0x6}, {0x6, 0x3}, {0x7, 0x7}, {0x6, 0x7}, {0x7, 0x3}, {0x0, 0x6}, {0x5, 0x8}, {0x2, 0x6}, {0x3, 0x6}, {0x7, 0x1}, {0x7, 0x5}, {0x5, 0x3}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x5}, {0x2, 0x4}, {0x3, 0x1}, {0x2, 0x5}, {0x5, 0x6}, {0x0, 0xa}, {0x6, 0x8}, {0x3, 0x6}, {0x2, 0x2}, {0x6, 0x4}, {0x2, 0x9}, {0x7, 0x5}, {0x1, 0x3}, {0x7, 0x7}, {0x2, 0x8}, {0x2, 0x1}, {0x1, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x48, 0x5, 0x1, 0x2, 0x0, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x5, 0xca5c, 0x5, 0x9, 0x8, 0x9]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x2, 0x0, 0x24, 0x18, 0x48, 0x48, 0x421931fc13ce012a, 0x1, 0x4d, 0x1, 0x1, 0x3, 0x36, 0x9, 0x1f, 0x4, 0x36, 0x1, 0x16, 0x3, 0x0, 0x6c, 0xb, 0x12, 0x5, 0x6c, 0x1b, 0x5, 0x36, 0x8, 0x4]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x16, 0x9, 0x65, 0x60, 0x1, 0x0, 0x61, 0xc, 0x48, 0x18, 0x3, 0x3, 0x1, 0x36, 0x12, 0xc, 0x9, 0x4, 0x30, 0x60, 0x60, 0x1b, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff00, 0x870f, 0x1, 0x9, 0x7ff, 0x9, 0x1000, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x297d, 0x8, 0x1, 0x8, 0x3, 0x7f, 0x3f, 0x4]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x6, 0xa}, {0x7, 0x5}, {0x2, 0xa}, {0x0, 0x6}, {0x0, 0x1}, {0x7, 0xa}, {0x5, 0x3}, {0x7, 0xa}, {0x1, 0x2}, {0x5, 0x7}, {0x2, 0x6}, {0x0, 0x2}, {0x5, 0x3}, {0x7, 0x3}, {0x2, 0x2}, {0x0, 0x9}, {0x3}, {0x3, 0x3}, {0x2, 0x3}, {0x5, 0x6}, {0x3, 0x4}, {0x1, 0x6}, {0x2, 0x6}, {0x1, 0x4}, {0x0, 0x4}, {0x5, 0x5}, {0x6, 0x4}, {0x6, 0xa}, {0x2, 0x4}, {0x4, 0x3}, {0x3, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x0, 0x2}, {}, {0x3, 0x9}, {0x2}, {0x2, 0x9}, {0x0, 0x7}, {0x6, 0x3}, {0x0, 0x6}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x5}, {0x2, 0x7}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x6, 0x0, 0x5, 0x8, 0x5, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1ff}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x248, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x238, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x8, 0x5, 0x3, 0x8a, 0x3f, 0x1ff]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x1}, {0x1}, {0x3, 0xa}, {0x6, 0x3}, {0x2, 0x6}, {0x0, 0x7}, {0x4, 0x1}, {0x2, 0x9}, {0x3, 0x4}, {0x4, 0x2}, {0x1, 0xa}, {0x0, 0xa}, {0x6, 0x7}, {0x3, 0x7}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x9}, {0x7, 0x7}, {0x1}, {0x4, 0x7}, {0x1, 0x9}, {0x4, 0x7}, {0x7, 0x19}, {0x1, 0x5}, {0x1, 0x6}, {0x3, 0xa}, {0x1, 0x8}, {0x1, 0x8}, {0x0, 0x1}, {0x6, 0x8}, {0x5, 0x4}, {0x7, 0x9}, {0x1, 0x5}, {0x7, 0xa}, {0x3, 0x3}, {0x2, 0x9}, {0x4, 0x3}, {0x1, 0x2}, {0x4, 0x5}, {0x0, 0x4}, {0x4, 0x8}, {0x2, 0x1}, {0x6, 0xa}, {0x6, 0xa}, {0x4, 0x7}, {0x4, 0x5}, {0x2, 0x7}, {0x0, 0x7}, {0x6, 0x4}, {0x0, 0x8}, {0x1, 0x8}, {0x7, 0x2}, {0x6, 0x3}, {0x7, 0x3}, {0x3, 0x5}, {0x4}, {0x5, 0x7}, {0x1, 0x7}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x1}, {0x4, 0x5}, {0x1, 0x3}, {0x3}, {0x1}, {0x1, 0xa}, {0x2, 0x2}, {0x7, 0x5}, {0x3, 0xa}, {0x1, 0x7}, {0x4, 0x1}, {0x4, 0x6}, {0x5}, {0x3, 0x6}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x6}, {0x7, 0x1}, {0x0, 0x9}, {0x7, 0x4}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x4, 0x4}, {0x6, 0x7}, {0x2, 0x8}, {0x3, 0x9}, {0x0, 0xa}, {0x3, 0x6}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x9}, {0x4, 0x3}, {0x5, 0xa}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x1, 0x1}, {0x6, 0x9}, {0x1, 0x7}, {0x3, 0xa}, {0x4, 0x2}, {0x1, 0x2}, {0x1, 0x2}, {0x7, 0x9}, {0x6, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0xf0c, 0x8, 0x1, 0x4ef5, 0x5, 0x4]}}]}, @NL80211_BAND_2GHZ={0xf4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x16, 0x6, 0x24, 0x18, 0x6, 0x6, 0x1b, 0x1, 0x36, 0x6c, 0x16, 0x48, 0x12, 0x17, 0x30, 0x5, 0x5, 0x6c, 0x9, 0xd, 0xa2577bc0e32851fa, 0xb, 0x2, 0xb, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1ff, 0x3, 0x7ff, 0x36, 0x5, 0x1, 0x8000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0xb, 0x2, 0x16, 0xc, 0x5, 0x21, 0x18, 0x16, 0x6c, 0x4, 0x1, 0x18, 0xb, 0xb, 0x16, 0x4b, 0xc, 0x2, 0x2, 0x1, 0xc, 0x6, 0x4, 0xc, 0x1, 0x6, 0x24, 0x6c, 0xc]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x6}, {0x0, 0x8}, {0x5, 0x8}, {0x0, 0x9}, {0x3, 0x4}, {0x1, 0x3}, {0x7, 0x3}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x7, 0x3}, {0x0, 0x3}, {0x4, 0x4}, {0x5, 0x7}, {0x0, 0x1}, {0x7}, {0x5}, {0x1, 0x1}, {0x5}, {0x6, 0x6}, {0x5, 0x9}, {0x1, 0x6}, {0x6}, {0x5, 0x9}, {0x0, 0xa}, {0x6, 0x7}, {0x3}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x4}, {0x3, 0x8}, {}, {0x5, 0x5}, {0x2, 0x5}, {0x5, 0x3}, {0x0, 0x3}, {0x1, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x6}, {0x6}, {0x6, 0x5}, {0x7}, {}, {0x7, 0x7}, {0x5, 0x9}, {0x2, 0x1}, {0x0, 0x1}, {0x7, 0xa}, {0x7, 0x2}, {0x7, 0x1}, {0x1, 0x5}, {0x2, 0x7}, {0x3, 0x9}, {0x2}, {0x3, 0x4}, {0x7, 0x4}, {0x5, 0x3}, {0x7, 0x7}, {0x4}, {}, {0x3, 0x9}, {0x3, 0x5}, {0x7, 0x6}, {0x2, 0x5}, {0x5, 0x1}, {0x0, 0x3}, {0x3, 0x1}, {0x1, 0x7}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x5, 0xb, 0x18, 0x6, 0x60, 0x18, 0x2, 0xb, 0x61, 0x4, 0x75, 0x60, 0x1b, 0xb, 0xc, 0x0, 0x6, 0x5, 0x60, 0x2, 0x9, 0x30, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcf94, 0x3, 0x3, 0x101, 0x2, 0x6, 0x7, 0x400]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x2, 0x1}, {0x7, 0x1}, {0x1, 0x7}, {0x4, 0xa}, {0x7, 0x3}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x8}, {}, {0x0, 0x5}, {0x5, 0x7}, {0x3, 0xa}, {0x2, 0x1}, {0x5, 0x9}, {0x0, 0x9}, {0x1, 0xa}, {0x3, 0x9}, {0x7, 0x6}, {}, {0x1, 0x9}, {0x1, 0x3}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0xc, 0x0, 0x18, 0x9, 0x2, 0x5, 0xc, 0x9, 0x0, 0xb, 0x1, 0x3, 0x24, 0x6c, 0x60, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7267, 0xff, 0x2, 0x80, 0x7, 0x9, 0x5, 0x9]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x80, 0x3f, 0x401, 0x800, 0x401, 0x8]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x17, 0x18, 0x36, 0x6c, 0xb, 0x12, 0x3, 0x3, 0x2, 0x16, 0x36, 0x5, 0x9, 0x6, 0x6, 0x6, 0x36, 0x30, 0xb, 0x6c, 0x30, 0xb, 0x16, 0x6c, 0x12, 0x36, 0x48, 0xc, 0x6, 0x6]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5e2, 0xfff, 0x0, 0x0, 0x0, 0x7, 0x9, 0x400]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4d}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5599}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x90}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x65}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9c6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x65}]}]}, @NL80211_ATTR_TID_CONFIG={0x90, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x26}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf9}]}]}]}, 0x52c}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) 00:16:31 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x0, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:16:31 executing program 1: mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x180400, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = signalfd(r1, &(0x7f0000000480), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000004c0)={0x9000000a}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x240, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(0xffffffffffffffff, r1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000240)) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file1', [{0x20, 'pipefs\x00'}, {0x20, '\\.('}, {0x20, 'pipefs\x00'}, {0x20, '.'}, {0x20, 'net/nfsfs\x00'}, {}, {0x20, 'pipefs\x00'}], 0xa, "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"}, 0x1035) syz_open_procfs(0x0, &(0x7f0000000200)='net/nfsfs\x00') ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10}) 00:16:31 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:16:31 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) [ 1504.648234] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1504.651889] FAULT_INJECTION: forcing a failure. [ 1504.651889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1504.654858] CPU: 0 PID: 13175 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1504.656271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1504.657982] Call Trace: [ 1504.658526] dump_stack+0x107/0x167 [ 1504.659277] should_fail.cold+0x5/0xa [ 1504.660064] _copy_from_user+0x2e/0x1b0 [ 1504.660879] __copy_msghdr_from_user+0x91/0x4b0 [ 1504.661832] ? __ia32_sys_shutdown+0x80/0x80 [ 1504.662723] ? udp_v6_push_pending_frames+0x360/0x360 [ 1504.663778] ? inet6_sendmsg+0xbd/0x140 [ 1504.664581] ? inet6_compat_ioctl+0x320/0x320 [ 1504.665492] ? __sock_sendmsg+0x55/0x190 [ 1504.666341] sendmsg_copy_msghdr+0xa1/0x160 [ 1504.667209] ? do_recvmmsg+0x6d0/0x6d0 [ 1504.668003] ? __lock_acquire+0x1657/0x5b00 [ 1504.668889] ___sys_sendmsg+0xc6/0x170 [ 1504.669685] ? sendmsg_copy_msghdr+0x160/0x160 [ 1504.670628] ? __lockdep_reset_lock+0x180/0x180 [ 1504.671580] ? lock_acquire+0x197/0x470 [ 1504.672388] ? find_held_lock+0x2c/0x110 [ 1504.673215] ? __might_fault+0xd3/0x180 [ 1504.674033] ? lock_downgrade+0x6d0/0x6d0 [ 1504.674849] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 [ 1504.676410] ? io_schedule_timeout+0x140/0x140 [ 1504.676427] ? lock_is_held_type+0x54/0x110 [ 1504.676462] __sys_sendmmsg+0x195/0x470 [ 1504.676492] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1504.676512] ? lock_downgrade+0x6d0/0x6d0 [ 1504.680942] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1504.681929] ? wait_for_completion_io+0x270/0x270 [ 1504.682908] ? rcu_read_lock_any_held+0x75/0xa0 [ 1504.683849] ? vfs_write+0x354/0xa70 [ 1504.684609] ? fput_many+0x2f/0x1a0 [ 1504.685345] ? ksys_write+0x1a9/0x260 [ 1504.686130] ? __ia32_sys_read+0xb0/0xb0 [ 1504.686959] __x64_sys_sendmmsg+0x99/0x100 [ 1504.687813] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1504.688863] do_syscall_64+0x33/0x40 [ 1504.689619] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1504.690673] RIP: 0033:0x7fa76daafb19 [ 1504.691426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1504.695121] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1504.696635] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1504.698075] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1504.699511] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1504.700945] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1504.702397] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:16:31 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f00000002c0)='./file2\x00', 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) inotify_add_watch(r2, &(0x7f0000000380)='./file2/file0\x00', 0x40000004) getsockname(r0, &(0x7f0000000100)=@alg, &(0x7f0000000000)=0x80) creat(&(0x7f00000001c0)='./file2\x00', 0xe2) r3 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x56, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100", 0x10, 0xd510}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat2(r3, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40040, 0x82}, 0x18) getsockname(r4, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000b0000000000000400"/24], 0x18}, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfab, 0x8, 0x3fd1, 0x100, 0x1d, 0x20}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001ac0)={'gretap0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x700, 0x10, 0xd79, 0x52a2, {{0x13, 0x4, 0x1, 0x0, 0x4c, 0x0, 0x0, 0x3f, 0x29, 0x0, @multicast1, @local, {[@timestamp={0x44, 0x10, 0x67, 0x0, 0x8, [0x0, 0x6e34, 0x2e40]}, @timestamp={0x44, 0x28, 0xe4, 0x0, 0x4, [0x7fffffff, 0x3, 0x1f, 0x1, 0x400, 0x5, 0x8001, 0x1, 0x6]}]}}}}}) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r6, 0x0) 00:16:31 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) [ 1504.929221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:16:46 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {0x2}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:16:46 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup3(r1, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[]) 00:16:46 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) 00:16:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x0, 0x6, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:16:46 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 41) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:16:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:16:46 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, 0x0, 0x100, 0x0, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x16}}}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x2000c0c0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x0, 0x26, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}]}]}, 0x1c}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x774, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x55}}}}, [@NL80211_ATTR_TX_RATES={0xc0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x8001, 0xfff, 0x80, 0x6, 0xfffb, 0x9]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x0, 0x9}, {0x4, 0x5}, {0x6, 0x2}, {0x7, 0x6}, {0x1, 0x5}, {0x6, 0x6}, {0x3, 0x8}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x8}, {0x4}, {0x1}, {0x2, 0x9}, {0x1, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x0, 0x4}, {0x4, 0x3}, {0x7, 0x5}, {0x5, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x1, 0x3}, {0x0, 0x6}, {0x2, 0x7}, {0x1, 0x8}, {0x2, 0xa}, {0x2, 0x7}, {0x2, 0x6}, {0x0, 0x1}, {0x7, 0xa}, {0x1, 0x7}, {0x5, 0x7}, {0x2, 0x1}, {0x6, 0x6}, {0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x5}, {0x2, 0x4}, {0x5, 0x3}, {0x3, 0x8}, {0x3, 0x1}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x9}, {0x5, 0xa}, {0x3, 0x7}, {0x4, 0x2}, {0x6, 0x3}, {0x3, 0x1}, {0x2}, {0x3, 0xa}, {0x0, 0x7}, {0x4, 0xa}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x0, 0x1b, 0x60, 0x2, 0x9, 0x4, 0x3, 0x6, 0x67, 0x0, 0x5, 0x4, 0x24, 0x1, 0x16, 0x60]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x7, 0xa}, {0x2, 0x1}, {0x1, 0x10}, {0x1, 0x8}, {0x4, 0x2}, {0x3, 0x3}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x1, 0x3}, {0x1, 0x6}, {0x4}, {0x7, 0x6}, {0x4, 0x8}, {0x3, 0x4}, {0x5, 0x2}, {0x5}, {0x2, 0xa}, {0x0, 0x4}, {0x3, 0xa}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x5}, {0x1, 0x1}, {0x1, 0x9}, {0x5, 0xa}, {0x4}, {0x7, 0x8}, {0x3, 0x7}, {0x1, 0x3}, {0x2}, {0x6, 0x1}, {0x7, 0x4}, {0x1, 0x4}, {0x4, 0xa}, {0x4, 0x7}, {0x6, 0xa}, {0x7, 0x9}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x6, 0x6}, {0x2, 0xa}, {0x6, 0x3}, {0x7}, {0x2}, {0x2, 0x3}, {0x5, 0x8}, {0x2}, {0x4, 0x4}, {0x6, 0x2}, {0x7, 0x6}, {0x6, 0x1}, {0x7, 0xa}, {0x3, 0x6}, {0x1}, {0x0, 0x6}, {0x3, 0x7}, {0x4, 0x8}, {0x4, 0xa}, {0x7, 0x7}, {0x2, 0x7}, {0x7, 0xa}, {0x0, 0xa}, {0x6, 0x3}, {0x7, 0x2}, {0x5, 0x1}, {0x7, 0x1}, {0x0, 0x8}, {0x1, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x348, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x1}, {0x1, 0x6}, {0x1, 0x2}, {0x3}, {0x7, 0x4}, {0x6, 0x8}, {0x2}, {0x3, 0x9}, {0x3, 0x5}, {0x3, 0x1}, {0x6, 0xa}, {0x3, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {0x1, 0x1}, {0x3, 0x2}, {0x1, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x7, 0x5}, {0x3, 0x7}, {0x2, 0x9}, {0x1, 0xa}, {0x3, 0x7}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x2, 0x7}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x9}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x2}, {0x3, 0x4}, {0x6, 0xa}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x5}, {0x1, 0x9}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x4}, {0x2, 0x2}, {0x3, 0x6}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xf0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x4}, {0x6, 0xa}, {0x0, 0x1}, {0x7, 0x4}, {0x6, 0xa}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0x1b, 0x60, 0x2]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x9}, {0x3, 0x6}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0xa}, {0x4, 0x2}, {0x7, 0x6}, {0x5, 0x6}, {0x1, 0x4}, {0x7, 0x8}, {0x1, 0x4}, {0x4, 0xa}, {0x0, 0x3}, {0x6, 0x7}, {0x2, 0x8}, {0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x3}, {0x7, 0x6}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0x7}, {0x4, 0x6}, {0x7, 0x4}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff8, 0x1ff, 0x2, 0x9, 0x21, 0x0, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7000, 0x401, 0x2, 0x400, 0x0, 0x101, 0x2]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x2}, {0x7, 0x8}, {0x1, 0x2}, {0x3, 0x9}, {0x4}, {0x0, 0x9}, {0x3, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x3}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x7}, {0x0, 0x11}, {0x0, 0x9}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x9}, {0x7, 0xa}, {0x1, 0x4}, {0x1, 0x6}, {0x4, 0xa}, {0x1, 0xa}, {0x0, 0x8}, {0x6, 0x1}, {0x1, 0x8}, {0x1, 0x3}, {0x6, 0x6}, {0x6}, {0x2, 0x5}, {0x6, 0x7}, {0x0, 0x8}, {0x7, 0xa}, {0x3, 0x6}, {0x6, 0x5}, {0x7, 0x7}, {0x1, 0x3}, {0x7}, {0x5, 0x9}, {0x2, 0x1}, {0x7, 0x9}, {0x3, 0x1}, {0x2, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x2, 0x6}, {}, {0x7, 0x2}, {0x1, 0x1}, {0x6, 0x5}, {0x6, 0x1}, {0x1, 0x7}, {0x2, 0xa}, {0x3, 0x6}, {0x2, 0x3}, {0x5, 0x8}, {0x4}, {0x3, 0x6}, {0x3, 0x5}, {0x2}, {0x2, 0x8}, {0x0, 0x8}, {0x2}, {0x7, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x4, 0x2}, {0x7, 0x1}, {}, {0x5, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x41, 0xbb, 0x6a3, 0xa22, 0x0, 0x1000, 0x8]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x36, 0x48, 0x9, 0x16, 0x60, 0x12, 0xc, 0x16, 0x16, 0x1b, 0xb, 0x36, 0xc, 0x48]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x60, 0x48, 0x10, 0x48, 0xc, 0xb, 0x9]}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x401, 0x200, 0xfffe, 0xe048, 0x0, 0x7, 0x3]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x5, 0x18, 0x4, 0x1b, 0x4, 0x30, 0x8, 0x30, 0x4, 0x48, 0x2, 0x1, 0x16, 0x6c, 0x6, 0x4, 0x2, 0x1, 0x24, 0x60]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x18, 0xc, 0x3, 0xc, 0xb, 0x0, 0x6c, 0x60, 0x30, 0x3, 0x2, 0xb, 0x18, 0x3, 0x36, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc5, 0x3f, 0xba, 0x5, 0x101, 0xaef, 0x7, 0x8]}}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x400, 0x3ff, 0x6, 0xd90a, 0x1, 0x3, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9dd1, 0x1a62, 0x8001, 0x5, 0x1, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0xa}, {0x7, 0x3}, {0x4, 0x2}, {0x5, 0x2}, {0x6, 0x3}, {0x6, 0x8}, {0x0, 0x6}, {0x5, 0x4}, {0x2, 0x7}, {0x7, 0x5}, {0x3, 0x5}, {0x4, 0x7}, {0x7, 0x4}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x8}, {0x5, 0x4}, {0x1, 0x7}, {0x5, 0x3}, {0x1, 0x4}, {0x6}, {}, {0x6, 0x2}, {0x6, 0x9}, {0x4, 0x3}, {0x3, 0x9}, {0x5, 0x4}, {0x3, 0x6}, {0x1, 0x4}, {0x1, 0x2}, {0x1, 0x3}, {0x3, 0x3}, {0x1, 0x4}, {0x4, 0x7}, {0x3, 0x6}, {0x7}, {0x7, 0x6}, {0x0, 0x9}, {0x7, 0x4}, {0x3, 0x6}, {0x4, 0xa}, {0x5, 0x7}, {0x2, 0x5}, {0x4, 0x1}, {0x5, 0xa}, {0x1, 0x6}, {0x3, 0x3}, {0x6, 0x6}, {0x1, 0x5}, {0x4, 0x6}, {0x5, 0x8}, {0x1, 0x2}, {0x0, 0x9}, {0x2, 0x2}, {0x0, 0x2}, {0x2, 0x1}, {0x1, 0x4}, {0x6, 0x8}, {0x1}, {0x3, 0x1}, {0x0, 0x2}, {0x1, 0xa}, {0x5, 0x1}, {0x2, 0x8}, {0x5, 0x4}, {0x6, 0x9}, {0x5, 0x5}, {0x5}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0x9, 0x5, 0x6c, 0x5, 0xb, 0x4, 0x4, 0x36, 0x24, 0x24, 0x1, 0x2, 0xb, 0x2, 0x9, 0x6, 0xb, 0x1b, 0x6c, 0x12, 0x24, 0x18, 0x30, 0x12]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4339, 0x400, 0x3ff, 0x71, 0x1f, 0x9, 0x240c]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x6}, {0x2, 0x6}, {0x0, 0x5}, {0x6, 0x3}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0x8}, {0x5, 0x2}, {0x2, 0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x6, 0x6}, {0x5, 0x1}, {0x7, 0x5}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0x6}, {0x5, 0x8}, {0x7, 0x2}, {0x3, 0x5}, {0x7, 0x9}, {0x5, 0x1}, {0x0, 0x3}, {0x3}, {0x4, 0x1}, {0x7, 0xa}, {0x1, 0x4}, {0x4, 0x3}, {0x4, 0x4}, {0x5, 0x7}, {0x3, 0x5}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0x1}, {0x5, 0x6}, {0x3, 0x5}, {0x0, 0x8}, {0x2, 0xa}, {0x0, 0x7}, {0x3, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x0, 0x7, 0x73, 0xff, 0x4, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x24, 0x6, 0x1, 0x1d, 0x30, 0x5, 0x2, 0x24, 0x60, 0x30, 0x48, 0x9, 0x12, 0x48, 0xb, 0x5, 0x60, 0x30, 0x12, 0x60, 0x60, 0x2, 0x12, 0x30, 0x18, 0x4, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x1}, {0x0, 0x3}, {0x4, 0x8}, {0x1, 0x7}, {0x5, 0x8}, {0x6, 0x5}, {0x6, 0x1}, {0x4, 0x6}, {}, {0x3, 0x5}, {0x3, 0xa}, {0x0, 0x4}, {0x2, 0x1}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x8}, {0x0, 0x7}, {0x6, 0x7}, {0x1, 0x4}, {0x1}, {0x0, 0x7}, {0x0, 0x3}, {0x7, 0x1}, {0x3, 0x9}, {0x7, 0x6}, {0x1}, {0x3}, {0x6, 0xa}, {0x3, 0x5}, {0x1, 0x9}, {0x4, 0x4}, {0x5, 0x6}, {0x5, 0x4}, {0x3}, {0x3, 0x9}, {0x7, 0x5}, {0x7, 0x5}, {0x6, 0x9}, {0x1, 0x9}, {0x7, 0xa}, {0x3, 0x2}, {0x6, 0x2}, {0x3, 0x5}, {0x3, 0x9}, {0x0, 0x8}, {0x0, 0x8}, {0x4, 0x3}, {0x2, 0x3}, {0x3}, {0x2, 0x7}, {0x6, 0x3}, {0x1, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0xb, 0x2, 0x30, 0x30, 0x18, 0xc, 0xb, 0x4, 0x30, 0x6, 0x6c, 0x24, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x9}, {0x4, 0x4}, {0x0, 0x3}, {0x3, 0xa}, {0x2, 0x1}, {0x3, 0x8}, {0x2, 0x2}, {0x2, 0x8}, {0x6, 0x9}, {0x6, 0x5}, {0x0, 0x3}, {0x7}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x5}, {0x4}, {0x7, 0x5}, {0x4}, {0x2, 0x6}, {0x4, 0x6}, {0x4, 0x2}, {0x3, 0x7}, {}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0x9}, {0x3, 0xa}, {0x1, 0x6}, {0x5, 0x2}, {0x7}, {0x1, 0x5}, {0x3, 0x8}, {0x5, 0x3}, {0x5, 0x7}, {0x4, 0x1}, {0x4, 0x1}, {0x6, 0x2}, {0x2, 0xa}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x7}, {0x6, 0x3}, {0x2, 0x2}, {0x7}, {0x0, 0x6}, {0x7, 0xa}, {0x1}, {0x2, 0xa}, {0x0, 0x2}, {0x5, 0x2}, {0x4, 0x3}, {0x6, 0x6}, {0x4, 0x1}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x3}, {0x1, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x4, 0x7}, {0x3, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x7}, {0x4, 0x5}, {0x5, 0xa}, {0x7, 0x6}, {0x5, 0x9}, {0x3, 0x5}, {0x5, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x6, 0x4}, {0x5, 0x9}, {0x7, 0x4}, {0x4, 0x9}, {0x5, 0x5}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x4}, {0x7, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x3, 0x1}, {0x4, 0x8}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x2}, {0x7, 0x7}, {0x6, 0x3}, {0x6, 0x5}, {0x1, 0x2}, {0x5, 0xa}, {0x0, 0xa}, {0x5, 0x5}, {0x1, 0xa}, {0x4, 0x2}, {0x4}, {0x5, 0xa}, {0x0, 0x1}, {0x6, 0x4}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x6}, {0x7, 0x4}, {0x7, 0x8}, {0x3, 0x5}, {0x1, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0x2a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0x60, 0xc, 0xc, 0x16, 0xc, 0x12, 0x30, 0x5, 0x48, 0x41, 0x70]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x60, 0x18, 0x16, 0x5, 0x1, 0x48, 0x5, 0x7e, 0x12, 0x30, 0x48, 0x60, 0x12, 0x1, 0xb, 0x16, 0x16, 0x18, 0xb, 0x3, 0x18, 0x30, 0x48, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x401, 0x7, 0x3ff, 0x0, 0xff, 0x7, 0x1]}}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x9, 0x48, 0xb, 0x4, 0x5, 0x24, 0x0, 0x30, 0x48, 0x36]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x5}, {0x4, 0x7}, {0x3, 0x1}, {0x4}, {0x3, 0x5}, {0x1}, {0x7, 0x7}, {0x6}, {0x6}, {0x2, 0x6}, {0x4, 0x4}, {0x1, 0x2}, {0x4, 0x6}, {0x1, 0xa}, {0x4, 0x2}, {0x0, 0x8}, {0x0, 0x9}, {0x2, 0x1}, {0x0, 0x2}, {0x4, 0x4}, {0x6, 0x5}, {0x6, 0xa}, {0x6, 0x4}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x5}, {0x3, 0xa}, {0x1, 0xa}, {0x4, 0x2}, {0x0, 0x4}, {0x4, 0x7}, {0x1, 0xa}, {0x5, 0x2}, {0x4, 0x8}, {0x6, 0x2}, {0x7, 0x1}, {0x6, 0x9}, {0x4, 0x8}, {0x4, 0xa}, {0x3, 0x4}, {0x3}, {0x1, 0x2}, {0x1}, {0x4, 0x8}, {0x0, 0x5}, {0x6}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x101, 0x1f, 0x1, 0x9, 0x9]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x4}, {0x7, 0x7}, {0x1, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x9}, {0x6, 0x3}, {0x5, 0x3}, {0x5, 0x2}, {0x1, 0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x1}, {0x7, 0x3}, {0x6, 0x2}, {0x7, 0x4}, {0x0, 0x1}, {0x4, 0x9}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x6c, 0x24, 0x1b, 0x9, 0x36, 0xc, 0x6c, 0x60, 0x6c, 0x1b, 0x25, 0x30]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x7, 0x6, 0x3, 0x8, 0x46b4, 0x8001]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x3}, {0x5, 0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0xa}, {0x1, 0xa}, {0x1, 0x4}, {0x3, 0x6}, {0x0, 0x2}, {0x7, 0x2}, {0x7, 0x3}, {0x3, 0x4}, {0x0, 0x2}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x4}, {0x7, 0x3}, {0x1}, {0x4, 0x6}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x4}, {0x1, 0x6}, {0x0, 0x2}, {}, {0x1, 0x7}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0x1}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x6}, {0x6, 0x2}, {0x0, 0x4}, {0x4}, {0x2}, {0x0, 0x5}, {0x1, 0x8}, {0x5, 0x5}, {0x3, 0x3}, {0x2, 0x9}, {0x3, 0x4}, {0x0, 0x6}, {0x3, 0x9}, {0x4, 0x1}, {0x4, 0x7}, {0x3, 0x5}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x5}, {0x6, 0x5}, {0x6, 0x8}, {0x3, 0x2}, {0x0, 0xa}, {0x4, 0xa}, {0x3, 0x5}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x6, 0x2}, {0x4, 0x9}, {0x2, 0x9}, {0x2, 0x9}, {0x7, 0x1}, {0x1, 0x3}, {0x7, 0x8}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x9}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x3f, 0x1, 0x7, 0xfff, 0xff, 0x1f, 0x3f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x9}, {0x2}, {0x5, 0x2}, {0x6, 0x9}, {0x3, 0x7}, {0x7, 0x5}, {0x1, 0x1}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x7}, {0x6}, {0x1, 0x5}, {0x2, 0x9}, {0x4, 0x7}, {0x5, 0x2}, {0x0, 0xa}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x1}, {0x1, 0x6}, {0x5, 0x4}, {0x1, 0x5}, {0x3, 0xa}, {0x0, 0x6}, {0x2, 0x2}, {0x6, 0x6}, {0x5, 0x3}, {0x2, 0x4}, {0x3, 0x4}, {0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x4, 0x2, 0x1b, 0x12, 0x48, 0x1b, 0x16, 0x2, 0x6, 0x30, 0x4, 0x15, 0x36, 0x2, 0x16, 0x6c, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb28, 0x3, 0x0, 0x4, 0x6, 0x4000, 0x4ca, 0x1]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x4}, {0x6, 0x8}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x6}, {0x1, 0x6}, {0x2, 0x6}, {0x3, 0x2}, {0x2, 0x8}, {0x1, 0x9}, {0x5, 0x1}, {0x2, 0x5}, {0x6, 0x1}, {0x0, 0x1}, {0x3, 0x9}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0x1}, {0x7, 0x8}, {0x5, 0x1}, {0x5, 0x2}, {0x6, 0x1}, {0x6}, {0x2, 0x7}, {0x5, 0x8}, {0x6, 0x6}, {0x1, 0x1}, {0x7, 0x4}, {0x5, 0x5}, {0x4, 0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x5, 0x7}, {0x2, 0x6}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x3}, {0x7}, {0x4}, {0x0, 0x3}, {0x7, 0xa}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0xa}, {0x2, 0x5}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x8}, {0x0, 0x9}, {0x5, 0x2}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x3}, {0x3, 0x4}, {0x0, 0x5}, {0x0, 0x8}, {0x6, 0x3}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x6}, {0x3, 0x2}, {0x5, 0x9}, {0x7, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x0, 0x7}, {0x6, 0xa}, {0x2, 0x7}, {0x2, 0x7}, {0x7, 0x5}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0x9}, {0x4}, {0x4, 0x9}, {0x0, 0x7}, {0x1, 0xa}, {0x3}, {0x3, 0x6}, {0x7, 0x5}, {0x2, 0x2}, {0x4, 0x4}, {0x2, 0x9}, {0x6, 0x5}, {}, {0x4, 0x9}, {0x5, 0x3}, {0x5, 0x3}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x60, 0x1b, 0x1b, 0x12, 0x6c, 0x4, 0x30, 0x2, 0x9, 0x3, 0x3, 0x3, 0x18, 0x12, 0x1b, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x7}, {0x1, 0x4}, {0x6, 0x7}, {0x0, 0x9}, {}, {0x3, 0x1}, {0x3, 0x2}, {0x3, 0x5}, {0x7, 0x7}, {0x6, 0x5}, {0x0, 0x6}, {0x2, 0x8}, {0x0, 0x2}, {0x7, 0x6}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0xa}, {0x1, 0x3}, {0x6, 0x4}, {0x7, 0x4}, {0x4, 0x4}, {0x4, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x3, 0x6}, {0x1, 0x9}, {0x2, 0x7}, {0x0, 0xa}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x3}, {0x7, 0x1}, {0x2, 0x2}, {0x7, 0x7}, {0x2, 0x1}, {0x5, 0x9}, {0x4, 0xa}, {0x1, 0x4}, {0x7, 0x8}, {0x5, 0x8}, {0x0, 0x2}, {0x2, 0x9}, {0x4, 0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x7}, {0x2, 0x3}, {0x2, 0x1}, {0x5, 0x3}, {0x7}, {0x1, 0x2}, {0x4}, {0x3, 0x9}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x774}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 00:16:46 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x8100}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x40021, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x27, 0xf9, 0x280e, 0x8, 0x6, 0x3, 0x7fff, 0x0, 0x200001ff, 0x0, 0xff}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f31a0000434ef9bab774bdcab95c000d00"}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x60400, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r3, 0x0, 0x120) pread64(r3, &(0x7f0000000180)=""/73, 0x49, 0x9198a54) r4 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) fork() fcntl$getown(0xffffffffffffffff, 0x9) fcntl$getownex(r3, 0x10, &(0x7f0000000200)={0x0, 0x0}) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) [ 1519.439837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:16:46 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@target={'target ', {'PCI:', '1c', ':', 'd', ':', '10', '.', 'c'}}, 0x15) [ 1519.476365] FAULT_INJECTION: forcing a failure. [ 1519.476365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1519.479201] CPU: 1 PID: 13216 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1519.480584] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1519.482261] Call Trace: [ 1519.482790] dump_stack+0x107/0x167 [ 1519.483536] should_fail.cold+0x5/0xa [ 1519.484296] _copy_from_user+0x2e/0x1b0 [ 1519.485101] __copy_msghdr_from_user+0x91/0x4b0 [ 1519.486041] ? __ia32_sys_shutdown+0x80/0x80 [ 1519.486965] ? udp_v6_push_pending_frames+0x360/0x360 [ 1519.488060] ? inet6_sendmsg+0xbd/0x140 [ 1519.488902] ? inet6_compat_ioctl+0x320/0x320 [ 1519.489841] ? __sock_sendmsg+0x55/0x190 [ 1519.490728] sendmsg_copy_msghdr+0xa1/0x160 [ 1519.491637] ? do_recvmmsg+0x6d0/0x6d0 [ 1519.492468] ? __lock_acquire+0x1657/0x5b00 [ 1519.493396] ___sys_sendmsg+0xc6/0x170 [ 1519.494233] ? sendmsg_copy_msghdr+0x160/0x160 [ 1519.495204] ? vmacache_find+0x55/0x2a0 [ 1519.496048] ? __lockdep_reset_lock+0x180/0x180 [ 1519.497046] ? lock_acquire+0x197/0x470 [ 1519.497884] ? find_held_lock+0x2c/0x110 [ 1519.498765] ? __might_fault+0xd3/0x180 [ 1519.499606] ? lock_downgrade+0x6d0/0x6d0 [ 1519.500488] ? asm_exc_page_fault+0x1e/0x30 [ 1519.501425] __sys_sendmmsg+0x195/0x470 [ 1519.502285] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1519.503203] ? lock_downgrade+0x6d0/0x6d0 [ 1519.504108] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1519.505139] ? wait_for_completion_io+0x270/0x270 [ 1519.506171] ? rcu_read_lock_any_held+0x75/0xa0 [ 1519.507154] ? vfs_write+0x354/0xa70 [ 1519.507945] ? fput_many+0x2f/0x1a0 [ 1519.508720] ? ksys_write+0x1a9/0x260 [ 1519.509523] ? __ia32_sys_read+0xb0/0xb0 [ 1519.510411] __x64_sys_sendmmsg+0x99/0x100 [ 1519.511302] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1519.512387] do_syscall_64+0x33/0x40 [ 1519.513174] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1519.514435] RIP: 0033:0x7fa76daafb19 [ 1519.515303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1519.519287] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1519.520936] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1519.522521] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1519.524080] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1519.525614] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1519.527149] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:16:46 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002b40)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000100)=""/112, 0x70}, {&(0x7f0000001240)=""/185, 0xb9}, {&(0x7f0000001300)=""/161, 0xa1}], 0x4, &(0x7f00000013c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000180), 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001480)=""/19, 0x13}], 0x1, &(0x7f0000001500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000015c0), 0x6e, &(0x7f0000002980)=[{&(0x7f0000001640)=""/136, 0x88}, {&(0x7f0000001700)=""/253, 0xfd}, {&(0x7f0000001800)=""/182, 0xb6}, {&(0x7f00000018c0)=""/96, 0x60}, {&(0x7f0000001940)=""/38, 0x26}, {&(0x7f0000001980)=""/4096, 0x1000}], 0x6, &(0x7f0000002a00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}], 0x3, 0x40010001, &(0x7f0000002c00)={0x0, 0x989680}) openat2(r1, &(0x7f00000034c0)='./file0\x00', &(0x7f0000003500)={0x80082, 0xc0, 0x2}, 0x18) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x3) r6 = open_tree(0xffffffffffffffff, &(0x7f00000033c0)='./file0\x00', 0x1800) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003400), 0x4082, 0x0) sendmsg$unix(r2, &(0x7f0000003480)={&(0x7f0000002c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003300)=[{&(0x7f0000002cc0)="369a57e00e27ff7e90702505d041d6f9dc5cf06fba3b0db6b30aea31c4dba9beb164b4ca206230c8eafc861b8290c35d66828a16fa7057c60c6d4a3d04082a8496b4b5ec3f283e87f573023505c2259c42bc8d357cd11bc05ea421e08b7d11995d050eaa949ffc1605da469a4d1f1fc548acd1d393877ab7cfc11df87d6ca629759ee4c2566fe0865d2110944a8036fc9ddcb585e5352dea21f9d0a42c89a81f53", 0xa1}, {&(0x7f0000002d80)="d79d166b71bb86f6034c5539556f5ca241a7046992dbf5a42a27872634b12f59c592391a4202ff1d536dbb2e1a6f5923965c617d8ee1d360f9303ce2b8bbfd71f733680a56ac472161839c93c123a3893e467bdd2cce9b6bd047fa00d0675e34ba20e112d9c2c96dba28e24c4ab7d45dd98112893a470a145d63e1193024a984e582eefeb220c16d4e2086fa4186944439a07bf47a45cada32c13b69a3aa03f85fc5f1ae0738f41f653a70c82e28fb73e09adaf12019b6e4b2b19a6c444f6223a2e0ec1fbb67975635f2ac2f53182d76780f21c083ebab846807bef6da270206de0f97037c02c40e", 0xe8}, {&(0x7f0000002e80)="aa7718f5b1f3266a418b038b8d93075e37f9572dd37d676991536a12ab2104bce0fe134cfc77f38d43e2a27ff235be3c0ca9261adce1a8f7dfcfe5e28222554eee5d4ffe9ed67802d2f4fbe1fcbf457ec7db7d8ae181e9c489ad492db1ed4e43ab39e2e732fd8121a45b66610c9450ea331b0a33a06201fc29848cdc3291ae36f7", 0x81}, {&(0x7f0000002f40)="7a84645eaa86841891fea7614856a7756f0d23dc627dd8290ce5780c9870ec2b56bdf4ad6864efe03820051e028dd5c94906b755d24cadc69a9fcdef83a6978bc63dd84e394e57cdb6667fdca6628609099be0186a", 0x55}, {&(0x7f0000002fc0)="872689ab77c935be1c5fb0979f2aa6985b31deb05d9308e24dd9a9d70cbc", 0x1e}, {&(0x7f0000003000)="152c642579653efd7736d5a471c63fc9163051185f2d0534da31ae60b48d389150b9a3a1f3878ca9a49827c736", 0x2d}, {&(0x7f0000003040)="29329d1ae50dbee09c7409931d293dcc12558384b87bfaae645b5fc7a0eddd5fefc87fc48c4212540eb7ff60f405902b7df6411ca490027016aed4e6837eee593b966e977862cbbfcf13ec9360e25c6559e98a3fa278ac7548676b8f057930065a19d56aa851851b0cbe7ea0ad86a26cffbad57bb8b0cb0bcb6ea06b445138223c215bc5546d5d238a25ff0414ab1142bcbd99e026305f078f829581a0e7", 0x9e}, {&(0x7f0000003100)="9acdc0eb04cb46e61fea28fb18c587df48cb265e37e3e38bad6a53b16c5b7bea07a3dc9b72baa39f4dae4ac0ec14e77cb8d9f2e3284c1cee559e515187e539ef509607cf7d5d9dc268e5dddd66e6a50487f880415aa1e5cfb422cf7a6a72eb43eb26e8f055ab2f8a90b8e32ecdcc8090d662f132128437f0bd348d7ec8aea6d4d04c5eabbb81d8bdfc5edbc965fce32c7073f7dc82f3057b79f88a6380932333db2d3b73d16480d780402850962a0f5df8766dabc45e42b35d57cf36e0d5922395f63466bd558d1d40463a75e7fb535ca90732baa6f05b930f91739c8f8261b27e", 0xe1}, {&(0x7f0000003200)="42914df58ff84eb4710326717fcc94a73c9f5ba4acc95b6a76b8a692a6f0b4ea59d1c2098cac190e7c1aab451791efec407e4faa45ca71ac14aac32e419022ced3a6f1066810e72bdb7840f4f7a013c8c7c977984db5123aa02434ed9aba66c8ad7153d34327eaff17218407dfd43c9f5b439b7611a13334aa1c4c24e02e5b064a643cc6e81e841598f19975ef62ef1eae720bdf2130e389c729fe5f4133f6f915605ee0c7caf19885f6c3d338f6c5c3eab8f80f93a1d0a1092e12147d89d324e2b7cd362adaac189c11e3ddd77c20c3007b0919ff48779e9b345342fb125b7a69a5fab6bdf075f974ace7e8a719aeaf606bb9e87c08e728", 0xf8}], 0x9, &(0x7f0000003440)=[@rights={{0x30, 0x1, 0x1, [r0, r3, r4, r5, r6, r0, r7, r8]}}], 0x30, 0xc000}, 0x40000) [ 1519.546931] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:16:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x0, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:16:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000300000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="677269f54a706a71756f7461f139e24ea9a953ff2c00"]) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000040)={@desc={0x1, 0x0, @auto="a2050e5bfc7ea866"}}) 00:16:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = memfd_create(&(0x7f0000000140)='\xb74\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x84wP\xc9b\xa3\x8f\xe1\xedf\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\xd48\r\x17\x9f0\xa7\xbc\xb5{\xe9\x1b\xe1\xfc\x91v\x9a\xd5P\x90\x18\x1a\x19\xa7\xb0\xa5\xdf\xa3}\xe84\xa2\xed\xe3w\x89\xe5o\xaa\xa8\xedO)\xf7S~\xa6m\b\xd7\x8e2\x9dR\'\'9\x83\x83\x9ai\a\'V`7\xa6\xcfW\x00\xdd\x04UP2\xee\x05\xc3\xa8\xde)\xbc\xe2\xec2PGta\xa2\xb9\xdc\x89t\xad\xf3F\xc2\x95\xbfC\x03\xd0>\xc9\x12t\xdcxS[\xe2\x8c9n\x80\xf7\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00M[N\xad\xb9\xa0Cr\a\x00\f\xc6\x11\x01re\xc7\xffn\xde\xeb\xe8G~\xf7\t\xc5\xdczK+h\x8e\x8a\xdep\x8bYaK\xf4\x1e\xff5\xf0>\xce\xe0)=\xf0\xd5\xef\x9e\x02/\xbd\x17\x10\xb7;\x8f\xba\xba\xab9\xe2\x8f\x9e\xb7\xbb\xd9m\x03\x94\xe1\xd29\xfa\x9dP\xabs\xffu\xd3\xf5\xd8[\xccU\xa4\xc3\xaav\xd0\xca\x9e\xc50\xb5q\x80\x82\x7f\x16\x96{\x00\x00\x00', 0x3) fcntl$addseals(r2, 0x409, 0xd) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x101}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x9}}, './file1\x00'}) 00:16:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:16:46 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') 00:16:46 executing program 3: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x4, 0xbb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000580)={0x2, 0x4e21, @multicast1}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000180)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000003800)='geneve0\x00', 0x10) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="007da1804886b1655e09966a7e07c44fecf87834ecdbb6650240e9635802006dcb1b3d4462fe59be4c704b17c759b22d78c09367f849dcb8494ee15dcf7d0932dbaed64f8c680c37873c7d65eecdf0eaed8aa6cb52ef5ae7ab35864fec9cb6832dcf658d3b207a59e9d55e0757fcf48c97ef843f7ede5be452bfdc5b8bda75db5addf79359646f5dd753b0a4dd8b547b8f2ee628bc7ae5039c5c0c46bc77bd6ca97da058650962621b87e61c3c970774ffcfb54b46469a6f0aa9b4c1aaeaeb19dbfd55799b"]) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000180)={0x2}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000100)={0xffff, 0x0, '\x00', 0x7c6bc81dfc7bf2fd, &(0x7f0000000580)}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fallocate(r1, 0x0, 0x7ff, 0x1) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000040)={0x4e}) r4 = fork() r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r5, 0x0, 0x120) kcmp(0x0, 0x0, 0x6, r5, r0) ptrace(0x10, r4) ptrace$getsig(0x4202, r4, 0x0, &(0x7f0000000380)) socket$nl_netfilter(0x10, 0x3, 0xc) 00:16:47 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 42) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) [ 1519.962247] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:16:47 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {0x3}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:16:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f0000000440)={0x4, 0x91}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/41, 0x29}, {&(0x7f0000000080)=""/77, 0x4d}, {&(0x7f0000000100)=""/199, 0xc7}, {&(0x7f0000000280)=""/25, 0x19}, {&(0x7f00000002c0)=""/226, 0xe2}], 0x5) migrate_pages(0x0, 0x4, &(0x7f0000000200)=0x7a52b9a7, &(0x7f0000000240)=0x1) 00:16:47 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x80000}, 0xf3) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) 00:16:47 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shd', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:16:47 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x0, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) [ 1520.000472] FAULT_INJECTION: forcing a failure. [ 1520.000472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1520.002113] CPU: 0 PID: 13258 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1520.002864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1520.003747] Call Trace: [ 1520.004033] dump_stack+0x107/0x167 [ 1520.004428] should_fail.cold+0x5/0xa [ 1520.004840] _copy_from_user+0x2e/0x1b0 [ 1520.005267] __copy_msghdr_from_user+0x91/0x4b0 [ 1520.005766] ? __ia32_sys_shutdown+0x80/0x80 [ 1520.006258] ? udp_v6_push_pending_frames+0x360/0x360 [ 1520.006815] ? inet6_sendmsg+0xbd/0x140 [ 1520.007239] ? inet6_compat_ioctl+0x320/0x320 [ 1520.007719] ? __sock_sendmsg+0x55/0x190 [ 1520.008163] sendmsg_copy_msghdr+0xa1/0x160 [ 1520.008628] ? do_recvmmsg+0x6d0/0x6d0 [ 1520.009049] ? __lock_acquire+0x1657/0x5b00 [ 1520.009512] ___sys_sendmsg+0xc6/0x170 [ 1520.009538] ? sendmsg_copy_msghdr+0x160/0x160 [ 1520.009548] ? vmacache_find+0x55/0x2a0 [ 1520.009560] ? __lockdep_reset_lock+0x180/0x180 [ 1520.009575] ? lock_acquire+0x197/0x470 [ 1520.009584] ? find_held_lock+0x2c/0x110 [ 1520.009598] ? __might_fault+0xd3/0x180 [ 1520.013407] ? lock_downgrade+0x6d0/0x6d0 [ 1520.013866] ? asm_exc_page_fault+0x1e/0x30 [ 1520.014361] __sys_sendmmsg+0x195/0x470 [ 1520.014806] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1520.015290] ? lock_downgrade+0x6d0/0x6d0 [ 1520.015762] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1520.016298] ? wait_for_completion_io+0x270/0x270 [ 1520.016836] ? rcu_read_lock_any_held+0x75/0xa0 [ 1520.017371] ? vfs_write+0x354/0xa70 [ 1520.017782] ? fput_many+0x2f/0x1a0 [ 1520.018187] ? ksys_write+0x1a9/0x260 [ 1520.018605] ? __ia32_sys_read+0xb0/0xb0 [ 1520.019061] __x64_sys_sendmmsg+0x99/0x100 [ 1520.019521] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1520.020091] do_syscall_64+0x33/0x40 [ 1520.020505] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1520.021070] RIP: 0033:0x7fa76daafb19 [ 1520.021488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1520.023525] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1520.024356] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1520.025144] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1520.025935] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1520.026733] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1520.027519] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 [ 1520.083680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1520.388326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.286096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.321993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1534.330036] FAULT_INJECTION: forcing a failure. [ 1534.330036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1534.332810] CPU: 1 PID: 13299 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1534.334252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1534.335957] Call Trace: [ 1534.336499] dump_stack+0x107/0x167 [ 1534.337253] should_fail.cold+0x5/0xa [ 1534.338043] _copy_from_user+0x2e/0x1b0 [ 1534.338872] __copy_msghdr_from_user+0x91/0x4b0 [ 1534.339825] ? __ia32_sys_shutdown+0x80/0x80 [ 1534.340731] ? udp_v6_push_pending_frames+0x360/0x360 [ 1534.341781] ? inet6_sendmsg+0xbd/0x140 [ 1534.342610] ? inet6_compat_ioctl+0x320/0x320 [ 1534.343512] ? __sock_sendmsg+0x55/0x190 [ 1534.344340] sendmsg_copy_msghdr+0xa1/0x160 [ 1534.345211] ? do_recvmmsg+0x6d0/0x6d0 [ 1534.346002] ? __lock_acquire+0x1657/0x5b00 [ 1534.346908] ___sys_sendmsg+0xc6/0x170 [ 1534.347696] ? sendmsg_copy_msghdr+0x160/0x160 [ 1534.348629] ? vmacache_find+0x55/0x2a0 [ 1534.349449] ? __lockdep_reset_lock+0x180/0x180 [ 1534.350415] ? lock_acquire+0x197/0x470 [ 1534.351215] ? find_held_lock+0x2c/0x110 [ 1534.352052] ? __might_fault+0xd3/0x180 [ 1534.352865] ? lock_downgrade+0x6d0/0x6d0 [ 1534.353702] ? asm_exc_page_fault+0x1e/0x30 [ 1534.354602] __sys_sendmmsg+0x195/0x470 [ 1534.355413] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1534.356302] ? lock_downgrade+0x6d0/0x6d0 [ 1534.357158] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1534.358191] ? wait_for_completion_io+0x270/0x270 [ 1534.359173] ? rcu_read_lock_any_held+0x75/0xa0 [ 1534.360129] ? vfs_write+0x354/0xa70 [ 1534.360912] ? fput_many+0x2f/0x1a0 [ 1534.361646] ? ksys_write+0x1a9/0x260 [ 1534.362447] ? __ia32_sys_read+0xb0/0xb0 [ 1534.363292] __x64_sys_sendmmsg+0x99/0x100 [ 1534.364147] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1534.365216] do_syscall_64+0x33/0x40 [ 1534.365985] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1534.367052] RIP: 0033:0x7fa76daafb19 [ 1534.367805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1534.371511] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 00:17:01 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {0x4}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:17:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = memfd_create(&(0x7f0000000140)='\xb74\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x84wP\xc9b\xa3\x8f\xe1\xedf\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\xd48\r\x17\x9f0\xa7\xbc\xb5{\xe9\x1b\xe1\xfc\x91v\x9a\xd5P\x90\x18\x1a\x19\xa7\xb0\xa5\xdf\xa3}\xe84\xa2\xed\xe3w\x89\xe5o\xaa\xa8\xedO)\xf7S~\xa6m\b\xd7\x8e2\x9dR\'\'9\x83\x83\x9ai\a\'V`7\xa6\xcfW\x00\xdd\x04UP2\xee\x05\xc3\xa8\xde)\xbc\xe2\xec2PGta\xa2\xb9\xdc\x89t\xad\xf3F\xc2\x95\xbfC\x03\xd0>\xc9\x12t\xdcxS[\xe2\x8c9n\x80\xf7\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00M[N\xad\xb9\xa0Cr\a\x00\f\xc6\x11\x01re\xc7\xffn\xde\xeb\xe8G~\xf7\t\xc5\xdczK+h\x8e\x8a\xdep\x8bYaK\xf4\x1e\xff5\xf0>\xce\xe0)=\xf0\xd5\xef\x9e\x02/\xbd\x17\x10\xb7;\x8f\xba\xba\xab9\xe2\x8f\x9e\xb7\xbb\xd9m\x03\x94\xe1\xd29\xfa\x9dP\xabs\xffu\xd3\xf5\xd8[\xccU\xa4\xc3\xaav\xd0\xca\x9e\xc50\xb5q\x80\x82\x7f\x16\x96{\x00\x00\x00', 0x3) fcntl$addseals(r2, 0x409, 0xd) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x101}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x9}}, './file1\x00'}) 00:17:01 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shd', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:17:01 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, 0x0, 0x100, 0x0, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x16}}}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x2000c0c0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x0, 0x26, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}]}]}, 0x1c}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 1534.373228] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1534.374967] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1534.376413] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1534.377847] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1534.379314] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x774, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x55}}}}, [@NL80211_ATTR_TX_RATES={0xc0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x8001, 0xfff, 0x80, 0x6, 0xfffb, 0x9]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x0, 0x9}, {0x4, 0x5}, {0x6, 0x2}, {0x7, 0x6}, {0x1, 0x5}, {0x6, 0x6}, {0x3, 0x8}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x8}, {0x4}, {0x1}, {0x2, 0x9}, {0x1, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x0, 0x4}, {0x4, 0x3}, {0x7, 0x5}, {0x5, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x1, 0x3}, {0x0, 0x6}, {0x2, 0x7}, {0x1, 0x8}, {0x2, 0xa}, {0x2, 0x7}, {0x2, 0x6}, {0x0, 0x1}, {0x7, 0xa}, {0x1, 0x7}, {0x5, 0x7}, {0x2, 0x1}, {0x6, 0x6}, {0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x5}, {0x2, 0x4}, {0x5, 0x3}, {0x3, 0x8}, {0x3, 0x1}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x9}, {0x5, 0xa}, {0x3, 0x7}, {0x4, 0x2}, {0x6, 0x3}, {0x3, 0x1}, {0x2}, {0x3, 0xa}, {0x0, 0x7}, {0x4, 0xa}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x0, 0x1b, 0x60, 0x2, 0x9, 0x4, 0x3, 0x6, 0x67, 0x0, 0x5, 0x4, 0x24, 0x1, 0x16, 0x60]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x7, 0xa}, {0x2, 0x1}, {0x1, 0x10}, {0x1, 0x8}, {0x4, 0x2}, {0x3, 0x3}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x1, 0x3}, {0x1, 0x6}, {0x4}, {0x7, 0x6}, {0x4, 0x8}, {0x3, 0x4}, {0x5, 0x2}, {0x5}, {0x2, 0xa}, {0x0, 0x4}, {0x3, 0xa}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x5}, {0x1, 0x1}, {0x1, 0x9}, {0x5, 0xa}, {0x4}, {0x7, 0x8}, {0x3, 0x7}, {0x1, 0x3}, {0x2}, {0x6, 0x1}, {0x7, 0x4}, {0x1, 0x4}, {0x4, 0xa}, {0x4, 0x7}, {0x6, 0xa}, {0x7, 0x9}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x6, 0x6}, {0x2, 0xa}, {0x6, 0x3}, {0x7}, {0x2}, {0x2, 0x3}, {0x5, 0x8}, {0x2}, {0x4, 0x4}, {0x6, 0x2}, {0x7, 0x6}, {0x6, 0x1}, {0x7, 0xa}, {0x3, 0x6}, {0x1}, {0x0, 0x6}, {0x3, 0x7}, {0x4, 0x8}, {0x4, 0xa}, {0x7, 0x7}, {0x2, 0x7}, {0x7, 0xa}, {0x0, 0xa}, {0x6, 0x3}, {0x7, 0x2}, {0x5, 0x1}, {0x7, 0x1}, {0x0, 0x8}, {0x1, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x348, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x1}, {0x1, 0x6}, {0x1, 0x2}, {0x3}, {0x7, 0x4}, {0x6, 0x8}, {0x2}, {0x3, 0x9}, {0x3, 0x5}, {0x3, 0x1}, {0x6, 0xa}, {0x3, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {0x1, 0x1}, {0x3, 0x2}, {0x1, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x7, 0x5}, {0x3, 0x7}, {0x2, 0x9}, {0x1, 0xa}, {0x3, 0x7}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x2, 0x7}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x9}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x2}, {0x3, 0x4}, {0x6, 0xa}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x5}, {0x1, 0x9}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x4}, {0x2, 0x2}, {0x3, 0x6}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xf0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x4}, {0x6, 0xa}, {0x0, 0x1}, {0x7, 0x4}, {0x6, 0xa}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0x1b, 0x60, 0x2]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x9}, {0x3, 0x6}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0xa}, {0x4, 0x2}, {0x7, 0x6}, {0x5, 0x6}, {0x1, 0x4}, {0x7, 0x8}, {0x1, 0x4}, {0x4, 0xa}, {0x0, 0x3}, {0x6, 0x7}, {0x2, 0x8}, {0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x3}, {0x7, 0x6}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0x7}, {0x4, 0x6}, {0x7, 0x4}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff8, 0x1ff, 0x2, 0x9, 0x21, 0x0, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7000, 0x401, 0x2, 0x400, 0x0, 0x101, 0x2]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x2}, {0x7, 0x8}, {0x1, 0x2}, {0x3, 0x9}, {0x4}, {0x0, 0x9}, {0x3, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x3}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x7}, {0x0, 0x11}, {0x0, 0x9}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x9}, {0x7, 0xa}, {0x1, 0x4}, {0x1, 0x6}, {0x4, 0xa}, {0x1, 0xa}, {0x0, 0x8}, {0x6, 0x1}, {0x1, 0x8}, {0x1, 0x3}, {0x6, 0x6}, {0x6}, {0x2, 0x5}, {0x6, 0x7}, {0x0, 0x8}, {0x7, 0xa}, {0x3, 0x6}, {0x6, 0x5}, {0x7, 0x7}, {0x1, 0x3}, {0x7}, {0x5, 0x9}, {0x2, 0x1}, {0x7, 0x9}, {0x3, 0x1}, {0x2, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x2, 0x6}, {}, {0x7, 0x2}, {0x1, 0x1}, {0x6, 0x5}, {0x6, 0x1}, {0x1, 0x7}, {0x2, 0xa}, {0x3, 0x6}, {0x2, 0x3}, {0x5, 0x8}, {0x4}, {0x3, 0x6}, {0x3, 0x5}, {0x2}, {0x2, 0x8}, {0x0, 0x8}, {0x2}, {0x7, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x4, 0x2}, {0x7, 0x1}, {}, {0x5, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x41, 0xbb, 0x6a3, 0xa22, 0x0, 0x1000, 0x8]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x36, 0x48, 0x9, 0x16, 0x60, 0x12, 0xc, 0x16, 0x16, 0x1b, 0xb, 0x36, 0xc, 0x48]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x60, 0x48, 0x10, 0x48, 0xc, 0xb, 0x9]}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x401, 0x200, 0xfffe, 0xe048, 0x0, 0x7, 0x3]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x5, 0x18, 0x4, 0x1b, 0x4, 0x30, 0x8, 0x30, 0x4, 0x48, 0x2, 0x1, 0x16, 0x6c, 0x6, 0x4, 0x2, 0x1, 0x24, 0x60]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x18, 0xc, 0x3, 0xc, 0xb, 0x0, 0x6c, 0x60, 0x30, 0x3, 0x2, 0xb, 0x18, 0x3, 0x36, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc5, 0x3f, 0xba, 0x5, 0x101, 0xaef, 0x7, 0x8]}}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x400, 0x3ff, 0x6, 0xd90a, 0x1, 0x3, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9dd1, 0x1a62, 0x8001, 0x5, 0x1, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0xa}, {0x7, 0x3}, {0x4, 0x2}, {0x5, 0x2}, {0x6, 0x3}, {0x6, 0x8}, {0x0, 0x6}, {0x5, 0x4}, {0x2, 0x7}, {0x7, 0x5}, {0x3, 0x5}, {0x4, 0x7}, {0x7, 0x4}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x8}, {0x5, 0x4}, {0x1, 0x7}, {0x5, 0x3}, {0x1, 0x4}, {0x6}, {}, {0x6, 0x2}, {0x6, 0x9}, {0x4, 0x3}, {0x3, 0x9}, {0x5, 0x4}, {0x3, 0x6}, {0x1, 0x4}, {0x1, 0x2}, {0x1, 0x3}, {0x3, 0x3}, {0x1, 0x4}, {0x4, 0x7}, {0x3, 0x6}, {0x7}, {0x7, 0x6}, {0x0, 0x9}, {0x7, 0x4}, {0x3, 0x6}, {0x4, 0xa}, {0x5, 0x7}, {0x2, 0x5}, {0x4, 0x1}, {0x5, 0xa}, {0x1, 0x6}, {0x3, 0x3}, {0x6, 0x6}, {0x1, 0x5}, {0x4, 0x6}, {0x5, 0x8}, {0x1, 0x2}, {0x0, 0x9}, {0x2, 0x2}, {0x0, 0x2}, {0x2, 0x1}, {0x1, 0x4}, {0x6, 0x8}, {0x1}, {0x3, 0x1}, {0x0, 0x2}, {0x1, 0xa}, {0x5, 0x1}, {0x2, 0x8}, {0x5, 0x4}, {0x6, 0x9}, {0x5, 0x5}, {0x5}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0x9, 0x5, 0x6c, 0x5, 0xb, 0x4, 0x4, 0x36, 0x24, 0x24, 0x1, 0x2, 0xb, 0x2, 0x9, 0x6, 0xb, 0x1b, 0x6c, 0x12, 0x24, 0x18, 0x30, 0x12]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4339, 0x400, 0x3ff, 0x71, 0x1f, 0x9, 0x240c]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x6}, {0x2, 0x6}, {0x0, 0x5}, {0x6, 0x3}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0x8}, {0x5, 0x2}, {0x2, 0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x6, 0x6}, {0x5, 0x1}, {0x7, 0x5}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0x6}, {0x5, 0x8}, {0x7, 0x2}, {0x3, 0x5}, {0x7, 0x9}, {0x5, 0x1}, {0x0, 0x3}, {0x3}, {0x4, 0x1}, {0x7, 0xa}, {0x1, 0x4}, {0x4, 0x3}, {0x4, 0x4}, {0x5, 0x7}, {0x3, 0x5}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0x1}, {0x5, 0x6}, {0x3, 0x5}, {0x0, 0x8}, {0x2, 0xa}, {0x0, 0x7}, {0x3, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x0, 0x7, 0x73, 0xff, 0x4, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x24, 0x6, 0x1, 0x1d, 0x30, 0x5, 0x2, 0x24, 0x60, 0x30, 0x48, 0x9, 0x12, 0x48, 0xb, 0x5, 0x60, 0x30, 0x12, 0x60, 0x60, 0x2, 0x12, 0x30, 0x18, 0x4, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x1}, {0x0, 0x3}, {0x4, 0x8}, {0x1, 0x7}, {0x5, 0x8}, {0x6, 0x5}, {0x6, 0x1}, {0x4, 0x6}, {}, {0x3, 0x5}, {0x3, 0xa}, {0x0, 0x4}, {0x2, 0x1}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x8}, {0x0, 0x7}, {0x6, 0x7}, {0x1, 0x4}, {0x1}, {0x0, 0x7}, {0x0, 0x3}, {0x7, 0x1}, {0x3, 0x9}, {0x7, 0x6}, {0x1}, {0x3}, {0x6, 0xa}, {0x3, 0x5}, {0x1, 0x9}, {0x4, 0x4}, {0x5, 0x6}, {0x5, 0x4}, {0x3}, {0x3, 0x9}, {0x7, 0x5}, {0x7, 0x5}, {0x6, 0x9}, {0x1, 0x9}, {0x7, 0xa}, {0x3, 0x2}, {0x6, 0x2}, {0x3, 0x5}, {0x3, 0x9}, {0x0, 0x8}, {0x0, 0x8}, {0x4, 0x3}, {0x2, 0x3}, {0x3}, {0x2, 0x7}, {0x6, 0x3}, {0x1, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0xb, 0x2, 0x30, 0x30, 0x18, 0xc, 0xb, 0x4, 0x30, 0x6, 0x6c, 0x24, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x9}, {0x4, 0x4}, {0x0, 0x3}, {0x3, 0xa}, {0x2, 0x1}, {0x3, 0x8}, {0x2, 0x2}, {0x2, 0x8}, {0x6, 0x9}, {0x6, 0x5}, {0x0, 0x3}, {0x7}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x5}, {0x4}, {0x7, 0x5}, {0x4}, {0x2, 0x6}, {0x4, 0x6}, {0x4, 0x2}, {0x3, 0x7}, {}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0x9}, {0x3, 0xa}, {0x1, 0x6}, {0x5, 0x2}, {0x7}, {0x1, 0x5}, {0x3, 0x8}, {0x5, 0x3}, {0x5, 0x7}, {0x4, 0x1}, {0x4, 0x1}, {0x6, 0x2}, {0x2, 0xa}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x7}, {0x6, 0x3}, {0x2, 0x2}, {0x7}, {0x0, 0x6}, {0x7, 0xa}, {0x1}, {0x2, 0xa}, {0x0, 0x2}, {0x5, 0x2}, {0x4, 0x3}, {0x6, 0x6}, {0x4, 0x1}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x3}, {0x1, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x4, 0x7}, {0x3, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x7}, {0x4, 0x5}, {0x5, 0xa}, {0x7, 0x6}, {0x5, 0x9}, {0x3, 0x5}, {0x5, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x6, 0x4}, {0x5, 0x9}, {0x7, 0x4}, {0x4, 0x9}, {0x5, 0x5}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x4}, {0x7, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x3, 0x1}, {0x4, 0x8}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x2}, {0x7, 0x7}, {0x6, 0x3}, {0x6, 0x5}, {0x1, 0x2}, {0x5, 0xa}, {0x0, 0xa}, {0x5, 0x5}, {0x1, 0xa}, {0x4, 0x2}, {0x4}, {0x5, 0xa}, {0x0, 0x1}, {0x6, 0x4}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x6}, {0x7, 0x4}, {0x7, 0x8}, {0x3, 0x5}, {0x1, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0x2a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0x60, 0xc, 0xc, 0x16, 0xc, 0x12, 0x30, 0x5, 0x48, 0x41, 0x70]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x60, 0x18, 0x16, 0x5, 0x1, 0x48, 0x5, 0x7e, 0x12, 0x30, 0x48, 0x60, 0x12, 0x1, 0xb, 0x16, 0x16, 0x18, 0xb, 0x3, 0x18, 0x30, 0x48, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x401, 0x7, 0x3ff, 0x0, 0xff, 0x7, 0x1]}}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x9, 0x48, 0xb, 0x4, 0x5, 0x24, 0x0, 0x30, 0x48, 0x36]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x5}, {0x4, 0x7}, {0x3, 0x1}, {0x4}, {0x3, 0x5}, {0x1}, {0x7, 0x7}, {0x6}, {0x6}, {0x2, 0x6}, {0x4, 0x4}, {0x1, 0x2}, {0x4, 0x6}, {0x1, 0xa}, {0x4, 0x2}, {0x0, 0x8}, {0x0, 0x9}, {0x2, 0x1}, {0x0, 0x2}, {0x4, 0x4}, {0x6, 0x5}, {0x6, 0xa}, {0x6, 0x4}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x5}, {0x3, 0xa}, {0x1, 0xa}, {0x4, 0x2}, {0x0, 0x4}, {0x4, 0x7}, {0x1, 0xa}, {0x5, 0x2}, {0x4, 0x8}, {0x6, 0x2}, {0x7, 0x1}, {0x6, 0x9}, {0x4, 0x8}, {0x4, 0xa}, {0x3, 0x4}, {0x3}, {0x1, 0x2}, {0x1}, {0x4, 0x8}, {0x0, 0x5}, {0x6}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x101, 0x1f, 0x1, 0x9, 0x9]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x4}, {0x7, 0x7}, {0x1, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x9}, {0x6, 0x3}, {0x5, 0x3}, {0x5, 0x2}, {0x1, 0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x1}, {0x7, 0x3}, {0x6, 0x2}, {0x7, 0x4}, {0x0, 0x1}, {0x4, 0x9}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x6c, 0x24, 0x1b, 0x9, 0x36, 0xc, 0x6c, 0x60, 0x6c, 0x1b, 0x25, 0x30]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x7, 0x6, 0x3, 0x8, 0x46b4, 0x8001]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x3}, {0x5, 0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0xa}, {0x1, 0xa}, {0x1, 0x4}, {0x3, 0x6}, {0x0, 0x2}, {0x7, 0x2}, {0x7, 0x3}, {0x3, 0x4}, {0x0, 0x2}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x4}, {0x7, 0x3}, {0x1}, {0x4, 0x6}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x4}, {0x1, 0x6}, {0x0, 0x2}, {}, {0x1, 0x7}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0x1}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x6}, {0x6, 0x2}, {0x0, 0x4}, {0x4}, {0x2}, {0x0, 0x5}, {0x1, 0x8}, {0x5, 0x5}, {0x3, 0x3}, {0x2, 0x9}, {0x3, 0x4}, {0x0, 0x6}, {0x3, 0x9}, {0x4, 0x1}, {0x4, 0x7}, {0x3, 0x5}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x5}, {0x6, 0x5}, {0x6, 0x8}, {0x3, 0x2}, {0x0, 0xa}, {0x4, 0xa}, {0x3, 0x5}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x6, 0x2}, {0x4, 0x9}, {0x2, 0x9}, {0x2, 0x9}, {0x7, 0x1}, {0x1, 0x3}, {0x7, 0x8}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x9}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x3f, 0x1, 0x7, 0xfff, 0xff, 0x1f, 0x3f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x9}, {0x2}, {0x5, 0x2}, {0x6, 0x9}, {0x3, 0x7}, {0x7, 0x5}, {0x1, 0x1}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x7}, {0x6}, {0x1, 0x5}, {0x2, 0x9}, {0x4, 0x7}, {0x5, 0x2}, {0x0, 0xa}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x1}, {0x1, 0x6}, {0x5, 0x4}, {0x1, 0x5}, {0x3, 0xa}, {0x0, 0x6}, {0x2, 0x2}, {0x6, 0x6}, {0x5, 0x3}, {0x2, 0x4}, {0x3, 0x4}, {0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x4, 0x2, 0x1b, 0x12, 0x48, 0x1b, 0x16, 0x2, 0x6, 0x30, 0x4, 0x15, 0x36, 0x2, 0x16, 0x6c, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb28, 0x3, 0x0, 0x4, 0x6, 0x4000, 0x4ca, 0x1]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x4}, {0x6, 0x8}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x6}, {0x1, 0x6}, {0x2, 0x6}, {0x3, 0x2}, {0x2, 0x8}, {0x1, 0x9}, {0x5, 0x1}, {0x2, 0x5}, {0x6, 0x1}, {0x0, 0x1}, {0x3, 0x9}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0x1}, {0x7, 0x8}, {0x5, 0x1}, {0x5, 0x2}, {0x6, 0x1}, {0x6}, {0x2, 0x7}, {0x5, 0x8}, {0x6, 0x6}, {0x1, 0x1}, {0x7, 0x4}, {0x5, 0x5}, {0x4, 0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x5, 0x7}, {0x2, 0x6}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x3}, {0x7}, {0x4}, {0x0, 0x3}, {0x7, 0xa}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0xa}, {0x2, 0x5}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x8}, {0x0, 0x9}, {0x5, 0x2}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x3}, {0x3, 0x4}, {0x0, 0x5}, {0x0, 0x8}, {0x6, 0x3}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x6}, {0x3, 0x2}, {0x5, 0x9}, {0x7, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x0, 0x7}, {0x6, 0xa}, {0x2, 0x7}, {0x2, 0x7}, {0x7, 0x5}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0x9}, {0x4}, {0x4, 0x9}, {0x0, 0x7}, {0x1, 0xa}, {0x3}, {0x3, 0x6}, {0x7, 0x5}, {0x2, 0x2}, {0x4, 0x4}, {0x2, 0x9}, {0x6, 0x5}, {}, {0x4, 0x9}, {0x5, 0x3}, {0x5, 0x3}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x60, 0x1b, 0x1b, 0x12, 0x6c, 0x4, 0x30, 0x2, 0x9, 0x3, 0x3, 0x3, 0x18, 0x12, 0x1b, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x7}, {0x1, 0x4}, {0x6, 0x7}, {0x0, 0x9}, {}, {0x3, 0x1}, {0x3, 0x2}, {0x3, 0x5}, {0x7, 0x7}, {0x6, 0x5}, {0x0, 0x6}, {0x2, 0x8}, {0x0, 0x2}, {0x7, 0x6}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0xa}, {0x1, 0x3}, {0x6, 0x4}, {0x7, 0x4}, {0x4, 0x4}, {0x4, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x3, 0x6}, {0x1, 0x9}, {0x2, 0x7}, {0x0, 0xa}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x3}, {0x7, 0x1}, {0x2, 0x2}, {0x7, 0x7}, {0x2, 0x1}, {0x5, 0x9}, {0x4, 0xa}, {0x1, 0x4}, {0x7, 0x8}, {0x5, 0x8}, {0x0, 0x2}, {0x2, 0x9}, {0x4, 0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x7}, {0x2, 0x3}, {0x2, 0x1}, {0x5, 0x3}, {0x7}, {0x1, 0x2}, {0x4}, {0x3, 0x9}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x774}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 00:17:01 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x104800) write$vga_arbiter(r1, &(0x7f0000000040)=@unlock_all, 0xb) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) 00:17:01 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'ip6gre0\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4011}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) socket$inet6_udplite(0xa, 0x2, 0x88) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRESHEX, @ANYRES32]) r3 = socket$inet(0x2, 0xa, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x80000001, 0x103881) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000180)={'icmp\x00'}, &(0x7f0000000240)=0x1e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) dup3(r3, r0, 0x0) 00:17:01 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x0, 0x9, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:17:01 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 43) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:17:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000001000028", 0x5d, 0x400}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000d4f4655fd4f4655fd4f4655f000000000000040008000000000000000500000006", 0x29, 0x4100}], 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="fee1f66ecb9db00f4740dbab3fe9010000000000000071663f938ef62ee512180cbd864bb87a7f361230959a487f691c621129afe8836cd0817cf2ff1bbeef81610d8081343bec3bf3140bf1dc355bcb437526f20e2869ee4cc4c33c01ec5717302d6fba1f1ea0e6f8bd40347c34543fb2641541adbb1308389a19a646cb935cde5d66d26f9f33a6ef6377a9"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = dup(r0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x3032010, &(0x7f0000000380)={'trans=unix,', {[{@msize={'msize', 0x3d, 0x5}}, {@cachetag={'cachetag', 0x3d, '(::-\']({'}}, {@privport}, {@posixacl}, {@noextend}], [{@obj_role={'obj_role', 0x3d, 'ext4\x00'}}, {@uid_gt={'uid>', r2}}, {@permit_directio}]}}) getdents(r1, 0x0, 0x0) 00:17:01 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x6a4b40, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r1, 0x0, 0x120) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r2, 0x0, 0x120) r3 = signalfd4(r0, &(0x7f0000000040)={[0x400]}, 0x8, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x4000}, {r2, 0x4010}, {r3, 0x109}, {r0, 0x8040}], 0x4, &(0x7f0000000100), &(0x7f0000000140)={[0x7]}, 0x8) [ 1534.609546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1547.485462] Bluetooth: hci4: command 0x0406 tx timeout 00:17:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @pid}]}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x40, r3, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x40, r6, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x12}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x243}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x530}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x101, 0x1000, 0xf5c, 0x81, 0xfff9, 0x1]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1000}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x9) 00:17:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x0, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:17:16 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shd', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:17:16 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r3, 0x0, 0x120) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000240)={{r4}, "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"}) write$vga_arbiter(r0, &(0x7f0000000200), 0xf) openat(r2, &(0x7f0000000100)='./file0\x00', 0xc80, 0x126) 00:17:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 00:17:16 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 44) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:17:16 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {0x5}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:17:16 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000000)) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x50, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendmmsg$inet6(r0, &(0x7f0000005240)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000002c0)="70de9461acd0b344aeb03875902433bb9eac2d23a9f148c836ca7f77a01e9c60d4b9768b068f42d7f337f886d98d87340b0563a67a4fb1373635287475136ffbe620c64f7799a6211e8300dab2c2506aaf93", 0x52}], 0x1, &(0x7f0000000340)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xc6dd}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000380)="6977e97205daf69f08f38c548923df037cd010294cca4e67f815ae0c6e2f5928e684bb417fe814420a9226cc8171f21040055159296e292a217143c63f19fc6348c2a913bfe3c2f792cfc5e027aff86a47521eef53fb7d6640ac4dafefc92240b5984dad8d498b82290703c056671c956b573777c84aa7ba2575951879facddfe81c1e9d2c", 0x85}, {&(0x7f00000014c0)="ca664d06f7fcd63dee3195ea83d84de0fc1fea2c99a5d2f6a1965bfa373aa6e6095e6faedafa5c607f45e4b1ae88d4ed79fd28342abc7feedb8d19860e21860d410033dca5e165dd28d905c3665059ba324ffb59adc4e6b755b063bbd45a207ab92fd7e9daccf4dd32405f50ba495031b0c18e08056051ef0b4e765b27c091819d912b7d73c20330041170ffc1a1a7043c0592a78daad2c9c68f5f40af3244beba292a6e412542429795b7afe6ada4107ad828e566d72ff1aee1d97bf87b9a94b7773aa554135e23ae9c8f4f98db967ff64e6946cdae24221abf2e44f1cf89953584a6465406a0ba", 0xe8}, {&(0x7f0000000440)="1f545bb98bac061cbdee20e3e3515dafd7dc86354dfb55f27170be9d13f2f0cd97fb9f8f9a258655592fcc8ed298f051d65740f3eeba85", 0x37}, {&(0x7f00000015c0)="b54ebb325a8a66a486c8b134d1f547dbff93c159354d27ad5d59dc174cae4d617f6c83a402a1537c1b980ed9faba2fa592ca0a0d1856b582243010b7e10ae08d744fec26a72042503606f12efedd87224f5c1811eddf0b7ddef3427a79f858877d006f8b6c2230d2b3c721c474846276fa9b90b7381c7662681cf7b5743cc8cf011fe538c2757f06ffa9dd65db48ae6f1cd7049202444b59428172221e49222647a24668bd4ba64d471f73b1e35f24", 0xaf}, {&(0x7f0000001680)="c89b970f95298e7a9e7283a3f269adb1a1f22ae87a0e403681aae3901575ae2f863f8496b708699dc41dd3d39e2ee03124e8a3b6d94505b057bf3e1c318b6c21e5d69c038c7bbd962269eb667d092837d525b7dfa4d1d5a7349b0834c146d2f50453800717b02f09f1b837914caff795fe1991ac167254187e51ad6427472f5f54a0c29fceb4040363742701b12c7bd0b83ba303d98ecf042c", 0x99}, {&(0x7f0000000480)="a3855f6af18381a1587df61c104f", 0xe}], 0x6, &(0x7f00000017c0)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r1}}}, @hoplimit={{0x14, 0x29, 0x34, 0x77ca}}], 0x40}}, {{&(0x7f0000001800)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000001840)="44b4a26c70c55f1e", 0x8}, {&(0x7f0000001880)="473a72be062e079f5e7b3e62f620f15732eb0e9d01ab31bd20870c3f3f61ab73e37d97bd72422ddfffa5113d205e140715828b1102678f8ba11a39edda07f5ba6942da5b7873a61d261099ec355a4a236f7a64f5d5d47a48a747654afafe42c548d7b92d706a38e33905ae2084d195394bf80610e255588c63044fb3881fa657", 0x80}, {&(0x7f0000001900)="54f4888c1def263da4751317b9089aa06abacde9be3c60468d49599c31d7c1d3137c33ab57c006c425d6bb972173bd253bfc", 0x32}, {&(0x7f0000001940)="b299dcac641db086d9ee291a2f1fbea2bf8cd9056771184f8e70e87234e32fd49de98bbf1409259faf55440b686150d89eab1bf22a327500033a3160f2738efb3756a85bea525752c10ea799febc990f28bcf1367d7447a6ad95", 0x5a}, {&(0x7f00000019c0)="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", 0xfa}, {&(0x7f0000001ac0)="37cc518b943e42282520fd874d357b8fe4f8eec3de628c7e98bb6bdc1d91c8038c672fb5e4a475d62c3278b9ba05509f7e1882f533dfaa2ee924eace1312a42fdd51b49e74a64698defae593f4418fb3c02ffcba7ba38d8db250a2bd31b9c8fef41865f447773f36fcd30e6993805634dae227b1d711ae49e053dcfa4dc0e015684f60e421cdd5a06c8746f7b2ebbc176ca7f17cfd1f85abc9b87abd5e27d361a32f9e0871fda443758500b08c37fd53f257195299ab547a64ca98dd", 0xbc}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000001b80)="b65d2111061381fc958d0578dd3eacfaa62e6164c659cd3611f4765c8c1fa1c49e002f4c3d87c9dbf2c60e295b857369db9ac3978bfe07910856c551253f9db9eca032978d6b9aab47b1023e2cff69a83806cdd1f77626e0a4156677ba7cc05c738d7647b50cd8db9ff04e520e991b96319acd244c99600da9deea7fb441c02304a0e8aecddd3fe2995600fa06fe979971271463ae5da60701a95d35c07304318a53964b7ff1da6b6ed3721df15a72b2", 0xb0}], 0x8}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001cc0)="b11beeb9de6d1d0772a65b7324e233420eba571bf87bb19fe4785c332cb3bc5b20a063ff6ca9dc244c03cf8c4f9d0b4aad9b", 0x32}, {&(0x7f0000002e00)="135846000aaede5e3614b3bc3d9ce63306f381d769f8c275882842f47b4586246bfe535990fa763cd757b89a50f9899dbc767fc60db90784c5c025241a4369547cdb253baf2daad458eb2517e31c5e09478fe6161bb9453ec78f06762c81a56cd4e6f5ffe42a6f1b628d58889274b5f174e9039002a83224dbe859961ae50b4e7e59c9bd97fe594d9eda8b4c2e5bdd15e3f4164fb697450e2d72d15f8970270dbdfe458dfc344c56e0742d1223f6cea6923446307c078d196d865412d263f00dc93e366e7647365fca009e29b300f67bc35e57f5ac0bdc74bb6e8eb59c", 0xdd}, {&(0x7f0000002f00)="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", 0x1000}, {&(0x7f0000003f00)="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", 0x1000}, {&(0x7f0000004f00)="6a71a185d86e9f582c456a3b844739ef17fc1da4039ad4428f88726187b68d462758e1946f7ab483a16248342ae01e415440eeefaea907b9d5a7e5b08465bef61f2ecb59ed6baa5827387d03cc417c7779e35879b6057b982d57be7e2e0c34df18fee492507cde8111c079f62c7adfb51027f81455398140331a5b0d76bb18ff0375d28b2180b73dcf334d349ec2a9dc2f508513af1ccd1893b9914c00751449723ad4fd443a20db638695268473d39f467cff20e237", 0xb6}], 0x5, &(0x7f0000004fc0)=[@flowinfo={{0x14, 0x29, 0xb, 0xeb7a}}, @dstopts={{0xc8, 0x29, 0x37, {0x4, 0x15, '\x00', [@generic={0x81, 0x14, "ce68a3619fb5c0a6bf011e06e43c9b120c990cef"}, @generic={0x77, 0x6c, "08034ffdb8f9dbc6f681a0230f964ac7591f0a9049469b289c916154c451dba3ad59ae1649bbc2c153a94cf7e93d8f195023fd24dce92a799d8f36aadfd99210053cc23db4815541a7501c7ad112750a08ae6485532370352358c27cff2c5f6b105b07ce28fce36b791adb1c"}, @enc_lim={0x4, 0x1, 0x80}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x1, 0x40, 0x0, [@loopback, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00', @loopback]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hopopts_2292={{0xc0, 0x29, 0x36, {0x0, 0x15, '\x00', [@generic={0x1, 0xa6, "7d00a6aa3db1c537497b6587c551de7c85eeb7dcbefec8127a2d0ad6bdadaae5f87be430869d3254952149d8a08720f90798fc6598841fa06a0eed52ff98484188351cdc518dbe65f4457a2f70fd023b6e3636abc65dba94e832c515e8f3d1bb44137872137ebc368d3e747def4d149a571ba5013681ef8430a0a6719fda9d64829ed02adffe0dc448858584076d4c763d4807837449d7afb4552dc68cbf560b8c1781881d5a"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x10}}, @pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x250}}], 0x4, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x80000001}, 0x1c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x0, 0x7ff, 0x1, 0x8}) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r3, 0x0, 0x120) write(r3, &(0x7f0000000140)="d5ddf37d649466100e4137ff4dbef3bf32fab80e518bd8e2f87ea7f9154e9ccd0e9cfd9f1a3820afeac3128e2f86e57a70533115c035b613e86eaf32f3a42ebbfb37ce96be9955beff9da0d42a9f522b6b8c56c8628dd444274a54cda5851bb2bdffbb9980ed877529af78db25027b8d17ce43faf9a516d797889f9fd1a7cd70002add14ba2eca7cc6bbf2589f64beeaa640307ddb5844a2461207b0795e732d133dbcef0c29", 0xa6) [ 1549.367659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1549.389185] FAULT_INJECTION: forcing a failure. [ 1549.389185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1549.391901] CPU: 1 PID: 13321 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1549.393334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1549.395051] Call Trace: [ 1549.395604] dump_stack+0x107/0x167 [ 1549.396367] should_fail.cold+0x5/0xa [ 1549.397152] _copy_from_user+0x2e/0x1b0 [ 1549.397972] __copy_msghdr_from_user+0x91/0x4b0 [ 1549.399172] ? __ia32_sys_shutdown+0x80/0x80 [ 1549.400235] ? udp_v6_push_pending_frames+0x360/0x360 [ 1549.401475] ? inet6_sendmsg+0xbd/0x140 [ 1549.402446] ? inet6_compat_ioctl+0x320/0x320 [ 1549.403516] ? __sock_sendmsg+0x55/0x190 [ 1549.404498] sendmsg_copy_msghdr+0xa1/0x160 [ 1549.405538] ? do_recvmmsg+0x6d0/0x6d0 [ 1549.406516] ? __lock_acquire+0x1657/0x5b00 [ 1549.407518] ___sys_sendmsg+0xc6/0x170 [ 1549.408317] ? sendmsg_copy_msghdr+0x160/0x160 [ 1549.409247] ? vmacache_find+0x55/0x2a0 [ 1549.410060] ? __lockdep_reset_lock+0x180/0x180 [ 1549.411035] ? lock_acquire+0x197/0x470 [ 1549.411842] ? find_held_lock+0x2c/0x110 [ 1549.412684] ? __might_fault+0xd3/0x180 [ 1549.413494] ? lock_downgrade+0x6d0/0x6d0 [ 1549.414339] ? asm_exc_page_fault+0x1e/0x30 [ 1549.415258] __sys_sendmmsg+0x195/0x470 [ 1549.416072] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1549.416944] ? lock_downgrade+0x6d0/0x6d0 [ 1549.417806] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1549.418792] ? wait_for_completion_io+0x270/0x270 [ 1549.419770] ? rcu_read_lock_any_held+0x75/0xa0 [ 1549.420705] ? vfs_write+0x354/0xa70 [ 1549.421463] ? fput_many+0x2f/0x1a0 [ 1549.422198] ? ksys_write+0x1a9/0x260 [ 1549.423013] ? __ia32_sys_read+0xb0/0xb0 [ 1549.423862] __x64_sys_sendmmsg+0x99/0x100 [ 1549.424726] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1549.425770] do_syscall_64+0x33/0x40 [ 1549.426563] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1549.427626] RIP: 0033:0x7fa76daafb19 [ 1549.428390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1549.432154] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1549.433720] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1549.435195] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1549.436643] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1549.438103] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1549.439577] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:17:16 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10204, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x10, 0x0, 0x1000002) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) utimensat(r0, 0x0, &(0x7f0000000200), 0x0) syz_open_dev$vcsn(0x0, 0xef03, 0x240000) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x6, 0x0, 0x1, 0x83, 0x6, @remote}, 0x14) openat(0xffffffffffffffff, 0x0, 0x80000, 0x11b) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xa57a, 0x0, 0x0, 0x4}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x762, &(0x7f0000000000)={0x0, 0xf660, 0x4, 0x6, 0x14}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x6000, @fd_index=0xa, 0x1, &(0x7f0000000440)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/234, 0xea}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/70, 0x46}], 0x6, 0x19, 0x1, {0x0, r1}}, 0x80000000) writev(r2, &(0x7f0000000080)=[{&(0x7f0000001380)="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", 0x1ea}], 0x1) 00:17:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x41) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @ipv4=@dev}]}]}, 0x28}}, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) ptrace(0x11, 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) pread64(r2, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x1000}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x2f, 0x5, 0x6, 0x9, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x8001, 0x20}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="6772650800000000000000bf120000f1", @ANYRES32=0x0, @ANYBLOB="0008780000000005000000084727001c00680000082f9078e0000002ac1414bb00004404e8730000"]}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd8, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5c4}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6a7dbee4}, @ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xffffffff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x294c}]}, 0xd8}, 0x1, 0x0, 0x0, 0x400}, 0x2044010) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x3, 0xd8, 0xff, 0x0, 0x9, 0x13882, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0x4, 0x7f, 0x40, 0x5, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x40}, 0x0, 0x1, r3, 0xb20d19c4de386f8d) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:17:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @pid}]}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x40, r3, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x40, r6, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x12}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x243}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x530}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x101, 0x1000, 0xf5c, 0x81, 0xfff9, 0x1]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1000}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x9) [ 1549.551877] sg_write: data in/out 275158080/124 bytes for SCSI command 0x1a-- guessing data in; [ 1549.551877] program syz-executor.1 not setting count and/or reply_len properly [ 1549.577940] sg_write: data in/out 275158080/124 bytes for SCSI command 0x1a-- guessing data in; [ 1549.577940] program syz-executor.1 not setting count and/or reply_len properly 00:17:16 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 45) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) [ 1549.631148] mac80211_hwsim hwsim12 wlan1: refused to change device tx_queue_len 00:17:16 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) [ 1549.682972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:17:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) creat(&(0x7f0000000340)='./file1\x00', 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) chdir(&(0x7f0000000280)='./file1\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) futimesat(r0, &(0x7f0000000000)='./mnt\x00', 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') r1 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) openat$sysfs(0xffffffffffffff9c, &(0x7f00000015c0)='/sys/module/pcmcia_core', 0x400100, 0x10) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x5b) openat(0xffffffffffffffff, &(0x7f0000001580)='mnt/encrypted_dir\x00', 0x202, 0x0) recvmmsg(r1, &(0x7f0000001400)=[{{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000400)=[{&(0x7f0000000500)=""/220, 0xdc}], 0x1, &(0x7f0000000600)=""/188, 0xbc}, 0x1}, {{&(0x7f0000000440)=@isdn, 0x80, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/86, 0x56}, {&(0x7f0000000740)=""/124, 0x7c}, {&(0x7f00000007c0)=""/62, 0x3e}, {&(0x7f0000000800)=""/243, 0xf3}, {&(0x7f0000000900)=""/105, 0x69}], 0x5, &(0x7f0000001e00)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/188, 0xbc}, {&(0x7f0000000ac0)=""/220, 0xdc}, {&(0x7f0000000bc0)=""/63, 0x3f}], 0x3, &(0x7f0000000c40)=""/16, 0x10}, 0x5}, {{&(0x7f0000000c80)=@tipc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000d00)=""/29, 0x1d}], 0x1, &(0x7f0000000d80)=""/77, 0x4d}, 0x400}, {{&(0x7f0000000e00)=@nfc_llcp, 0x80, &(0x7f0000001280)=[{&(0x7f0000000e80)=""/238, 0xee}, {&(0x7f0000000f80)=""/176, 0xb0}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000001100)=""/156, 0x9c}, {&(0x7f00000011c0)=""/169, 0xa9}, {&(0x7f0000001040)=""/120, 0x78}], 0x6, &(0x7f0000001300)=""/240, 0xf0}, 0x7f}], 0x5, 0x0, &(0x7f0000001540)={0x0, 0x3938700}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1549.710205] FAULT_INJECTION: forcing a failure. [ 1549.710205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1549.714155] CPU: 0 PID: 13456 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1549.715574] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1549.717225] Call Trace: [ 1549.717761] dump_stack+0x107/0x167 [ 1549.718511] should_fail.cold+0x5/0xa [ 1549.719285] _copy_from_user+0x2e/0x1b0 [ 1549.720093] __copy_msghdr_from_user+0x91/0x4b0 [ 1549.721050] ? __ia32_sys_shutdown+0x80/0x80 [ 1549.721970] ? udp_v6_push_pending_frames+0x360/0x360 [ 1549.723071] ? inet6_sendmsg+0xbd/0x140 [ 1549.723891] ? inet6_compat_ioctl+0x320/0x320 [ 1549.724812] ? __sock_sendmsg+0x55/0x190 [ 1549.725653] sendmsg_copy_msghdr+0xa1/0x160 [ 1549.726555] ? do_recvmmsg+0x6d0/0x6d0 [ 1549.727367] ? __lock_acquire+0x1657/0x5b00 [ 1549.728299] ___sys_sendmsg+0xc6/0x170 [ 1549.729093] ? sendmsg_copy_msghdr+0x160/0x160 [ 1549.730035] ? __lockdep_reset_lock+0x180/0x180 [ 1549.731004] ? lock_acquire+0x197/0x470 [ 1549.731811] ? find_held_lock+0x2c/0x110 [ 1549.732648] ? __might_fault+0xd3/0x180 [ 1549.733457] ? lock_downgrade+0x6d0/0x6d0 [ 1549.734304] ? io_schedule_timeout+0x140/0x140 [ 1549.735275] __sys_sendmmsg+0x195/0x470 [ 1549.736095] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1549.736980] ? lock_downgrade+0x6d0/0x6d0 [ 1549.737843] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1549.738864] ? wait_for_completion_io+0x270/0x270 [ 1549.739851] ? rcu_read_lock_any_held+0x75/0xa0 [ 1549.740800] ? vfs_write+0x354/0xa70 [ 1549.741564] ? fput_many+0x2f/0x1a0 [ 1549.742309] ? ksys_write+0x1a9/0x260 [ 1549.743108] ? __ia32_sys_read+0xb0/0xb0 [ 1549.743960] __x64_sys_sendmmsg+0x99/0x100 [ 1549.744828] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1549.745926] do_syscall_64+0x33/0x40 [ 1549.746694] entry_SYSCALL_64_after_hwframe+0x62/0xc7 00:17:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x0, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) [ 1549.747840] RIP: 0033:0x7fa76daafb19 [ 1549.748612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1549.752375] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1549.753928] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1549.755389] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1549.756844] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1549.758298] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1549.759758] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:17:16 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {0x6}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:17:16 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x104e034, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) [ 1549.853530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1550.175617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1565.361900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:17:32 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {0x7}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:17:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:17:32 executing program 1: socketpair(0x29, 0x5fe2609143722065, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getpgrp(0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x82000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001e00)={0x1270, 0x13, 0x200, 0x70bd2c, 0x25dfdbfc, {0x16}, [@typed={0x8, 0x1e, 0x0, 0x0, @pid}, @typed={0x8, 0x55, 0x0, 0x0, @uid=r1}, @nested={0x24, 0x14, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x95, 0x0, 0x0, @pid}, @typed={0x8, 0x5d, 0x0, 0x0, @pid=r2}]}, @nested={0x1187, 0x44, 0x0, 0x1, [@generic="a16af35cc80b412136f52bc848397094b53b6f33e574e6936c32c99e947d4e2fcf0da28708a7d43b45a26ccca97610125a8cbe465ac20b6d9f98e850c793be88fab4f9fe7a14886b7f7794b8821b550f15228ecc424a4862b50c6dd4fce3f82019de087d3070aba27dd23f24c49d86", @typed={0x1004, 0x2d, 0x0, 0x0, @binary="13c25cf2099a0c4ff13f835e460a40af852620d758e9127bb0e78f323c2acd60924a1f417b806cd87e9f090c4fac85627a00400f3b3731d3dba57a799c866393dbb47aa214a9f28fd9c7cdbf97b7527af4d34d86c83122f2e51fb70ac464391bbb28b683c0494da4949f4fc1199898afff90ddffe3afc1d7baa0b6ba7bd3d6e802775560cc5a050bd470f494a19c09e2813d4f196df9ca8d97339dcf84b1abfe980d6afc0478801d41acc9b89be8a5654a3f9abc46431f7c7fb03a8cf8475fd110352649c74c6465482b6cf7569ed4066635cd8971fddf00f1f540eebdcef8a78fe30f2a4ebe16503f3044052ad282af6f706384f95e70a2570e0fc94bbc46764d161db0b757a8078c0bd0aad7520d3d19fe038dbc9f5ac0d33ce30ec78a139e315c7a172bda236e81dd49e4c436f126bb1d1a9aa55fd136e13121679a3227a9e23e684677ea0b9e641cfb9e661d17871fa3df16a19e52ab8db3066bb2d1ff309348b8edc1932eb55351cf2182196a6db97387dca731387be65dd3da4207e07b314244dd54879ed580225f5a5231fdaa8368c2a943aa4f76792fe6b32b0061d679f6b32339351d18b4bdb30111c3f02a0f4d9f6d6c83bebef4f8e3211d2e2ad46664b37dc1381100bc01e0f4ea4eb2b4d1718f04f73fe245a2e98c559754211a9fd37cf075e19f4af34ebe4c30de05eed2572c489be37352bf7315b9ebbd3fb4780e05e0d2282e7d45de16b79e8701e9e219c094c0cab235c6d36592b645f1a62569c5974b44990ebad2b6f89633098b33eadf956d3bef45fc4d1f932c26ebfd948f19fd93c679af3e5e6192123caff9e9070206cccf1e0fac9ccff09cf0042a497b95e9b1aeee43ea10124c76f3808556b31f10d6d40ede9ce2840c4b4f79fdb7d9b4035d1309b71bf0692287c76a5b7c72517f14865b7a7bfa9cfbe1b6c5d85ffe0ad7523639283e47ee7e6b7e7a55aac67d7b555b2803386cc877654bdfab53c5d060b7b927525e44b9fdb9b5de2a644363972c820fcba073bc5bc8c037b52b27d15c5efc4bb7b5967d2ef2a036a357efede9e93f6f377d901d42fddbdd9dfb3d5430c11c00b4ff882cb1a290238af312ca4c24f2a5ae2d7f6b0ffffe58121e086387e0252ffb6033cabc318b4b58dbf3f337952b448b03fac173c68fda996e43152e53838b2f7541524966aed65b6ef714135c0368d0be4e28ac4e59b2fc1007b7ba5d75d7ab1b7d47a642a92e1d284d0851880b6fc280ce1edad78a92b2e1d1cb4beaf94290bce6c648423d76351ad2735a622f4aebe83c570355af714d99e4b8c96a2025c09776980219f83de57c3e15ac76a4e1c6dc45b2a14f6aaf0e9d62b43e0f83107c55078d4a90cfb8981fdaa27791f0340eaf311ffc0499300f6ca921b81fcb588fedffce0f8dc56abb1deed01506ae72c4e79c4aa82f5376af9a0b12261f075823f431912f06ee06ecea9babc0b37fdaf5ace2aa49dfcc6589eea7908c8435f262af0e73565db2b22a83ae0d5ac7c26ad1e4ed89611053a5ea2b57e46818347538d9c246f152cc7dadf09b8bb011c7d54ba38bfb3e07a5634e6973d8e63b8b80adafd406c63450429516d09b778410ab9e7e810ffeeb344f5387eee45495211a299436c6b40de115c59dc0663886da3e3fdddb7af36f2e3b0ac534d00620dbdf89494ace6a4004a85a549cea8499892fd25c666635f31d2386601127c65b64e8ccd6ef922894d0ef05c1bd738a131e62ad5fda13d99a0acd7072d4ddff8b9ba74ffe1954a6c36ff5ac81be29353e7a45d48a89fbafc5539ec9b928c5234b40d7b10bd61ab527a9a8207617866781470b9090bda8f77ae59a59b2bbfb627adbd2393966df63ffbdf7cacd523ebd0f930093d66b693b169567dd51550b6b56127a1f68621c7b0246f6fdda1840cda8886bf3c8f70443cd2f6978ea44cb4ccc127bd4d4d03d9dce2a2f576134c0fcd9e139ae2c1be305c58c63619e79587b9db30c0bd1483d4189378c2a477b257a80daad1e2456aa8c43e87a8408b2efbabb120ab4802f25e0a24589aa02da472d0989ac9dd771f61dc3f301b9610b5648fa70344a4fa40ca9de213b4cd36963afd2cb26689bf4c969b32682d1d78c085d8455ae1e94262356171140e743e52e402fd5868f8c561da95635bc8e903a879455643adc4a238c15a802381a08ced43bc72d06b4f6be786920d6b846832a5696eb92c360981d0738c7337eb93454328d53afea826a5863e4fd2fcd6473ee0a5e886823ee93a47bf701815084cb216b121ac9d761bbb30b4bce78f69108ec3f5fd500ac60245a260b32d31c541495057fcca70728b67e191c6a34b41efff2c14432cc44e9bca07140b777b7e70fabd4203e0785f0f95aaa4e942e22b8822be33eaef51287e06b48fd59c1956b1f94630081915eae407b6e2c860594f31edbc083b88a365c71de382a6e0688188afc83db58a50eb2cb5fa2f8de2e75c33ab8bef9d1ecf5bb9f61a9d74ac9ec1f923ec58f38c3948bf90e199284521c061c13ec4f1c0e5fcfd95bc05eaeff8f102b7bbe201d85369742b0588033cc88992c2f9530a0b0fadda388e70d3a10dc7903f6b569b44d40223babf7a24394a4f08e1254be28faffe99bbfff2753f2dc4f229d2449d8cd3cad788f54404a9f4b0aad9144b652f17ae237d66932f577996ca88f54c0a7e0913c1dcc52a1f1cc2ccf0f0ff87f5b9ee0418f96e219da61fe81703eafd0d8325f1a5526db88d61f54083c1a162a32b827ee5315d5ac948b2cfcd1c3f98cc619e8db7ee5ae152dc23a80afebe03012fd66327e7d183d57b55cf628ded79a65f238637754e3fdb7d1672791e278208f64b1e0fb09a02c2f6a58bd3e60323ed37e0b191249eeedbfc44df5d281f880a1437815bb1eefbbd80efc1ee06340f6d8c9ab3741d0788451b0b8f11c82c3b99152d0863b4f5a37a16e185c038fdf67fbc71895d26cf19a34bce1b3060c5339be626bd4485e010eb3837ce7d6bd528394af8a8b3fb968555c10816d89aa317aad12aa86d104a4fd4283ba54d982cd0ce459a571a1af408908adbd1c96ff253f536a412a5a250519d470856023429c4b2f45204b9af37adf49a8c5726f7a9c3738fb20f3bfd01ddc0a26a32029a72c31f40919e2a15e60a4258b1c34e81023cf8d727a0d36a5f0e0e94a174e15b56aacd71a261cb1989a82710bd35be8e9220966a9dcf403e8959b756eb876d26602b6281555aa3aa557345b5123dbe8229ee034e606eb845a4747ae542f6d8a35827a1200f1b8902a4b75c16d011afaa1e7f9800f251c157afbe68bdac842eea05d1c5ea0049ce5dd47386517325314c189b054f182b8f77c433c6320dc74f1cb9b8cfd53ee65e362f18661d08998fac20c6f92f37f64e600171754ec21ace848ca4effe4a9ec372984d7cacb1ce6836eb26dbcde3649f988bc7a99e426c1124b68d98c948d7dd551c749ae786014737800c5462e2ebc0a9a1aced225f8e81093c4740574a999821310687c563151b26e5e7f226eec51b90a90551bbef7c5c33dd1cab01eae97da8847e2ac1619265d0e35c54bb85cb6b393b175e4708c439997b9fa3cc5c3311adf716bbac977f591e890356e4f03a8c01052ecbf874df49ee2ae65fa1dc185d03370740ae8d5df596a65957878326f36a967a22b1d6329f8d13b4cebb8729d71f978b3b8f2015a2466c1ed810f8000a5850a77a3bdd470b346005d2f600b9502e5690301b116aef5ea4c3dcf7568aa83d21ec9945def6afb3ab9e4383d2ac1355f8568c70ddd3e2eac015ca0d06ae53b91612646e227207662d6ae34d57409b5eb23f0377b982dce6685273cf868d6dbd75f7bcc2a5f37d1c5fc9474d0b96d7573f076df54938292410e7287affb7a9d271153ec37aa0ad37f7b42d8c8e08e01f9949902d9db8ec4e97c2535f14908bce0a21b5232773c68fa5a640b6b04f6a92e73fa1ea9e3fcbe36cff2f55db9820238bc7b925eeaa09dbe19853f8832a40720b47777dcbb3605c1b13bd7742af82ac1145abe2136ea95c4173daf9e95e407d12bd8adfe794b121bdba1f5c7ad76860794ed227069d3c0271ce902d6babaa6fdba65c8c699bd9352273443354b8ff0492d1858311ea0e378655f3dc12ef9d4ce48df369678e90be23339f45d5a3f3b314510438f4fccde8cc860fca56c4fc382cac63d78363be100132b9fb78d6b85f927861113ef8af969f3827b2b5d4c38cd5ec04b56c25afadd348e88f335a06e8c8a456300017ccb5d900d56319c33a422ffdb1e091d2e7885ed37210f11d916be732d7e299beed92cc209b9c26f1e5a83295094b347eab569bfa09339270e90c3fc461f1692f39083aad5679ff63c9613a139d1c3af9c0ffb3d3cf42cdaebaf9776cf366fa17f74d68c615a860c058072a3c170d74794f9cb8963f50b554877b8470f493a4213e3cc151767b9f9c856f7734eb79966fbbc515d8b39067f7acbf8ea79ec16bb379f41b7215205ba1cc361be37012d11780b490dddd7703065a23c7173fd9ac071ba462f1ff267fbcb38b4e5fd0245e974329f7a496f7ca612d5cdf96d8412e9ea81e25d428baa4d8f51effc293828c2e57545a7c3f7e3d6e11e5696f31e3ac0be94b3c26dccb2b46afff3f55152403e2f28ccb931dec116d7c4054945be462994904f34220d9518c7c53aafaaa9165769545f54ff0221994af6b9fef67af4ea18afb2fe33714da79d82813adb9ab39924349ef5318462199463a7668d707bce821c8a3e1504d4badce5433079a911fd6568f1fbc153a38ec8e5238df6f4e714b08e532f95cef902fe76ebb266b92c360149b3be0b75203bfc00127206aca23a03b9d6d69c146bab869b7f6f6156a74dc1f9517d8e967cfde5ded7bb7d593818a63c2386bd7c6c553836cd151e7177e5d28d96e824e79fdd81d3cda1076e6c18a99b4f897c202a374c0f8f32c2341dcf7c3ca817a078d73a3dd97f07555a57c9a55ddaa5e58426ddabb06635cd899723cca1c8ecb6cb26f2f09b450339e1a10d1cbcf02db5d74a10d95a8fcb87bef4810b95a47ad4d99a019dc1edc1c1be99a050d348e2cf2a5f6ed118557a4a4d3d4ee4f6e4418627a6ed15290dc69ddc9b2f6482c5ac4c632095beb7628285968ea9470809c2602416add19a5971aea244ffd7922bfab583c3c2e84c0f7322a93bd1ca1a4ef4c2cef60893c17331d27d4b1fc684f48826ab6b5cd20fa24c43ca5c3e4afff613cac8ee575a1e124fa5d0f727c19885b3d815a2827e5782992b55a0cd1171c6867bc8d1b5cdf17edd5e58b38ac99fa3ae4fdde1683478461b59a1d567d5fbf9dbc383a0a50244f9091ed9f0546fbef3ca69a533f4fe9e97b609826bcfd4ef6ab87c56b58b7fe721da33674909de12d0e7df1ec6f22ba48043057eca163fbc363a9d327d5ce6a654fc5099a7de03edf2e6067f272a538cbd16f9e9807e15967a0bdab200418c28ae4899840efce398b8510d39db10ed081f5e18de1acb58313bf68a0d79f85ac400a841cbc0233a963c2ccff63ddd720b49041ac5faad5436e62afdd71d0db9a24b06ee169353817d1881650f75938b14fc4fcc86167054657a260d88c500c079762fbcbf98de5bd43e0c189e83ca3d9d4e8bf9b7ce5d8fb29346077ca36a67a1e5788d126a515b65a15b5575cbcf2cb8a4e4978a8eb5d47c5eaf237019dd6947eb4cc8fbdcd920acd195ef2e2e264082b45b5fc626b14dc03b8260e6a319d2d559140f419a120bf8752735e9abeec14dfc3f4baa4d1c96"}, @generic="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", @typed={0xc, 0x5a, 0x0, 0x0, @u64=0x10000}, @typed={0x8, 0x58, 0x0, 0x0, @fd}]}, @nested={0x87, 0x78, 0x0, 0x1, [@generic="3892d2b8039b899d95dc1f871547a9b7b5458b0f9313cd91e41b3a87ec6e92648ee32757702d7511d60ad02bf4be83fb234a3104faa7e6e0210d1550b9aac517902d954b665c76c5f443337ce0fba8f268559ed117d457b71a6128481102b7ccd8851cea93dcf7f37846340dac2e10", @typed={0xc, 0x30, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x3e, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @nested={0x18, 0x23, 0x0, 0x1, [@typed={0xc, 0x8a, 0x0, 0x0, @u64=0xffffffff}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee00}]}]}, 0x1270}, 0x1, 0x0, 0x0, 0x44094}, 0x80) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x62, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x64, 0x31, 0x66, 0x37, 0x63, 0x32, 0x37]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:17:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in=@multicast2}}, 0xe8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaea000000004e20007802000000000000bab50000067c33efb794ae6793273f3e5a81aebb3fe1580051a1657cf312e781fffffff336cd250a0cb728d6eee84081575dab11c8acfe4b0b00"/134], 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x208140, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x5, @broadcast}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x40, 0x0, 0x0, 0x0, 0xd3, &(0x7f0000000080)='tunl0\x00', 0x4776, 0x4, 0x9}) 00:17:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r2 = getpgid(0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38}, 0x0) perf_event_open(0x0, r2, 0x8, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000001300)='./file1\x00', 0x200000, 0x183) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) clone3(&(0x7f0000002340)={0x28000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x28}, &(0x7f0000000180)=""/252, 0xfc, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=[r2, 0xffffffffffffffff], 0x2, {r3}}, 0x58) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x12, r1, 0x729d2000) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x202000, 0x20) unshare(0x48020200) 00:17:32 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(r0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@empty, 0x2, r3}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x2, 0x0, 0x0, 0x7, 0x0, 0xfffdffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r6, 0x6) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x200, 0x0, 0x0, 0x7, 0x3}) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3f, 0x4, 0x4, 0x46, 0x0, 0xd92, 0x89400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3f, 0x0, @perf_bp={&(0x7f0000000280), 0x6}, 0x8, 0xffffffff00000001, 0x8001, 0x2, 0x6, 0x5, 0x401, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xb, r6, 0x9) 00:17:32 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 46) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:17:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x0, 0x0, 0x8, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) [ 1565.371026] device lo entered promiscuous mode [ 1565.381805] FAULT_INJECTION: forcing a failure. [ 1565.381805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1565.384450] CPU: 0 PID: 13487 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1565.385830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1565.387475] Call Trace: [ 1565.387498] dump_stack+0x107/0x167 [ 1565.387523] should_fail.cold+0x5/0xa [ 1565.387549] _copy_from_user+0x2e/0x1b0 [ 1565.387574] __copy_msghdr_from_user+0x91/0x4b0 [ 1565.387594] ? __ia32_sys_shutdown+0x80/0x80 [ 1565.387614] ? udp_v6_push_pending_frames+0x360/0x360 [ 1565.387637] ? inet6_sendmsg+0xbd/0x140 [ 1565.387656] ? inet6_compat_ioctl+0x320/0x320 [ 1565.387672] ? __sock_sendmsg+0x55/0x190 [ 1565.387698] sendmsg_copy_msghdr+0xa1/0x160 [ 1565.387716] ? do_recvmmsg+0x6d0/0x6d0 [ 1565.387740] ? __lock_acquire+0x1657/0x5b00 [ 1565.387774] ___sys_sendmsg+0xc6/0x170 [ 1565.387795] ? sendmsg_copy_msghdr+0x160/0x160 [ 1565.387810] ? vmacache_find+0x55/0x2a0 00:17:32 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) [ 1565.387833] ? __lockdep_reset_lock+0x180/0x180 [ 1565.387860] ? lock_acquire+0x197/0x470 [ 1565.387877] ? find_held_lock+0x2c/0x110 [ 1565.387901] ? __might_fault+0xd3/0x180 [ 1565.387920] ? lock_downgrade+0x6d0/0x6d0 [ 1565.387936] ? asm_exc_page_fault+0x1e/0x30 [ 1565.387976] __sys_sendmmsg+0x195/0x470 [ 1565.388002] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1565.388021] ? lock_downgrade+0x6d0/0x6d0 [ 1565.388060] ? __mutex_unlock_slowpath+0xe1/0x600 00:17:32 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 47) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) [ 1565.388084] ? wait_for_completion_io+0x270/0x270 [ 1565.388106] ? rcu_read_lock_any_held+0x75/0xa0 [ 1565.388123] ? vfs_write+0x354/0xa70 [ 1565.388146] ? fput_many+0x2f/0x1a0 [ 1565.388166] ? ksys_write+0x1a9/0x260 [ 1565.388185] ? __ia32_sys_read+0xb0/0xb0 [ 1565.388213] __x64_sys_sendmmsg+0x99/0x100 [ 1565.388231] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1565.388251] do_syscall_64+0x33/0x40 [ 1565.388272] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1565.388285] RIP: 0033:0x7fa76daafb19 [ 1565.388305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:17:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x0, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) [ 1565.388315] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 00:17:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) [ 1565.388336] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1565.388347] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1565.388358] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1565.388369] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1565.388380] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 [ 1565.464190] device lo left promiscuous mode [ 1565.675879] FAULT_INJECTION: forcing a failure. [ 1565.675879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1565.675902] CPU: 0 PID: 13505 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1565.675913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1565.675920] Call Trace: [ 1565.675943] dump_stack+0x107/0x167 [ 1565.675968] should_fail.cold+0x5/0xa 00:17:32 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {0x8}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 1565.675995] _copy_from_user+0x2e/0x1b0 [ 1565.676021] __copy_msghdr_from_user+0x91/0x4b0 [ 1565.676042] ? __ia32_sys_shutdown+0x80/0x80 [ 1565.676062] ? udp_v6_push_pending_frames+0x360/0x360 [ 1565.676086] ? inet6_sendmsg+0xbd/0x140 [ 1565.676105] ? inet6_compat_ioctl+0x320/0x320 [ 1565.676122] ? __sock_sendmsg+0x55/0x190 00:17:32 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x44e2, 0x0) openat(0xffffffffffffffff, 0x0, 0x80000, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ftruncate(r0, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800, 0x103) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f00000018c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) linkat(r1, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x1000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r2, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}, {&(0x7f00000003c0)=""/121, 0x79}, {&(0x7f0000000380)=""/51, 0x33}, {&(0x7f00000014c0)=""/160, 0xa0}, {&(0x7f0000001640)=""/256, 0x100}, {0x0}, {&(0x7f00000015c0)=""/51, 0x33}, {&(0x7f00000001c0)=""/57, 0x39}], 0x8) readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001800)=ANY=[@ANYBLOB="c1f9808ec37123000000000200000008000000000000000c001200020000000000000072c4ce5f1f058782df5e47ccaaf9fdd203a5cd72b615936b1abd9e50f4da86da1b2cc71402f3e953fcd78b768444cf6bd1f260c027bd063536eb954c023da3a6e9546f4fd0b7d0f32d1c344867f2247e9df1c6ba31ed92f354940ec2f46075a702235f5b13c88ea9b88a8bdd912e1553d3f764e5dfaa2813257f03595ef6203c34f3b8451d6cbb6165eb8eea9f74baec37ff4bcb"], 0x28}}, 0x0) r5 = syz_io_uring_setup(0x4f2, &(0x7f0000000300)={0x0, 0x9d81, 0x0, 0x3, 0x3ad, 0x0, r0}, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000180)) dup3(r4, r5, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, &(0x7f0000000080)) [ 1565.676149] sendmsg_copy_msghdr+0xa1/0x160 [ 1565.676167] ? do_recvmmsg+0x6d0/0x6d0 00:17:32 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 48) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) [ 1565.676192] ? __lock_acquire+0x1657/0x5b00 [ 1565.676231] ___sys_sendmsg+0xc6/0x170 [ 1565.676252] ? sendmsg_copy_msghdr+0x160/0x160 [ 1565.676276] ? __lockdep_reset_lock+0x180/0x180 [ 1565.676304] ? lock_acquire+0x197/0x470 [ 1565.676321] ? find_held_lock+0x2c/0x110 [ 1565.676347] ? __might_fault+0xd3/0x180 [ 1565.676366] ? lock_downgrade+0x6d0/0x6d0 [ 1565.676385] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1565.676424] __sys_sendmmsg+0x195/0x470 [ 1565.676450] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1565.676469] ? lock_downgrade+0x6d0/0x6d0 [ 1565.676509] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1565.676533] ? wait_for_completion_io+0x270/0x270 [ 1565.676556] ? rcu_read_lock_any_held+0x75/0xa0 [ 1565.676573] ? vfs_write+0x354/0xa70 [ 1565.676596] ? fput_many+0x2f/0x1a0 [ 1565.676616] ? ksys_write+0x1a9/0x260 [ 1565.676635] ? __ia32_sys_read+0xb0/0xb0 [ 1565.676663] __x64_sys_sendmmsg+0x99/0x100 [ 1565.676681] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1565.676700] do_syscall_64+0x33/0x40 [ 1565.676722] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1565.676735] RIP: 0033:0x7fa76daafb19 [ 1565.676754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1565.676765] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1565.676787] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1565.676798] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1565.676809] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1565.676820] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1565.676831] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 [ 1565.691332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1565.848032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:17:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x0, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) [ 1565.970071] FAULT_INJECTION: forcing a failure. [ 1565.970071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1565.972642] CPU: 1 PID: 13522 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1565.974044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1565.975748] Call Trace: [ 1565.976292] dump_stack+0x107/0x167 [ 1565.977038] should_fail.cold+0x5/0xa [ 1565.977823] _copy_from_user+0x2e/0x1b0 [ 1565.978657] __copy_msghdr_from_user+0x91/0x4b0 [ 1565.979604] ? __ia32_sys_shutdown+0x80/0x80 [ 1565.980537] ? udp_v6_push_pending_frames+0x360/0x360 [ 1565.981594] ? inet6_sendmsg+0xbd/0x140 [ 1565.982400] ? inet6_compat_ioctl+0x320/0x320 [ 1565.983319] ? __sock_sendmsg+0x55/0x190 [ 1565.984159] sendmsg_copy_msghdr+0xa1/0x160 [ 1565.985039] ? do_recvmmsg+0x6d0/0x6d0 [ 1565.985841] ? __lock_acquire+0x1657/0x5b00 [ 1565.986757] ___sys_sendmsg+0xc6/0x170 [ 1565.987554] ? sendmsg_copy_msghdr+0x160/0x160 [ 1565.988497] ? vmacache_find+0x55/0x2a0 [ 1565.989313] ? __lockdep_reset_lock+0x180/0x180 [ 1565.990273] ? lock_acquire+0x197/0x470 [ 1565.991083] ? find_held_lock+0x2c/0x110 [ 1565.991921] ? __might_fault+0xd3/0x180 [ 1565.992717] ? lock_downgrade+0x6d0/0x6d0 [ 1565.993560] ? asm_exc_page_fault+0x1e/0x30 [ 1565.994459] __sys_sendmmsg+0x195/0x470 [ 1565.995283] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1565.996159] ? lock_downgrade+0x6d0/0x6d0 [ 1565.997019] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1565.998009] ? wait_for_completion_io+0x270/0x270 [ 1565.999029] ? rcu_read_lock_any_held+0x75/0xa0 [ 1565.999963] ? vfs_write+0x354/0xa70 [ 1566.000724] ? fput_many+0x2f/0x1a0 [ 1566.001458] ? ksys_write+0x1a9/0x260 [ 1566.002219] ? __ia32_sys_read+0xb0/0xb0 [ 1566.003070] __x64_sys_sendmmsg+0x99/0x100 [ 1566.003911] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1566.004955] do_syscall_64+0x33/0x40 [ 1566.005710] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1566.006769] RIP: 0033:0x7fa76daafb19 [ 1566.007525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1566.011249] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1566.012788] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1566.014239] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1566.015707] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1566.017149] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1566.018595] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 [ 1566.158529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:17:47 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {0x9}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:17:47 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:17:47 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 49) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:17:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x424800, 0x40) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x5, 0x1, &(0x7f0000000300)=[{&(0x7f00000002c0)="82863597d28d49aa1e2cba5ddd28726ba8f48d3b0765d6fe074d97d12f842e66ca7022d4c9", 0x25, 0x59c2}], 0x802, &(0x7f0000000380)={[{@dots}, {@nodots}, {@fat=@dos1xfloppy}, {@nodots}], [{@obj_user={'obj_user', 0x3d, '\b*-'}}]}) fcntl$dupfd(r2, 0x406, r3) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46000000000a0000000000000002000600000000000000000038000053193b3238d0fce76361e38a2b00000000000000000000002000010000000000000000000000030000000000000000000000000000003f000000000000000000000004000000"], 0x58) close(r4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5}}, './file1\x00'}) openat(r5, &(0x7f0000000040)='./file0\x00', 0x80000, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) flistxattr(r4, &(0x7f00000004c0)=""/237, 0xed) 00:17:47 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, &(0x7f0000001300)) futex(&(0x7f0000000000)=0x1, 0x7, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r0, 0x0, 0x120) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x6e, 0x400801) write$binfmt_aout(r1, 0x0, 0x120) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x400100, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x88) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000280)={{}, "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"}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5206, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$rfkill(r4, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 00:17:47 executing program 2: r0 = syz_io_uring_setup(0x23, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_setup(0x3987, &(0x7f0000000080)={0x0, 0xe103, 0x20, 0x3, 0x3d1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+60000000}}, 0x0) io_uring_enter(r0, 0x694, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) io_uring_enter(r6, 0x2295, 0xa57d, 0x3, &(0x7f00000002c0)={[0x3]}, 0x8) dup2(r4, r0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) setns(r8, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000001040)=0x2, 0x4) readv(r9, &(0x7f0000001480)=[{&(0x7f0000001140)=""/134, 0x86}], 0x1) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:17:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) creat(&(0x7f0000000340)='./file1\x00', 0x34) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) name_to_handle_at(r2, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="200000006100000004000000000000000107000000005500000007000065b402000000000000"], &(0x7f00000001c0), 0x400) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000004700), 0xa8dc, 0x400) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000004780)={{r3}, 0x2, &(0x7f0000004740)=[0xd25, 0x3], 0xffffffffffff3b49, 0x2, [0xb91f, 0x0, 0x4, 0x9]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000100000100000000", @ANYRES32=r3, @ANYBLOB='\a\b\x00\x00\x00\x00\x00\x00.2file1\x00']) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x7eea, 0x8, 0x0, 0x235}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x1, 0xffffffffffffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000002c0)={0x906b, 0xcbff, 0x38f0, 0x2, 0x80000001}) 00:17:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x0, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) [ 1580.931925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1580.956046] [ 1580.956442] ====================================================== [ 1580.957661] WARNING: possible circular locking dependency detected [ 1580.958901] 5.10.199 #1 Not tainted [ 1580.959624] ------------------------------------------------------ [ 1580.960876] syz-executor.3/13538 is trying to acquire lock: [ 1580.962003] ffff88800f9c8b78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 1580.964085] [ 1580.964085] but task is already holding lock: [ 1580.965262] ffffffff85619468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 1580.969051] [ 1580.969051] which lock already depends on the new lock. [ 1580.969051] [ 1580.972195] [ 1580.972195] the existing dependency chain (in reverse order) is: [ 1580.973969] [ 1580.973969] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 1580.975578] __mutex_lock+0x13d/0x10b0 [ 1580.976616] rfkill_register+0x36/0xa10 [ 1580.977673] hci_register_dev+0x42e/0xc00 [ 1580.978787] __vhci_create_device+0x2c8/0x5c0 [ 1580.979967] vhci_open_timeout+0x38/0x50 [ 1580.980877] process_one_work+0x9a9/0x14b0 [ 1580.981821] worker_thread+0x61d/0x1310 [ 1580.982717] kthread+0x38f/0x470 [ 1580.983499] ret_from_fork+0x22/0x30 [ 1580.984341] [ 1580.984341] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 1580.985666] __mutex_lock+0x13d/0x10b0 [ 1580.986543] vhci_send_frame+0x63/0xa0 [ 1580.987429] hci_send_frame+0x1b9/0x320 [ 1580.988328] hci_tx_work+0x10af/0x1660 [ 1580.989211] process_one_work+0x9a9/0x14b0 [ 1580.990153] worker_thread+0x61d/0x1310 [ 1580.991067] kthread+0x38f/0x470 [ 1580.991842] ret_from_fork+0x22/0x30 [ 1580.992679] [ 1580.992679] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 1580.994277] __flush_work+0x105/0xa90 [ 1580.995142] hci_dev_do_close+0x131/0x1240 [ 1580.996086] hci_unregister_dev+0x149/0x430 [ 1580.997050] vhci_release+0x70/0xf0 [ 1580.997879] __fput+0x285/0x980 [ 1580.998638] task_work_run+0xe2/0x1a0 [ 1580.999503] do_exit+0xb6f/0x2600 [ 1581.000293] do_group_exit+0x125/0x310 [ 1581.001171] __x64_sys_exit_group+0x3a/0x50 [ 1581.002135] do_syscall_64+0x33/0x40 [ 1581.002998] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1581.004119] [ 1581.004119] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 1581.005378] __mutex_lock+0x13d/0x10b0 [ 1581.006257] bg_scan_update+0x82/0x500 [ 1581.007146] process_one_work+0x9a9/0x14b0 [ 1581.008092] worker_thread+0x61d/0x1310 [ 1581.008991] kthread+0x38f/0x470 [ 1581.009781] ret_from_fork+0x22/0x30 [ 1581.010620] [ 1581.010620] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 1581.012319] __lock_acquire+0x29e7/0x5b00 [ 1581.013244] lock_acquire+0x197/0x470 [ 1581.014100] __flush_work+0x105/0xa90 [ 1581.014968] __cancel_work_timer+0x368/0x4c0 [ 1581.015947] hci_request_cancel_all+0x73/0x230 [ 1581.016957] hci_dev_do_close+0xd9/0x1240 [ 1581.017884] hci_rfkill_set_block+0x166/0x1a0 [ 1581.018909] rfkill_set_block+0x1fd/0x540 [ 1581.019821] rfkill_fop_write+0x253/0x4b0 [ 1581.020722] vfs_write+0x29a/0xa70 [ 1581.021504] ksys_write+0x1f6/0x260 [ 1581.022308] do_syscall_64+0x33/0x40 [ 1581.023142] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1581.024260] [ 1581.024260] other info that might help us debug this: [ 1581.024260] [ 1581.025810] Chain exists of: [ 1581.025810] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 1581.025810] [ 1581.028515] Possible unsafe locking scenario: [ 1581.028515] [ 1581.029681] CPU0 CPU1 [ 1581.030586] ---- ---- [ 1581.031487] lock(rfkill_global_mutex); [ 1581.032278] lock(&data->open_mutex); [ 1581.033508] lock(rfkill_global_mutex); [ 1581.034770] lock((work_completion)(&hdev->bg_scan_update)); [ 1581.035948] [ 1581.035948] *** DEADLOCK *** [ 1581.035948] [ 1581.037142] 1 lock held by syz-executor.3/13538: [ 1581.038089] #0: ffffffff85619468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 1581.039955] [ 1581.039955] stack backtrace: [ 1581.040841] CPU: 0 PID: 13538 Comm: syz-executor.3 Not tainted 5.10.199 #1 [ 1581.042224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1581.043894] Call Trace: [ 1581.044422] dump_stack+0x107/0x167 [ 1581.045151] check_noncircular+0x263/0x2e0 [ 1581.045996] ? register_lock_class+0xbb/0x17b0 [ 1581.046926] ? print_circular_bug+0x470/0x470 [ 1581.047828] ? find_first_zero_bit+0x94/0xb0 [ 1581.048709] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 1581.049608] __lock_acquire+0x29e7/0x5b00 [ 1581.050449] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1581.051541] ? SOFTIRQ_verbose+0x10/0x10 [ 1581.052382] ? __lockdep_reset_lock+0x180/0x180 [ 1581.053310] ? mark_lock+0xf5/0x2df0 [ 1581.054055] lock_acquire+0x197/0x470 [ 1581.054838] ? __flush_work+0xdd/0xa90 [ 1581.055622] ? lock_release+0x680/0x680 [ 1581.056490] ? __flush_work+0x78c/0xa90 [ 1581.057287] ? lock_downgrade+0x6d0/0x6d0 [ 1581.058124] __flush_work+0x105/0xa90 [ 1581.058892] ? __flush_work+0xdd/0xa90 [ 1581.059673] ? lock_chain_count+0x20/0x20 [ 1581.060502] ? queue_delayed_work_on+0xe0/0xe0 [ 1581.061413] ? mark_lock+0xf5/0x2df0 [ 1581.062160] ? lock_acquire+0x197/0x470 [ 1581.062961] ? find_held_lock+0x2c/0x110 [ 1581.063777] ? __wake_up_common_lock+0xde/0x140 [ 1581.064709] ? mark_held_locks+0x9e/0xe0 [ 1581.065526] __cancel_work_timer+0x368/0x4c0 [ 1581.066406] ? try_to_grab_pending+0xe0/0xe0 [ 1581.067309] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1581.068360] ? cancel_delayed_work+0x1b8/0x2b0 [ 1581.069273] ? cancel_delayed_work_sync+0x20/0x20 [ 1581.070243] hci_request_cancel_all+0x73/0x230 [ 1581.071171] hci_dev_do_close+0xd9/0x1240 [ 1581.072000] ? rfkill_set_block+0x18f/0x540 [ 1581.072864] ? hci_dev_open+0x350/0x350 [ 1581.073662] ? mark_held_locks+0x9e/0xe0 [ 1581.074480] hci_rfkill_set_block+0x166/0x1a0 [ 1581.075388] ? hci_power_off+0x20/0x20 [ 1581.076166] rfkill_set_block+0x1fd/0x540 [ 1581.077000] rfkill_fop_write+0x253/0x4b0 [ 1581.077830] ? rfkill_sync_work+0xa0/0xa0 [ 1581.078662] ? security_file_permission+0x24e/0x570 [ 1581.079675] ? rfkill_sync_work+0xa0/0xa0 [ 1581.080503] vfs_write+0x29a/0xa70 [ 1581.081219] ksys_write+0x1f6/0x260 [ 1581.081951] ? __ia32_sys_read+0xb0/0xb0 [ 1581.082770] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1581.083827] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1581.084864] do_syscall_64+0x33/0x40 [ 1581.085617] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1581.086646] RIP: 0033:0x7fb91c18eb19 [ 1581.087409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.091113] RSP: 002b:00007fb919704188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1581.092640] RAX: ffffffffffffffda RBX: 00007fb91c2a1f60 RCX: 00007fb91c18eb19 [ 1581.094071] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1581.095525] RBP: 00007fb91c1e8f6d R08: 0000000000000000 R09: 0000000000000000 [ 1581.096957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1581.098388] R13: 00007fff7f1fdbff R14: 00007fb919704300 R15: 0000000000022000 [ 1581.116852] FAULT_INJECTION: forcing a failure. [ 1581.116852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1581.120032] CPU: 0 PID: 13543 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1581.121507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1581.123201] Call Trace: [ 1581.123731] dump_stack+0x107/0x167 [ 1581.124471] should_fail.cold+0x5/0xa [ 1581.125239] _copy_from_user+0x2e/0x1b0 [ 1581.126042] __copy_msghdr_from_user+0x91/0x4b0 [ 1581.126984] ? __ia32_sys_shutdown+0x80/0x80 [ 1581.127867] ? udp_v6_push_pending_frames+0x360/0x360 [ 1581.128905] ? inet6_sendmsg+0xbd/0x140 [ 1581.129702] ? inet6_compat_ioctl+0x320/0x320 [ 1581.130604] ? __sock_sendmsg+0x55/0x190 [ 1581.131445] sendmsg_copy_msghdr+0xa1/0x160 [ 1581.132341] ? do_recvmmsg+0x6d0/0x6d0 [ 1581.133109] ? kfree+0x1ab/0x340 [ 1581.133788] ___sys_sendmsg+0xc6/0x170 [ 1581.134554] ? sendmsg_copy_msghdr+0x160/0x160 [ 1581.135477] ? __lockdep_reset_lock+0x180/0x180 [ 1581.136379] ? trace_hardirqs_on+0x5b/0x180 [ 1581.137220] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1581.138105] ? lock_release+0x4d1/0x680 [ 1581.138895] ? __might_fault+0xd3/0x180 [ 1581.139668] ? lock_downgrade+0x6d0/0x6d0 [ 1581.140474] ? io_schedule_timeout+0x140/0x140 [ 1581.141374] __sys_sendmmsg+0x195/0x470 [ 1581.142149] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1581.143000] ? lock_downgrade+0x6d0/0x6d0 [ 1581.143817] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1581.144762] ? wait_for_completion_io+0x270/0x270 [ 1581.145699] ? vfs_write+0x354/0xa70 [ 1581.146425] ? fput_many+0x2f/0x1a0 [ 1581.147159] ? ksys_write+0x1a9/0x260 [ 1581.147901] ? __ia32_sys_read+0xb0/0xb0 [ 1581.148694] __x64_sys_sendmmsg+0x99/0x100 [ 1581.149522] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1581.150525] do_syscall_64+0x33/0x40 [ 1581.151269] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1581.152264] RIP: 0033:0x7fa76daafb19 [ 1581.152991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.156571] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1581.158047] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1581.159440] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1581.160824] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1581.162205] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1581.163608] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 [ 1581.254950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:17:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:17:48 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:17:48 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 50) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) 00:17:48 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {0xf}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 1581.375369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:17:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) creat(&(0x7f0000000340)='./file1\x00', 0x34) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) name_to_handle_at(r2, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="200000006100000004000000000000000107000000005500000007000065b402000000000000"], &(0x7f00000001c0), 0x400) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000004700), 0xa8dc, 0x400) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000004780)={{r3}, 0x2, &(0x7f0000004740)=[0xd25, 0x3], 0xffffffffffff3b49, 0x2, [0xb91f, 0x0, 0x4, 0x9]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000100000100000000", @ANYRES32=r3, @ANYBLOB='\a\b\x00\x00\x00\x00\x00\x00.2file1\x00']) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x7eea, 0x8, 0x0, 0x235}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x1, 0xffffffffffffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000002c0)={0x906b, 0xcbff, 0x38f0, 0x2, 0x80000001}) [ 1581.419237] FAULT_INJECTION: forcing a failure. [ 1581.419237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1581.422030] CPU: 1 PID: 13572 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1581.423609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1581.425468] Call Trace: [ 1581.426006] dump_stack+0x107/0x167 [ 1581.426768] should_fail.cold+0x5/0xa [ 1581.427696] _copy_from_user+0x2e/0x1b0 [ 1581.428522] __copy_msghdr_from_user+0x91/0x4b0 [ 1581.429473] ? __ia32_sys_shutdown+0x80/0x80 [ 1581.430475] ? udp_v6_push_pending_frames+0x360/0x360 [ 1581.431585] ? inet6_sendmsg+0xbd/0x140 [ 1581.432393] ? inet6_compat_ioctl+0x320/0x320 [ 1581.433308] ? __sock_sendmsg+0x55/0x190 [ 1581.434143] sendmsg_copy_msghdr+0xa1/0x160 [ 1581.435150] ? do_recvmmsg+0x6d0/0x6d0 [ 1581.435955] ? handle_mm_fault+0x9e9/0x3500 [ 1581.436869] ? kfree+0x1ab/0x340 [ 1581.437712] ___sys_sendmsg+0xc6/0x170 [ 1581.438577] ? sendmsg_copy_msghdr+0x160/0x160 [ 1581.439569] ? vmacache_find+0x55/0x2a0 [ 1581.440381] ? __lockdep_reset_lock+0x180/0x180 [ 1581.441334] ? lock_release+0x4d1/0x680 [ 1581.442139] ? exc_page_fault+0xca/0x1a0 [ 1581.442999] ? __might_fault+0xd3/0x180 [ 1581.443902] ? lock_downgrade+0x6d0/0x6d0 [ 1581.444742] ? asm_exc_page_fault+0x1e/0x30 [ 1581.445628] __sys_sendmmsg+0x195/0x470 [ 1581.446568] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1581.447459] ? lock_downgrade+0x6d0/0x6d0 [ 1581.448331] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1581.449444] ? wait_for_completion_io+0x270/0x270 [ 1581.450436] ? vfs_write+0x354/0xa70 [ 1581.451221] ? fput_many+0x2f/0x1a0 [ 1581.451959] ? ksys_write+0x1a9/0x260 [ 1581.452735] ? __ia32_sys_read+0xb0/0xb0 [ 1581.453581] __x64_sys_sendmmsg+0x99/0x100 [ 1581.454446] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1581.455503] do_syscall_64+0x33/0x40 [ 1581.456259] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1581.457304] RIP: 0033:0x7fa76daafb19 [ 1581.458059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.461819] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1581.463379] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1581.464822] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1581.466258] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1581.467664] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1581.469266] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 00:17:48 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:17:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x0, 0x10400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:17:48 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYBLOB=',Shdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:17:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 00:17:48 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x6, 0x6, 0x9, 0x0, 0x8, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffbe7, 0x2, @perf_config_ext={0x81, 0xff80000000000000}, 0x4000, 0x100000000, 0x5, 0x7, 0xc14d, 0x1, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) [ 1581.685115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:17:48 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000008981b700"/18, @ANYRESHEX, @ANYBLOB=',Shdno', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x2, 0x8, &(0x7f0000001280)=[{&(0x7f00000002c0)="b1f3610d41c1c01403b43b2596d4d4c5b0c82d64bbf642972d91439c33ab42e04f3bf05d1b3ad11f925e67d049f9d8f558cb48362a295c200c3a9a31dd6e3b8da9e39c1f025d3a155c395a45fcca2c6f40572dc39fce96774b346d97810e662d0a5bfc818d99fac3ee0ff9e2d808993ac88dda5b9ce61833259045dc68d220e1c31becf17efebc5c0ad9ae96b442504f933b1c7329d0373c6da1f0e0c57eec8dd1edea10a5", 0xa5, 0x5}, {&(0x7f0000000380)="419a6de404f985473455660da97587b3f9b7fad6febdf2970a2802017574620d51f2f4e116ce53502902048d755a956746423afab800763334e52154716abd7a9f7cf9e950ec7f161c0742e883b5588a6b53190391a3d813e289c304a8f2fff1d98ed6d53beb6e4d9b7195a58fcd2fc387d83e8f55cdb192e8aeb6f335f15f169e4537d52bdd5c37918c6d500dfc71bcb3fb0d18e91998bacb73f1f9d5d1e3014075f2803f9a29108281f89ad31fce1e2982cc5c3305de56885cf28c1792ebefeb36485f3aeadf5ffa", 0xc9}, {&(0x7f0000000f00)="554a030e8ecfada3597d887636adeaee65320edfd2484bb1d8fb2aeae468a38e77ecb360c8ccae76c6e87282d0a6e707bc5692f7436aba0564e99c2077e5438bb8364f872cf572db398ecd241d4de05dfa12f71b8cd3f3ce25f098e40e1430ebcbca746c99cf2ed8ada2d4b2572c481e3a7af211a86c2febb919d512abd9c1f5e49e736b4b0f4b4dfddd1a67c45b8710189637ff0299babbd8cba29f13541d96174e6d1ab17715cc5a7cac997ee0e3c0937e1d8fde8b05a9faeb2974e48e754e9a3f5887998ac372a7e5a90d0e27371ea2566cb64e1c6afd9ed57abd4940774773e31aa374a1a76bd14396fb4e0e4564f2", 0xf1, 0x2}, {&(0x7f0000001000)="4dcaf3201e5a2e1f9a2e17979b2b48fb99cc308b9aff02e5ea2d3f5bd9d605d8cdb59e94b1d0dec75ca1c0b7c26e684e0e121186233faea059a35cf4b8f6904e455c5fbdb73e3d691523839c533fec489e5eac8a2f71c81c945170181407510fc252c1f2b4632a48301af4bb3679c572cde24ca2bebdaae52d1b1908a7b54258a9e5df4153470d0e9c2708c3ff927cd429677ec4d886a30290", 0x99, 0x6}, {&(0x7f00000010c0)="a264ebc4dc4c0f80c8126c35bcf431c5e4dbcd171376616f880c2f84e904c73fce5e0a21f313482a03ce79d68f55bf398e1b3f9bdea20814ca9329a97419a1df79e9cd2dc266b2a272bc59fd5a272f4d8761d922af483151d649b9568ee2ee43dd67e825c97ed1cd3c308e9d4ad5f2524803be29127e70cd65d1034375f863", 0x7f, 0x3}, {&(0x7f0000000180)="bbb6e0f84529747291d14bbe", 0xc}, {&(0x7f0000001140)="4e21ff52ec7eeacf06ade4a6f25ed82226ff8ff9964d18aa38e97650a32d29a05e83be87339ee659979a44bccb631e669760fee8c2aaaa8d4bc9f8a0", 0x3c, 0x9}, {&(0x7f0000001180)="04822a9d6df7cd310b614c21d2e07be2d5562c09401b68b0e83b4fca652e1f4b2db998e1bdc587f6aa1b125c39e0d9af6ed7ac900d70880812bcaa0993bf2df909b0c356b57cbfdb2b44612c39fd78c95318dd75e1a311614e3c3183a4f5df2143be407853642eeb74a098edb33efe74b8bf669fbd945192894977ca39aabc5b9715e308182900ed77cddf49a044646acda4ae48c089006605ad3f654b5abf6d284f7fed3e7178a3b787cc0b0dbd599dcd386a0abf31132b66bf2b5e0c4caf9445df6f30a6c5", 0xc6, 0x3}], 0x2048, &(0x7f0000001340)={[{@mode={'mode', 0x3d, 0x2}}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d, 0x2f, 0x34, 0x38, 0x2f]}}}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_lt}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000013c0)) r2 = socket$inet(0x2, 0x3, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x80, 0x3, 0xc6, 0x9, 0x2, 0x3, 0xffffffff, 0x187, 0x40, 0x1d6, 0x1f, 0x20, 0x38, 0x2, 0x401, 0x1, 0x8}, [{0xbfaac734de3d4f22, 0xffffffff, 0x0, 0x7, 0x7, 0x8, 0x5}], "a911992850e24e5301fc4aa044dc806b4349ae84177c96cba9e96d4acfdbbdce7cd780bfcb4a09d71bd173a826943de000aedcf9707eb9301855205618a22f27ec27bd6adfacfe0a8e8914235fdd3d39c6855da5fc6cad12d196c158dba0ca7ebb5da4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x2) 00:17:48 executing program 0: r0 = getpgid(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) pidfd_open(r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x5, 0x1, 0xe1, 0x7, 0x0, 0x2, 0x1010, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x34, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x22, 0x7f, 0x8, 0x8, 0x2, 0x2, 0x3, 0x0, 0x800, 0x0, 0x1}, r0, 0xb, r2, 0x8) 00:17:48 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 51) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000380)="a407c3efc1edfab7037255db440500824001767e03522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad060041a2a4667ff6e850cf0d705ae384ed07f3997d548d54a387b3a358f50e58d60d478572ad707707c3cc6abd9c1996759dc2d82974a3c1a3e6a09f9a56c7bd1ad6534bad17baeebae391831f2e0def934e663a10", 0x84, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) [ 1581.807838] FAULT_INJECTION: forcing a failure. [ 1581.807838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1581.810402] CPU: 0 PID: 13599 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1581.811813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1581.813488] Call Trace: [ 1581.814026] dump_stack+0x107/0x167 [ 1581.814769] should_fail.cold+0x5/0xa [ 1581.815587] _copy_from_user+0x2e/0x1b0 [ 1581.816410] __copy_msghdr_from_user+0x91/0x4b0 [ 1581.817355] ? __ia32_sys_shutdown+0x80/0x80 [ 1581.818244] ? udp_v6_push_pending_frames+0x360/0x360 [ 1581.819298] ? inet6_sendmsg+0xbd/0x140 [ 1581.820098] ? inet6_compat_ioctl+0x320/0x320 [ 1581.821000] ? __sock_sendmsg+0x55/0x190 [ 1581.821820] sendmsg_copy_msghdr+0xa1/0x160 [ 1581.822688] ? do_recvmmsg+0x6d0/0x6d0 [ 1581.823489] ? kfree+0x1ab/0x340 [ 1581.824177] ___sys_sendmsg+0xc6/0x170 [ 1581.824969] ? sendmsg_copy_msghdr+0x160/0x160 [ 1581.825897] ? __lockdep_reset_lock+0x180/0x180 [ 1581.826835] ? trace_hardirqs_on+0x5b/0x180 [ 1581.827715] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1581.828623] ? lock_release+0x4d1/0x680 [ 1581.829424] ? __might_fault+0xd3/0x180 [ 1581.830222] ? lock_downgrade+0x6d0/0x6d0 [ 1581.831074] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1581.832174] __sys_sendmmsg+0x195/0x470 [ 1581.832977] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1581.833844] ? lock_downgrade+0x6d0/0x6d0 [ 1581.834691] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1581.835680] ? wait_for_completion_io+0x270/0x270 [ 1581.836647] ? vfs_write+0x354/0xa70 [ 1581.837404] ? fput_many+0x2f/0x1a0 [ 1581.838134] ? ksys_write+0x1a9/0x260 [ 1581.838906] ? __ia32_sys_read+0xb0/0xb0 [ 1581.839729] __x64_sys_sendmmsg+0x99/0x100 [ 1581.840577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1581.841614] do_syscall_64+0x33/0x40 [ 1581.842362] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1581.843415] RIP: 0033:0x7fa76daafb19 [ 1581.844175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.847930] RSP: 002b:00007fa76b025188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1581.849459] RAX: ffffffffffffffda RBX: 00007fa76dbc2f60 RCX: 00007fa76daafb19 [ 1581.850894] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000003 [ 1581.852321] RBP: 00007fa76b0251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1581.853746] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1581.855206] R13: 00007ffcd4a2d4cf R14: 00007fa76b025300 R15: 0000000000022000 VM DIAGNOSIS: 00:17:48 Registers: info registers vcpu 0 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822ca1d1 RDI=ffffffff879e81e0 RBP=ffffffff879e81a0 RSP=ffff888039bb71c8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=000000000000000d R13=000000000000000a R14=ffffffff879e81a0 R15=dffffc0000000000 RIP=ffffffff822ca228 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb919704700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d27ed44a80 CR3=0000000046440000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=ca7de40000000000 401d FPR7=a000000000000000 4001 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff888017c7f600 RCX=ffffffff811a2b7e RDX=ffff88803dc39a40 RSI=ffffffff811a2c07 RDI=0000000000000005 RBP=0000000000000000 RSP=ffff88804d057e10 R8 =0000000000000001 R9 =ffff88806cf3ae83 R10=0000000000000000 R11=0000000000000001 R12=0000000000000008 R13=ffff888041776130 R14=ffff888017c7f608 R15=ffff88806cf3aac0 RIP=ffffffff811a2c07 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d323000 CR3=000000004ba66000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000