x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

[  931.228159] FAULT_INJECTION: forcing a failure.
[  931.228159] name failslab, interval 1, probability 0, space 0, times 0
[  931.229187] CPU: 0 PID: 6441 Comm: syz-executor.7 Not tainted 5.10.226 #1
[  931.229784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  931.230483] Call Trace:
[  931.230731]  dump_stack+0x107/0x167
[  931.231042]  should_fail.cold+0x5/0xa
[  931.231369]  ? create_object.isra.0+0x3a/0xa20
[  931.231759]  should_failslab+0x5/0x20
[  931.232090]  kmem_cache_alloc+0x5b/0x310
[  931.232446]  create_object.isra.0+0x3a/0xa20
[  931.232825]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[  931.233284]  kmem_cache_alloc+0x159/0x310
[  931.233646]  __alloc_file+0x21/0x320
[  931.233965]  alloc_empty_file+0x6d/0x170
[  931.234311]  path_openat+0xe6/0x2770
[  931.234629]  ? __lock_acquire+0x1657/0x5b00
[  931.235001]  ? path_lookupat+0x860/0x860
[  931.235353]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[  931.235805]  ? SOFTIRQ_verbose+0x10/0x10
[  931.236148]  ? find_held_lock+0x2c/0x110
[  931.236507]  do_filp_open+0x190/0x3e0
[  931.236835]  ? may_open_dev+0xf0/0xf0
[  931.237171]  ? alloc_fd+0x2e7/0x670
[  931.237487]  ? lock_downgrade+0x6d0/0x6d0
[  931.237842]  ? do_raw_spin_lock+0x121/0x260
[  931.238209]  ? rwlock_bug.part.0+0x90/0x90
[  931.238584]  ? _raw_spin_unlock+0x1a/0x30
[  931.238939]  ? alloc_fd+0x2e7/0x670
[  931.239255]  do_sys_openat2+0x171/0x4d0
[  931.239597]  ? build_open_flags+0x6f0/0x6f0
[  931.239968]  ? __mutex_unlock_slowpath+0xe1/0x600
[  931.240381]  ? wait_for_completion_io+0x270/0x270
[  931.240798]  __x64_sys_openat+0x13f/0x1f0
[  931.241158]  ? __ia32_sys_open+0x1c0/0x1c0
[  931.241522]  ? ksys_write+0x1a9/0x260
[  931.241849]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[  931.242289]  ? syscall_enter_from_user_mode+0x1d/0x50
[  931.242730]  do_syscall_64+0x33/0x40
[  931.243048]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[  931.243478] RIP: 0033:0x7f41eda0db19
[  931.243800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  931.245361] RSP: 002b:00007f41eaf62188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  931.246021] RAX: ffffffffffffffda RBX: 00007f41edb21020 RCX: 00007f41eda0db19
[  931.246623] RDX: 00000000000a0243 RSI: 0000000020000140 RDI: 0000000000000003
[  931.247224] RBP: 00007f41eaf621d0 R08: 0000000000000000 R09: 0000000000000000
[  931.247830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  931.248433] R13: 00007fff8648164f R14: 00007f41eaf62300 R15: 0000000000022000
03:29:38 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x100000000000000)

03:29:38 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0xa00000000000000)

03:29:38 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:29:38 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x200000000000000)

03:29:38 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:29:38 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[  931.471961] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  932.050762] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  932.063804] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
03:29:38 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x0) (fail_nth: 6)

03:29:38 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x4800000000000000)

03:29:38 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:29:38 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x300000000000000)

03:29:38 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:29:38 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:29:39 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x0, 0x0)

03:29:39 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:29:39 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x4c00000000000000)

[  932.186191] FAULT_INJECTION: forcing a failure.
[  932.186191] name failslab, interval 1, probability 0, space 0, times 0
[  932.187279] CPU: 1 PID: 6481 Comm: syz-executor.7 Not tainted 5.10.226 #1
[  932.187911] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  932.188673] Call Trace:
[  932.188930]  dump_stack+0x107/0x167
[  932.189299]  should_fail.cold+0x5/0xa
[  932.189652]  ? create_object.isra.0+0x3a/0xa20
[  932.190068]  should_failslab+0x5/0x20
[  932.190421]  kmem_cache_alloc+0x5b/0x310
[  932.190808]  create_object.isra.0+0x3a/0xa20
[  932.191221]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[  932.191699]  kmem_cache_alloc+0x159/0x310
[  932.192092]  __alloc_file+0x21/0x320
[  932.192437]  alloc_empty_file+0x6d/0x170
[  932.192813]  path_openat+0xe6/0x2770
[  932.193164]  ? __lock_acquire+0x1657/0x5b00
[  932.193584]  ? path_lookupat+0x860/0x860
[  932.193968]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[  932.194451]  ? SOFTIRQ_verbose+0x10/0x10
[  932.194838]  ? find_held_lock+0x2c/0x110
[  932.195227]  do_filp_open+0x190/0x3e0
[  932.195579]  ? may_open_dev+0xf0/0xf0
[  932.195937]  ? alloc_fd+0x2e7/0x670
[  932.196269]  ? lock_downgrade+0x6d0/0x6d0
[  932.196651]  ? do_raw_spin_lock+0x121/0x260
[  932.197057]  ? rwlock_bug.part.0+0x90/0x90
[  932.197479]  ? _raw_spin_unlock+0x1a/0x30
[  932.197873]  ? alloc_fd+0x2e7/0x670
[  932.198226]  do_sys_openat2+0x171/0x4d0
[  932.198600]  ? build_open_flags+0x6f0/0x6f0
[  932.199006]  ? __mutex_unlock_slowpath+0xe1/0x600
[  932.199460]  ? wait_for_completion_io+0x270/0x270
[  932.199919]  __x64_sys_openat+0x13f/0x1f0
[  932.200313]  ? __ia32_sys_open+0x1c0/0x1c0
[  932.200703]  ? ksys_write+0x1a9/0x260
[  932.201066]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[  932.201571]  ? syscall_enter_from_user_mode+0x1d/0x50
[  932.202052]  do_syscall_64+0x33/0x40
[  932.202407]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[  932.202882] RIP: 0033:0x7f41eda0db19
[  932.203229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  932.204890] RSP: 002b:00007f41eaf62188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  932.205596] RAX: ffffffffffffffda RBX: 00007f41edb21020 RCX: 00007f41eda0db19
[  932.206246] RDX: 00000000000a0243 RSI: 0000000020000140 RDI: 0000000000000003
[  932.206900] RBP: 00007f41eaf621d0 R08: 0000000000000000 R09: 0000000000000000
[  932.207556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  932.208212] R13: 00007fff8648164f R14: 00007f41eaf62300 R15: 0000000000022000
03:29:39 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x400000000000000)

03:29:53 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x0) (fail_nth: 7)

03:29:53 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:29:53 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x6800000000000000)

03:29:53 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:29:53 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x500000000000000)

[  946.776399] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
03:29:53 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:29:53 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:29:53 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[  946.782040] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  946.788409] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  946.844282] FAULT_INJECTION: forcing a failure.
[  946.844282] name failslab, interval 1, probability 0, space 0, times 0
[  946.846653] CPU: 0 PID: 6513 Comm: syz-executor.7 Not tainted 5.10.226 #1
[  946.847843] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  946.849306] Call Trace:
[  946.849915]  dump_stack+0x107/0x167
[  946.850722]  should_fail.cold+0x5/0xa
[  946.851567]  ? create_object.isra.0+0x3a/0xa20
[  946.852581]  should_failslab+0x5/0x20
[  946.853387]  kmem_cache_alloc+0x5b/0x310
[  946.853740]  ? percpu_ref_put_many.constprop.0+0x4e/0x110
[  946.854210]  create_object.isra.0+0x3a/0xa20
[  946.854589]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[  946.855028]  kmem_cache_alloc+0x159/0x310
[  946.855394]  security_file_alloc+0x34/0x170
[  946.855768]  __alloc_file+0xb7/0x320
[  946.856084]  alloc_empty_file+0x6d/0x170
[  946.856432]  path_openat+0xe6/0x2770
[  946.856755]  ? __lock_acquire+0x1657/0x5b00
[  946.857128]  ? path_lookupat+0x860/0x860
[  946.857545]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[  946.857991]  ? SOFTIRQ_verbose+0x10/0x10
[  946.858341]  ? find_held_lock+0x2c/0x110
[  946.858699]  do_filp_open+0x190/0x3e0
[  946.859030]  ? may_open_dev+0xf0/0xf0
[  946.859360]  ? alloc_fd+0x2e7/0x670
[  946.859674]  ? lock_downgrade+0x6d0/0x6d0
[  946.860038]  ? do_raw_spin_lock+0x121/0x260
[  946.860407]  ? rwlock_bug.part.0+0x90/0x90
[  946.860777]  ? _raw_spin_unlock+0x1a/0x30
[  946.861128]  ? alloc_fd+0x2e7/0x670
[  946.861481]  do_sys_openat2+0x171/0x4d0
[  946.861828]  ? build_open_flags+0x6f0/0x6f0
[  946.862196]  ? __mutex_unlock_slowpath+0xe1/0x600
[  946.862613]  ? wait_for_completion_io+0x270/0x270
[  946.863036]  __x64_sys_openat+0x13f/0x1f0
[  946.863386]  ? __ia32_sys_open+0x1c0/0x1c0
[  946.863746]  ? ksys_write+0x1a9/0x260
[  946.864076]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[  946.864520]  ? syscall_enter_from_user_mode+0x1d/0x50
[  946.864957]  do_syscall_64+0x33/0x40
[  946.865272]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[  946.865737] RIP: 0033:0x7f41eda0db19
[  946.866060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  946.867600] RSP: 002b:00007f41eaf62188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  946.868242] RAX: ffffffffffffffda RBX: 00007f41edb21020 RCX: 00007f41eda0db19
[  946.868847] RDX: 00000000000a0243 RSI: 0000000020000140 RDI: 0000000000000003
[  946.869480] RBP: 00007f41eaf621d0 R08: 0000000000000000 R09: 0000000000000000
[  946.870079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  946.870677] R13: 00007fff8648164f R14: 00007f41eaf62300 R15: 0000000000022000
[  961.468701] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
03:30:08 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x0) (fail_nth: 8)

03:30:08 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:30:08 executing program 2:
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:30:08 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x600000000000000)

03:30:08 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:30:08 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:30:08 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r2, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6)
getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:30:08 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x6c00000000000000)

[  961.494784] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  961.512004] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  961.536204] FAULT_INJECTION: forcing a failure.
[  961.536204] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  961.537263] CPU: 1 PID: 6536 Comm: syz-executor.7 Not tainted 5.10.226 #1
[  961.537860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  961.538561] Call Trace:
[  961.538796]  dump_stack+0x107/0x167
[  961.539111]  should_fail.cold+0x5/0xa
[  961.539445]  _copy_to_user+0x2e/0x180
[  961.539779]  simple_read_from_buffer+0xcc/0x160
[  961.540183]  proc_fail_nth_read+0x198/0x230
[  961.540555]  ? proc_sessionid_read+0x230/0x230
[  961.540949]  ? security_file_permission+0xb1/0xe0
[  961.541367]  ? proc_sessionid_read+0x230/0x230
[  961.541770]  vfs_read+0x228/0x620
[  961.542073]  ksys_read+0x12d/0x260
[  961.542380]  ? vfs_write+0xb10/0xb10
[  961.542707]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[  961.543157]  ? syscall_enter_from_user_mode+0x1d/0x50
[  961.543599]  do_syscall_64+0x33/0x40
[  961.543921]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[  961.544355] RIP: 0033:0x7f41ed9c069c
[  961.544676] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  961.546239] RSP: 002b:00007f41eaf62170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  961.546887] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f41ed9c069c
[  961.547492] RDX: 000000000000000f RSI: 00007f41eaf621e0 RDI: 0000000000000005
[  961.548095] RBP: 00007f41eaf621d0 R08: 0000000000000000 R09: 0000000000000000
[  961.548702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  961.549305] R13: 00007fff8648164f R14: 00007f41eaf62300 R15: 0000000000022000
03:30:08 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x7400000000000000)

03:30:08 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:30:08 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x700000000000000)

03:30:08 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x7a00000000000000)

03:30:08 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x0)

03:30:08 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:30:23 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x900000000000000)

03:30:23 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x2)

03:30:23 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)

03:30:23 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:30:23 executing program 2:
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:30:23 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0xffffffff00000000)

03:30:23 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:30:23 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r2, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6)
getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[  976.366231] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  976.369926] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  976.374712] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
03:30:23 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:30:23 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0xffffffffffffffff)

03:30:23 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)

03:30:23 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0xa00000000000000)

03:30:23 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:30:23 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:30:23 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)

03:30:37 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x3)

03:30:37 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000"])

03:30:37 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:30:37 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x4800000000000000)

03:30:37 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:30:37 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = mq_open(&(0x7f0000000000)='smaps\x00', 0x800, 0x0, &(0x7f0000000040)={0x8, 0xff, 0x3ff, 0x9})
ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000000c0)={0x2, 0x1000, @status={[0x101, 0xcfcb, 0x4, 0xfffffffffffffbd6, 0xff, 0x9]}, [0x7, 0x0, 0x36208b46, 0x3, 0x5, 0x100000000000000, 0x3, 0x6, 0xfffffffffffffffe, 0xffc, 0x8001, 0x6, 0x8, 0x9, 0x40, 0x80, 0x101, 0x8, 0x9, 0x10000, 0x1, 0x3f, 0x0, 0x1fc, 0x7, 0x3, 0xfffffffeffffffff, 0x7ff, 0x7, 0x10001, 0x10dc, 0x81, 0x3, 0x26, 0xffffffff, 0x8, 0x20, 0x176b5039, 0x1, 0x3f, 0x2, 0xffffffffffffffff, 0xdad, 0x5, 0x9, 0x400, 0x1000, 0x2, 0x4, 0x200, 0x8f, 0x4, 0x7, 0xfc5, 0x5, 0x400, 0x40, 0xac3d, 0x40, 0xc9d, 0x401, 0x7fffffff, 0x40, 0x7fffffff]})
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:30:37 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:30:37 executing program 2:
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[  990.817568] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  990.826280] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
03:30:37 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x800)
r2 = gettid()
sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002100)={0x14ec, 0x13, 0x200, 0x70bd28, 0x25dfdbfd, {0x20}, [@nested={0x1329, 0x7b, 0x0, 0x1, [@generic="61fb867424ada71664c430901fd44e732a1b7370055930fae226f9b9e231b594ee887780ed0103578b2f5b79d590e231dbae1269f995e1b167a91a066cef3caee1d43269eb085c1e6c80e9ff16ed9efbcd08d392d7e5d4341f2b95cbe65fe079cdca9255af8225acf9786fad1f99", @generic="0a8488c1d44a5f9a5c55bf41cbaa99632bf1cf96dec6465e77a2ffb8b064412226ef19817979540d2988c98843b86693a30077430be6075f963340b14f765e1368ad9bf204b04bc46d3eab5d587e21d1686e2473d86c62b44cb6c3b5c43bf969a4b952104f964b251908b67600a9c5437b72a86e45dcf2043ac083f6ed0f62aae189dcde094c5297877ee1240ce1303b333e3dd3bc", @generic="3afae26bda36127fcbb7e1a0574d559b5947fb28507d84fb8e2db6c5772919505fb9cd6a7055f9e503d2a421f1d90e30343446145aad22986d6b7955fa8db9d667a1448761d160fd5603980e8259c82ccff576de139d740ee9a47800f1e745c4d62ca1af234ed34054b3cd5d8d3b55918d032cc90968ab87d3d49b9e00bac6b250c9d647e6e4ac99e1d4181a270bb34024c4d53743f8366836fb322939d04889e603d6327b89a5dee587e6", @typed={0x8, 0x31, 0x0, 0x0, @pid=r2}, @generic="3cf0e997028cd9081874d91bce36a03d198fe3b5e33648e73a8341b1966df984c413b70d11c3ce46441a5fc3b329f5ea53988bf443249203d370e38628188980320e9478a4acfbe21809f1c160c287ed16b57f1264230c8271f5696ef0785868a4419eb239f8b8a9da51344e15", @generic="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", @typed={0x9f, 0x41, 0x0, 0x0, @binary="f7382f8cba607da6a297b0cf90cc641580b9a6ce10d79646988e854b9de2b207a16d404ed981a76cbb1ab7dd6943a07b9e889f3138bee7aac394107425e7fadc6fa3632703b31c0272125234212d3037f1164234cdb2d58c371bdb4b6ec75ab1f161574d83440a6c74a09fca802e42a292e2336a9c51ec993a990fbddf274918f1184a5e1b179e479d423cad2f4d107a115778a7a4c212746712a3"}, @generic="0ead88c04a54f178ef503f5a73a29681d282e64e80a1bc12564cb689ef3862773d618ebf146305796b4a108a8678ab6a8d9a3c01a7315c5e16109be602ccd287e392debe71a68dd6f4716c50b019232e02b006ca19c872930ac36727ca37d073e5e3"]}, @nested={0x1aa, 0x93, 0x0, 0x1, [@generic="2b7560361eed62b6c4eac1d4f36db656d6cbaf513d293312856c496ba927ba9281e016950c1af0ac86c38aa1d238bf57069170354179f5c6bd05ce82e5a805aad2399b2540e50db1d781cd18416f7dde574b019688b35eedbaf65dfcc48fddbb0c5cfeef9e62c4e61a55e2ef8ac0fd0a59c53b1f4cc5bb8831784a1bfbe03cfae42908edfa2b1ac44210073b1f4721bb4171685c6f96b7d4cc17ae6cb861370066d570e2df477516055910284ae4c3db37e74133cd9273c92f6ae94d13", @typed={0x4, 0x59}, @generic="3085ea64fa2d3ca160b6e651d78fb015786150a4641f53fa6b2ea9b0ca479363bb721092c744e1f9e93dd7e8c9ff9f8369d48c6760cad5c081d1c0b6c68b5439fae1b40eace997eebeb84c97bb14f719c86ce8f2127e06292e4f155d92161f7efe537cd90e917f12df7eb3cc1894bd44606b1af823c2b08348f970aa4681a03eda5ef4fba2e787a461a7119a7c56f03685265bd82ccf4cec72059440afcc304afb5a3580960a1ddf9ef7be2690065e85a98bfdfa07f7894f98a69d3215d84fdf5d0c2dbc0afd", @generic="7631356b573938fe753e1b31fbcdd2b0188575c6695299", @typed={0x8, 0x71, 0x0, 0x0, @u32=0xff}]}]}, 0x14ec}}, 0x8010)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
timer_create(0x5, &(0x7f0000000140)={0x0, 0x37, 0x4, @tid=r2}, &(0x7f0000000180))

03:30:37 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000"])

03:30:37 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:30:37 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x4c00000000000000)

03:30:37 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000340)=0x1, 0x4)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', <r6=>0x0})
bind$packet(r4, &(0x7f0000000040)={0x11, 0x1, r6, 0x1, 0x8, 0x6, @random="190002400a00"}, 0x14)
accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, <r7=>0x0}, &(0x7f0000000100)=0x14)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'lo\x00', <r10=>0x0})
bind$packet(r8, &(0x7f0000000040)={0x11, 0x1, r10, 0x1, 0x8, 0x6, @random="190002400a00"}, 0x14)
accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r11=>0x0}, &(0x7f0000000180)=0x14, 0x80800)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb0, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x804}, 0x2000c040)

03:30:37 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:30:37 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000"])

03:30:37 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

[  991.030082] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
03:30:52 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:30:52 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x6800000000000000)

03:30:52 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x4)

[ 1005.197609] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1005.203076] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
03:30:52 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:30:52 executing program 3:
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:30:52 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32])

03:30:52 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:30:52 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1005.227896] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
03:30:52 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:30:52 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32])

03:30:52 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x6c00000000000000)

03:30:52 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:30:52 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{0x0, 0xf2c, 0x9, 0x1a740000000, 0x820, 0x1, 0x8, 0x5, 0xf2, 0x4, 0x7ff, 0x10001, 0xffffffffffffff59, 0x10001, 0x7}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x67, 0x7, 0x1f, 0x2, 0x3, 0x3, 0x0, 0x8, 0x2f9, 0x40, 0x262, 0x3, 0x9, 0x38, 0x2, 0x20, 0x4, 0xe99}, [{0x7, 0x6, 0x40, 0x8, 0xfa92, 0x8, 0x1, 0x1000}], "68c8317abef811b580faefc4829e68e47d2ed3326600e9acf780cb4cc4a7a1244f56f24b7a13eb2ef6f9ee53aa3708fe2a7ec90b045877810b5c862a74f561648869c3c723adacd1c8661af7eb5136940e4dbfb683", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9cd)

03:30:52 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
pread64(r0, &(0x7f00000000c0)=""/248, 0xf8, 0xce1)

03:30:52 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32])

03:30:52 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:30:52 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x7400000000000000)

03:30:52 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1005.623836] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1005.632897] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1020.656919] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
03:31:07 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:31:07 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x6f, 0x1, 0xf, 0xff, 0x0, 0x3f, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcb67, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x200, 0x401, 0x1ff, 0x3, 0x5, 0xfffffffb, 0x5, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x3, r1, 0x1)

03:31:07 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:31:07 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00), 0x0, 0x10062, 0x0)

03:31:07 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x7a00000000000000)

03:31:07 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYRES32=r0])

03:31:07 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x5)

03:31:07 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:31:07 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00), 0x0, 0x10062, 0x0)

03:31:07 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

[ 1020.751079] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
03:31:07 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x0, 0x0, 0x1f, 0x0, 0x3, 0x80100, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x46, 0x9}, 0x2448, 0x7, 0x3f, 0x1, 0xffffffff, 0xffff9452, 0x5, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x0)

03:31:07 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYRES32=r0])

03:31:07 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0xffffffff00000000)

03:31:07 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r2, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6)
getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r1, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:31:07 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:31:07 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')

03:31:23 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x8)

03:31:23 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1036.621056] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
03:31:23 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0xffffffffffffffff)

03:31:23 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
socket$netlink(0x10, 0x3, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r2, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6)
getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:31:23 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:31:23 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:31:23 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYRES32=r0])

03:31:23 executing program 6:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
recvmmsg$unix(r0, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f0000002100)=""/243, 0xf3}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/131, 0x83}, {&(0x7f0000000040)=""/46, 0x2e}], 0x7, &(0x7f00000043c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000004480)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f00000010c0)=""/35, 0x23}, {&(0x7f0000004500)=""/47, 0x2f}, {&(0x7f0000004540)=""/230, 0xe6}, {&(0x7f0000004640)=""/28, 0x1c}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/157, 0x9d}, {&(0x7f0000004780)=""/12, 0xc}], 0x7, &(0x7f0000004840)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004880), 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004900)=""/131, 0x83}, {&(0x7f00000049c0)=""/199, 0xc7}, {&(0x7f0000004ac0)=""/21, 0x15}, {&(0x7f0000004b00)=""/157, 0x9d}, {&(0x7f0000004bc0)=""/145, 0x91}, {&(0x7f0000004c80)=""/253, 0xfd}], 0x6, &(0x7f0000004e00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000004e80), 0x6e, &(0x7f0000005100)=[{&(0x7f0000004f00)=""/200, 0xc8}, {&(0x7f0000005000)=""/140, 0x8c}, {&(0x7f00000050c0)=""/46, 0x2e}], 0x3, &(0x7f0000007700)=ANY=[@ANYBLOB="280000005688c4694423a69aa7004e355f5a602492c52fc5cde0f9634a77ed97b2e085d885808b607d1490d326806638fcfa4b96636da6fb8105b401759be26d7d1a88280bf6daf1296161b42be8e0280325edbcc8ed2d79ef12bb9e4b111e1d9cba", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=<r2=>0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x98}}], 0x4, 0x40, 0x0)
syz_open_procfs(r2, &(0x7f0000005300)='net/ip_vs\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000056b00)={{<r4=>0x0, 0x8, 0x7, 0x9, 0x3, 0x5, 0x6, 0xffff, 0x3, 0x1, 0x0, 0x2, 0x3f, 0x1000, 0x5}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={<r5=>0x0, ""/256, <r6=>0x0, <r7=>0x0})
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r8, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
sendmsg$NL80211_CMD_TESTMODE(r8, &(0x7f00000076c0)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000007680)={&(0x7f00000063c0)={0x1288, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x8b, 0x45, "e36928b083874095b10df554812ffc821573148c97898c29d423602cf75f2c7e1c2dd2fc88c43b9027218f3487f184cbcc1f8e9b62797adbfaf26086010012bb9de4f455e948d9fae5a753a68b5128886b1e44ad184f1ebc57ecbac7b064148fba6d6a5451c34e6a5959153087d7fc1fbd78475e04175f5556c85beebe40ab681e3cd9faad5633"}, @NL80211_ATTR_TESTDATA={0x2b, 0x45, "ec78479705e3ebd4022a2c29572ad1badb0eae5efc88163f54a796378ddd1edd0fbd9904294999"}, @NL80211_ATTR_TESTDATA={0x61, 0x45, "21c3fa09189593eb3953308e8b852f2abf29ed11a5cd497e573522f92a2564a06edda6c0e0a175a6b3a8fe01ba179d740186df9f68d8cf908dd0d21cd31ff19b4f1915e4b434dafeda3ea29e0caaa356e22796fb6bf06e7837db930bd5"}, @NL80211_ATTR_TESTDATA={0x81, 0x45, "c6c1b31112911450792d5465455a792d39344d972ed5654c22710658c3a2cbe30067f4e1b98007e037b697a8c12d6b8c73e4b1d1b976a76b4a595b85340de4d89c67d3a68dd21f6eca9c90098c99db2b548f41c99267d71bf79d48b5ef1fa822358116d1befeab18e935d36d59f76338bb4fb2bd8b9c8fab85a5b9296d"}, @NL80211_ATTR_TESTDATA={0x1d, 0x45, "b74d334744b14f0ec73d039d600c27ff13c53664bd8c809714"}, @NL80211_ATTR_TESTDATA={0x27, 0x45, "b0bbc6e9a56898d6b19423fc5da0a9ffe0c3c0223221544dd79128f75b0abb407f2afe"}, @NL80211_ATTR_TESTDATA={0x13, 0x45, "2936e5b373eb145bdb6bfcb7e219dd"}, @NL80211_ATTR_TESTDATA={0x72, 0x45, "9f143d00637cafed8a3885c1f90b51931bafdb43ec40ea6696023e4a1afeaf0592fe4209e3c382f6bd6ebdaa5c3fe059fc9c5b4267c36fd7b134110ad0f582cd5bdd744447bbf459ccbf5dbe2b35ee8732fdd6951f4f774fc8a58bc3368ab842f7fac81bf96af92facdf0b687b88"}]}, 0x1288}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x0, "46dacd8396fe92"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r7}], 0x80, "5fabd34a60e47f"})
openat$zero(0xffffffffffffff9c, &(0x7f0000006340), 0x1, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000005340)={r9, 0x9c})
pread64(r3, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
syz_open_dev$vcsn(&(0x7f0000004680), 0x8, 0x18280)

03:31:23 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:31:23 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x0)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:31:23 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)={0x0, <r3=>0x0})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x1, 0x81, 0x5, r3})
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1036.709870] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
03:31:23 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0])

03:31:23 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:31:23 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
pipe(&(0x7f0000000000))

03:31:23 executing program 6:
ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000180)={"ac8eef4e71c9d177d152e414", &(0x7f00000000c0)="7d5920ccf29c8d2b6fec46f545db64f75ebfe851981f004fdbfef4ee3dc5dcbbcd8f4031db1bb2a61e45da6575ea52237c38ca54fc9f963982a6f9747fcd467f021df9805cf6fea13aad55c232750b84673cbdf8f3cc11de4ec21edd0dfc3c6a098fdc9587df76e33a67e36cb20c19456c06714c832c436fd5f6532f313f2ea0408fd736641b539fcd7bf64d", 0x8c, 0x10, &(0x7f0000000000)={0x76, 0x0, 0x19, 0x6, 0x0, 0x1, 0x0, "e1c86b90", 0x6, "22690fd7", 0x3, 0x5, 0x3, "ef3ab9", "cb2a311fc5e66f5e61b9a5f4f3db5cfdb889fe6065114f18f8ca56ca19e456b62726600cb101d72e2584b83c5f5d"}, 0x2, 0xc3, 0x3, &(0x7f0000000040)})
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000740)={0xc245, {0x20, 0x2, 0x400, 0x3, 0x4}})
readv(r1, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/176, 0xb0}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/145, 0x91}, {&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f0000000500)=""/155, 0x9b}, {&(0x7f00000005c0)=""/198, 0xc6}], 0x7)

03:31:23 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:31:38 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x18)

03:31:38 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:31:38 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0])

03:31:38 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x10000000)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000000040)={0x11, 0x1, r4, 0x1, 0x8, 0x6, @random="190002400a00"}, 0x14)
syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000000)=@can={0x1d, r4}, 0x0, 0x0, 0x1}, 0x7)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:31:38 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r0=>0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r5}}, 0x0)
r6 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x7, &(0x7f0000000580)=[{&(0x7f00000000c0)="aefe070d88de4aab10b576c064f62f259b386e6b3133db09ba95c782d8f45c4e85e44edee12b0af600ed86ba4ff33c01804745ebac344554f43fea3d617dbbd6f7afad6b5f9676ccac24ac11c66ab0669c89009be2daf31e497e2cd02551b52d179c2dd53f7096558d0e45", 0x6b, 0x2}, {&(0x7f0000000140)="19893c0f1082e22205e2f6045af3b852fa516f8004be9206241fefb54d37cd4cdfba258a14a1c3684c0cd4b4f735aad8e9fbde5ea47cd1093fd37a083096639db8754a55f5f5cae00d6e126b40e8fe6ffc6e", 0x52, 0x401}, {&(0x7f0000000240)="b3f6077ad644c0e507d923cb8920dd75c8915539613df4635aaa302470f79ffcddbd3daf3ed44072e137ff7c8bc59e576deb37b692a372782dedf3da7170f78b82883268f61cecf5c0ca011db0ca062d4dab7c042309264a0c4e55d5c80726e03f357685ba38faa2f42e3c427e10ca800381cc00aa2b0abe0ef5113157", 0x7d, 0xffff}, {&(0x7f0000000340)="48118b9e486bddc54df6126ef0816802cc0cf905029a1e8507d39b5e91e9b0b561f26f8aa5fa8e4bb972a2511a4672256b79e1089db5dda86409c7738862d92069da6fc1dc30e492a9c67ee5ee762ccc8dcb730a19be50c00f70fcae03c71da59e03e9d22b1a3b4ddce0be410a2d3124ad3864c69b64707d03d4a31fdcfc7d198545f96afdee61ee4a90", 0x8a, 0x7f}, {&(0x7f00000001c0), 0x0, 0x2}, {&(0x7f0000000400)="31b553739a85d09c5d09d57b32e34ea8e571691263de086d1066caab14af0ea3ea8a317ee73e35f85b9ecf203a83e32067b10e1e10687536acde723d65a7708510469a626a115bb33544e50f62fab47abbdaa9efd47d4f009b2113ef0d100076a5083a82c825a94a4990c1f448a15b60ca00593a98c813265c36affde19d2a4425370a29f0d433ffe703c09861a15dfc30eae376388e978dfc66", 0x9a, 0x2}, {&(0x7f00000004c0)="a3d1628b5ed19fbf35fddc9f1a0ae2c59e6a380f448000513c6d00dcf6581376e5817777c7ae68bf925397eb21e660252ac59ff4f3e40e9a3e5f3a60b69351e181705d47bb61bd49e6a9be6a5373082f96d82ef6ce89064ab8fc031381dd00dd4e3549ce2610359a2cb6ab09dc6be49166602b5c96642e40dadadfbb055e56d97cd407cad9295d620531abb982c27ae3d288a07a56b7da08f14a609ddc0196176f2be563d14d7d0fd0aafc5d431c39", 0xaf, 0xe12e}], 0x2002818, &(0x7f0000000640)={[{@huge_within_size}, {@huge_within_size}, {@mode={'mode', 0x3d, 0x4}}, {}, {@mode={'mode', 0x3d, 0xac9a}}, {@nr_inodes={'nr_inodes', 0x3d, [0x36]}}, {@gid}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@obj_role={'obj_role', 0x3d, '&'}}, {@audit}, {@dont_measure}]})
r7 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r10}}, 0x0)
syz_io_uring_submit(r0, r4, &(0x7f0000000740)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r6, 0x100000001, 0x0, 0x2, 0x1, 0x1, {0x0, r10}}, 0xd23d)
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:31:38 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:31:38 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
socket$netlink(0x10, 0x3, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r2, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6)
getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:31:38 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 1)

[ 1051.531211] FAULT_INJECTION: forcing a failure.
[ 1051.531211] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1051.532343] CPU: 1 PID: 6809 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1051.532941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1051.533671] Call Trace:
[ 1051.533918]  dump_stack+0x107/0x167
[ 1051.534274]  should_fail.cold+0x5/0xa
[ 1051.534673]  _copy_from_user+0x2e/0x1b0
[ 1051.535046]  __copy_msghdr_from_user+0x91/0x4b0
[ 1051.535467]  ? __ia32_sys_shutdown+0x80/0x80
[ 1051.535870]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1051.536343]  ? SOFTIRQ_verbose+0x10/0x10
[ 1051.536710]  ? mark_lock+0xf5/0x2df0
[ 1051.537051]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1051.537523]  ? SOFTIRQ_verbose+0x10/0x10
[ 1051.537899]  ___sys_recvmsg+0xd5/0x200
[ 1051.538255]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1051.538710]  ? __fget_files+0x2cf/0x520
[ 1051.539068]  ? lock_downgrade+0x6d0/0x6d0
[ 1051.539446]  ? lock_downgrade+0x6d0/0x6d0
[ 1051.539826]  ? __fget_files+0x2f8/0x520
[ 1051.540190]  ? __fget_light+0xea/0x290
[ 1051.540547]  do_recvmmsg+0x24c/0x6d0
[ 1051.540888]  ? ___sys_recvmsg+0x200/0x200
[ 1051.541262]  ? lock_downgrade+0x6d0/0x6d0
[ 1051.541640]  ? ksys_write+0x12d/0x260
[ 1051.541992]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1051.542431]  ? wait_for_completion_io+0x270/0x270
[ 1051.542884]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1051.543297]  ? vfs_write+0x354/0xb10
[ 1051.543628]  __x64_sys_recvmmsg+0x20f/0x260
[ 1051.544016]  ? ksys_write+0x1a9/0x260
[ 1051.544357]  ? __do_sys_socketcall+0x600/0x600
[ 1051.544768]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1051.545239]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1051.545702]  do_syscall_64+0x33/0x40
[ 1051.546038]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1051.546505] RIP: 0033:0x7f96c2c53b19
[ 1051.546848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1051.548456] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1051.549133] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1051.549790] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1051.550424] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1051.551104] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001
[ 1051.551732] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
[ 1051.617150] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
03:31:38 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0])

03:31:38 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:31:38 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100", @ANYRES32=r0])

03:31:38 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:31:38 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x1010, r0, 0x10000000)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x1, 0x4000, @fd_index=0x7, 0x0, &(0x7f00000000c0)="b0a6d27f61623d6e9f1395264e2807733c37e7b2fddf1cf835fd8b68445f41fa590a4765055f07aeef86c5be22fb548156fa9bacde32b27b470ecc9ac3572fea3328c8ac2475948e4043cd4cacca599d76066fca8cfa78c88795b2b5b8f1cf3deccc239d06659abc85efbc2f047481df59ad8a283d4bc9dfb8d6f52264119ad96d89f9c6e845b4162ea7e0cdf7cc01e6", 0x90, 0x1a, 0x1}, 0x9)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
pread64(r3, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:31:38 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 2)

03:31:38 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00')
syz_io_uring_setup(0x5418, &(0x7f0000000000)={0x0, 0xab88, 0x6, 0x1, 0x351}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000140)}, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x10, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f00000001c0)={0x77359400}, 0x1, 0x1, 0x1}, 0x6f2bee10)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1051.751960] FAULT_INJECTION: forcing a failure.
[ 1051.751960] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1051.753168] CPU: 1 PID: 6840 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1051.753684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1051.754287] Call Trace:
[ 1051.754497]  dump_stack+0x107/0x167
[ 1051.754804]  should_fail.cold+0x5/0xa
[ 1051.755099]  _copy_from_user+0x2e/0x1b0
[ 1051.755392]  __copy_msghdr_from_user+0x91/0x4b0
[ 1051.755752]  ? __ia32_sys_shutdown+0x80/0x80
[ 1051.756101]  ? __lock_acquire+0x1657/0x5b00
[ 1051.756432]  ___sys_recvmsg+0xd5/0x200
[ 1051.756739]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1051.757113]  ? __fget_files+0x2cf/0x520
[ 1051.757406]  ? lock_acquire+0x197/0x470
[ 1051.757709]  ? find_held_lock+0x2c/0x110
[ 1051.758026]  ? __might_fault+0xd3/0x180
[ 1051.758317]  ? lock_downgrade+0x6d0/0x6d0
[ 1051.758678]  do_recvmmsg+0x24c/0x6d0
[ 1051.758981]  ? ___sys_recvmsg+0x200/0x200
[ 1051.759280]  ? lock_downgrade+0x6d0/0x6d0
[ 1051.759587]  ? ksys_write+0x12d/0x260
[ 1051.759917]  ? wait_for_completion_io+0x270/0x270
[ 1051.760268]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1051.760607]  ? vfs_write+0x354/0xb10
[ 1051.760913]  __x64_sys_recvmmsg+0x20f/0x260
[ 1051.761227]  ? ksys_write+0x1a9/0x260
[ 1051.761505]  ? __do_sys_socketcall+0x600/0x600
[ 1051.761875]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1051.762252]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1051.762663]  do_syscall_64+0x33/0x40
[ 1051.762962]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1051.763330] RIP: 0033:0x7f96c2c53b19
[ 1051.763602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1051.764972] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1051.765518] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1051.766060] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1051.766599] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1051.767138] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001
[ 1051.767682] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
[ 1051.771329] audit: type=1400 audit(1728963098.719:50): avc:  denied  { map } for  pid=6836 comm="syz-executor.6" path="/proc/6836/fdinfo" dev="proc" ino=29778 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1
03:31:52 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x300)

03:31:52 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

[ 1065.890304] FAULT_INJECTION: forcing a failure.
[ 1065.890304] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1065.892760] CPU: 0 PID: 6853 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1065.894276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1065.899194] Call Trace:
[ 1065.899428]  dump_stack+0x107/0x167
[ 1065.899756]  should_fail.cold+0x5/0xa
[ 1065.900088]  _copy_from_user+0x2e/0x1b0
[ 1065.900432]  __copy_msghdr_from_user+0x91/0x4b0
[ 1065.900842]  ? __ia32_sys_shutdown+0x80/0x80
[ 1065.901220]  ? __lock_acquire+0x1657/0x5b00
[ 1065.901604]  ___sys_recvmsg+0xd5/0x200
[ 1065.901950]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1065.902369]  ? __fget_files+0x2cf/0x520
[ 1065.902728]  ? lock_acquire+0x197/0x470
[ 1065.903080]  ? find_held_lock+0x2c/0x110
[ 1065.903451]  ? __might_fault+0xd3/0x180
[ 1065.903806]  ? lock_downgrade+0x6d0/0x6d0
[ 1065.904191]  do_recvmmsg+0x24c/0x6d0
[ 1065.904538]  ? ___sys_recvmsg+0x200/0x200
[ 1065.904892]  ? lock_downgrade+0x6d0/0x6d0
[ 1065.905270]  ? ksys_write+0x12d/0x260
[ 1065.905631]  ? wait_for_completion_io+0x270/0x270
[ 1065.906079]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1065.906499]  ? vfs_write+0x354/0xb10
[ 1065.906842]  __x64_sys_recvmmsg+0x20f/0x260
[ 1065.907223]  ? ksys_write+0x1a9/0x260
[ 1065.907547]  ? __do_sys_socketcall+0x600/0x600
[ 1065.907939]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1065.908400]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1065.908843]  do_syscall_64+0x33/0x40
03:31:52 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:31:52 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xa0098, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, @perf_config_ext, 0x3028, 0x0, 0xffffffff, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x4, 0x3a, 0x1f, 0x0, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x40, 0x8000, 0x4, 0x8, 0x6, 0x4, 0xfff8, 0x0, 0x8, 0x0, 0x3ff}, 0x0, 0xc, r0, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)

03:31:52 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100", @ANYRES32=r0])

03:31:52 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/251, 0xfb}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000000)=""/122, 0x7a}], 0x3)
pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4085, 0xff5, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x7, 0x4, &(0x7f00000006c0)=[{&(0x7f0000000440)="526eb3ec2c00f1920eb417098020b634f688068263bf201b56048b1d7e104024b92056fec485a5957d3eb20a4b8e6067abab88d76cd60a6c670fcdf10be99d3e4fcd49746e9316edeb06ad8aefc4ac68baab0cc6f55ced97272f705249868ceab0fcba5414b3a6f9e5a807588dc31dd05d97c65d22d93c1c4e66bf32fa8c", 0x7e}, {&(0x7f0000000280)="75c472", 0x3, 0xd26}, {&(0x7f00000004c0)="2f904125a63d1b7046b1c403bb938ca917effdca19612e160b3dcf32dcc553e8bb8130e79ba7da9d8be4f30f6e37c46beae8450674216c403b7e1f64c1e601d5173da1ad154e98895a4d7fcc2418bce894572b6157ec65d26d7ce216da5fd62b26dde5d99fed19e259586d1c32e285b88cb7ca85329f96a8ecbc5ec324ddfc991bb9078200e2c1a3db681202abde9c5d079a3c56e89d9b3ec8117b8063487f2555d0e86052eca742bfa4dc4713abc1faf2ae1031481763b3d32aa7958d2109fe8a22d11529ce827bb7535d6f250fa5294b205b1bab169f9a6ba73afc836c06a932", 0xe1}, {&(0x7f00000005c0)="02129ff3c87dd80c874d22e1fb3870d0bcb9cea66ac3b4077682209e391ca13df5085138f50f0eb722735d8ed17197b9e74d208e90b60b5531aca2b2820b316b03d7606c3841600f6daa3d5fec0f29b9f7396f1b4cba01a424c0de676b86bb46aec478e54d069b1803be1d6fa4e1507e1744c9e553c45fc9f3fefd3d10df745186c535a5943da982f3f6b0ede62f69644b1ecf012c5c05ac94eee90a5e13f0b768f7632a2ce33ff1babfa8a70e48985e8b6d8196115c7bffa21c902adde3dc512ec52cf62df72a514cc6e9341137f36258b0141025a2c74a904a3505b4b167", 0xdf, 0x5b}], 0x400, &(0x7f0000000740)={[{@size={'size', 0x3d, [0x33, 0x32, 0x35, 0x5e, 0x34, 0x65, 0x36, 0x35, 0x33]}}, {@gid={'gid', 0x3d, 0xee00}}, {@nr_inodes={'nr_inodes', 0x3d, [0x36, 0x36, 0x34, 0x70]}}], [{@dont_hash}]})
[ 1065.909159]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1065.909609] RIP: 0033:0x7f96c2c53b19
[ 1065.909926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1065.911501] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000780)={{r0}, "0c31d3ad7940b3c6a9455f48ac68b338c3919b7e3c96d8266d9083797c3b76e9ebf2c5011ed9e975f82835a3dabd499bcf3a95125f76e8cba845e3c4adc0529630db478579e06e77b8f0c9179f3ef67f8e55f7116ae725640323de4b95c0cdf5493f2e3d39f0c8ef95daf45e2bca532c36875c25102db8572e5c6cbef6a6d1f2ab0a3aa6aecd440f57cd7de71743b64ace10dc07560323512e32a089222b194cbbc6cd46f2aa5a54025bcf68a44a5a53f3677f73c51079ab76f13923a568db5e02973a1ff2407a9e47e705c718d240e23c346a1bc3a163e32d90578f71bab70492c695b3ac1c6f1b0ff3256b44b0161b69685d318deeb81c214dfa3f050ea0daa22654f20c46d8063bd9337b61c5940baf462d571a80eae57e89c2574ee747b64a638464fb14a25f738f717fb2ed0b32a3b99930c4d2e160f719c66fbf7cfb3fa320728a216d2d0a3e06d3b535447a39e3506ad83b8435a0235ba34c22d0a9f957efc13052cbf7930e4183ca5bbf79c52eb85a7bf83a95ecb0744160e4e71102f1ae6da92cab46bc164bcc119f4625e83775f08d6a0e96370e550b8ec78b943c0f03b67044ff861647df1f86b98c8f656b8ac7f9a3f857ef42eb662d7b9501c24b5791ab560501336a1f99486b3ec766cc842e4b7b6d401dbbd712e2abf5246ea8692b9713edf2afaa16c569c6641c10b4a6d7ba567467ff6545f8da1dace71fd7b75170101daba2d34310a17788a82612163af80ea4f283b51a556b7e7cf04df667c14f94a7dd92dcbc0ed4cc93d53103ea64dfd82475855397bcbfe2fa2ccdfb47257ee956d15c450d505294e2cbc424701d1239dc88ab220e52f9aed64c876ab6fee318ee4bdfe683a34fb4d6086d8af26efec72bf2642491bbff06d1a865b7f4b97854e2b08e14e6171b1d2e83e03c86c1cd201477ee02fa0f79d2f1dd55c37efa696ed8854e28d76caaccbd0b2392071421576a638a39262bb5478681d8a499c801ea6ce8edc9374991f8cfc2384aa87ca2d90f5c2f90d7dd8fee3d317271062bdd18bf7d97eb39bf2926613ff27f8470819b363f21e14aa0e894e0b1d7d682edca65b1c8695b35ae9d247700da86562a16808ac822930d67b60a53e7abbd4c352c3889433a6bbae16e3dbe5f2d81608384f1f78b0a22334c808e849767f8999e10fc484085797803006ff91695365978b26ca272f2aa3f4d566135bc6dea79622a5912e2c3855589b4be42e2fbcd980e186403d4c969a8daf237fc8c53d10e576a12698b65f496116dec11044b1f50247e4b3542a8a7db55d698196d2701af11e23b4e1eb5f5d5af45bd4c2bc1a62e5736eea378a9a9cc248f7b76b66313533767ec4efe72cbbcf08674c14bb090fe15c03c805998610b972e7909d1b4e6b851a84e1fcc727b5ce87dd6132568e7619396ebaef78becf6c786b5ba9e4ff536f4b581214c870101d1597424451c629e7b91c2bda00b54c1622932263a4b321802811c81bd33422d55d3f4d1bab330ec97b19978a6fe117d9d8c64622d0796acf89772e4a73520e89d12e4ab944c0dd053f5846347a6cb725220ad5718ed4d87ca89d017444636bae0c5df0a5bce84247171cf4c9598dddac00830af90d8638fe8a2c04195b086787da7850c2d903d35ed308f88efdefdb055f36819de009245ce0ed41c9287b6f82de9b963dd91971ec24abfc3f941c348ce5e1b09d39578a411702439835f2c4d1bd96683e341568152ff93deb3230487bcf7581d2703a44a776aa2ec0e6e7e7827b55cfcea0e3ba78572bcc50ece6c8ad5ba6fb369e9e7e2ca026f71fd1f6359a19343c1de31560a574c1fe4ac86ad2cb719e0f5fceab62aa066fdaaaa6a429e535bf8f45e85f3aebbdc9079b14e0a1fbc441025432bb95bc9b070170f9138d1a7c3eea454ad8c062e94cdb1058880c1d031f395836bcefa9ab9a64ccca3db790f7798ad329f44779e4a13993ad8539d70ea18c7b5191bba50a9fa12860152bf48fec690dc1139e613d9994b4bb8e4d2f80c2b1c732629dc45e978cf0e695700b1c5ec7eae14590af83ab0470f3cc6034f8f1e76d1c70af9491b5ca2877e974dfc8da1fd05a12e86bd7673f803ec07073f52d5f2d7b54fadeb64681e44a7b915f4a9085d684653c9c8c2a0e595b649d34fbfcfc923ebbd4c8ac0c0db7b04a31cd093079a740f173e18b8a5e81aa7eb88e91c09fa24f1848e72439b1e5777439eb22cda2ca58de9cbebdce656430c75dacccd64caa9453e45570afb5cec2caaf39d9257368e2b8d4df1b45e67a3fc88ff575d7e8cf349e381bbafb51a38068a511a445639b2e50a4a8c5d76465821653ea3419ed3f964b847f9baccd1cc7c05a87065bcd37ae605b36bea21a011987fef4bad61f49773be327e85bd41816ca081e5dcb8c06981f67cd1c94dc075d9dbaa215e1c056cfb9b2393c852f58d45f7a7c82e997a4555ec7b6b1967f23a655957552c3c31d6683017287eb708a9896485aec45f038315ea3ddd7aed58fc41580f085dc2e65dfb8c21d79cdf326c4bae77bd0922ac5bba0a7f964a84b91d3e4c727aec9ddb30edb429ae3cf2294747f407614fa0ed3b7a73d68d05214e415bffff950b49022f49d760368ec9f4c5c1859c9029c94fd8e4edc3b713d00a2b59b780ae0c46c120750d574f60265b87065629939a1e5cbe4a543acddb9461a0e532416bfb395223680faab0890721b09bc0b9999b36fd59ed1374238a337e1fd79cc2ed818b00fe3441ce63dc013132496926b33951b5a1247aecc64b37c3c9012d70b3d8723b2b377c913677161a635153ea21ba0c4fa5b073396ea6618ccde0e36892e1f54f9360103c25652ceef38c24a2561cbc19420f4f44f0c2ca02c08d5b5d92d9e1d22aacf13027554afbc1534109d4f5db70fbb705845c88e4ee6f334ffe06dc7ff37465b4549af3ec0c38b48c48ff1ce9a27c5f73719f2135f5164e4e345a364277a38a285e3bf62366f6fa70f3a99d68b14982139f23d6735eaa0e95d55c5ff2ed3a9530788477ef4b0ece758714b6a6bbd037b42510f5484102738e3f459c94424e43d8c67e68f9ebd9e383e56d4627dfe00d34fb8696e04b2e26758c86fe66df4297326a7e1fe71faacaca395545b7192b8c823383c144a42dba49c08431c644fe85a5359b7c666fca545347b509112420368108eeacbe6f3bc990f62cc08d05b35df76cf43b772d08d28954cd4eb4703598137c2746063d86727c6f4fb711548d0142cdcaae034b6e610f40394a9a4b532029c3fa7415c0d59dfe6368f1fb476c96da994cae7d713467da172d9f56c54960e11f6d02e52672910ce1753c4dc00bad769cf0572ade7e7bd4fdf8b93ac58c8dc805d9294f1fa74e0a79516b83c6acd5a4ea3c0309dfa9598653de7f0b4da74414c6c209310c8a5b41f073b191d7a885616262021f8f88f77af08fe68ad0bdc11a66cb9fb73b46d8e318f1b6485629b76d6a89508aa50cb3c306b64f4e3ec4305bea7e4e291278614b79459b06d78f39e3d294a91dcbab83e3dc5ba28d848f52bf73112fde0755fd95be43ef5c358d30e03291f6ce6f0afc822a9263bde6f2c6d21bf628b99705a59576d5594eb3a57767765829773887ef992fa9a06db37907ed08190172cd4c9bd2c219ac85c682cfb25f3a108e791128871f1d7440a0f8dfd04940ad3b4b5117cf6cf922eeea265a9d068599f0d9b3963362fe315690d05af2675fba59eb6cdad866d7da8b64717ebdef5b23251073e958df6e2cdc7f7db259007320f27813f8578c2f5e7380b35c98afbaae166ac016a3410c5d540e361cf6018498f835ded72bd426d15d2d5ae51f555cee05ad35b7cc8cb65a6891d93c579141fcae35b4a2881f65a93c88d3f4a8e0626d9938e0eee95f2fec57d70f435ef4c7ddeb203e3ac32979f0e5dbc767193ddb0b1ab7ebd9e303046ace3c42c22b67c87241fc9680890828f843ff7e2530503ade486361d0deeabb8d737a4027aaea389ccda5f3d1b01e606fe56c381e3d88847f713d219fe387cb2bd1a6fc04d8a00cf980ca42a11fb4dfaa7af4fef04cc584b7db441edb6b9dbbae93248339d6c44d8cd7764c3006821a0f86e3911228bc156305c84c7b1a12b17126df849b41b76471e3faae714cc0d069744915584ba6aff19226e0ed10852c8623bce1957c06b1a0d588fbccf8197e5a1d5fbbacb8e658ae7776b1b3d5248e6097eabb23ebf97fab0eadfc40301df83a2015667e2794954adc578f3af5669e71f6e4cde8bb6ae9947a239322de5c11c0c3005c71a6c1f7e76d7317b92a520f04c0a29de1cee4dd93466190cef1d4ba4cc1f7f4b02db5b753174eaf59863f587736072fd910ae9f63f0c1c5ac492486c26502b323f93f9456687929d6ad0cc0eef374bef8914eb86286c63ab75e277627605fd7dd366996da698ac6c5ccb1179c916cbbd00b43ed3d4ee1e9b35241f60a62389beab02feec5c55f66e65fb02388c2ffeb7e1a41be883052641e3d33be3637a8af37fa7cc8f2eaf52335916935110a6c28e6a18b54eb3ce33daf5a0aa81b7049167f9b029fa179881f2f2ff64ad4eaeebaae1318a1b29ae3508a1aacff19c409687812461ca4bc8296541f9f4ad5b99ec8c07f9ab587c3ef50e7c725c511f1aa4166977518fffe3b3a3763ebba66cff91c53732a59ef1d4c4b438e51246c311b88bd372ad2e3417c195d5ba82f22dd9b344b426eb16689cbf03879ebe895ff0afbd7b9721c399cd1afae0c7910dd9974451218c11d7f76a7b4ecff26fca5cabbdcd8356d5ad31a719f1eba62914564a3210344ffdbd8d6ff0b4fcdf4aa5a9c1092eb20452135a1b0b1c79d0dce6984a26046d5e9ccbb6ab8301604c01f09f4fb1e28079fc12fc552f148a6095f90dd34ad87d7067548bc2d9742ea7114af06085c75ab2543302f5abfa94c15b83b3ff383ed44e88e7717c6b826b24a06d1b87c00e26a297ba67be75f6b9ccb1e25f949a4a93077b7009f6af3e315ef09bf1ecef613662f8b47ada3dc606cf4abe8ced33fbe6c4815ed88f9083250e146d8c58ba6d53acbd9d066ceff20671cb2bc56ed3f73b6b6d6e1903dbc497b54e24f3844195be0d7b98dbd1806e69e185cdf79cdf3b642a306975d30f38e0b1d3ad4def5e6ebd30fa88af38e60df3f0f2abd48679caabc1300a035ab4091f274af533d58544fb8fc52f3268658918e266ce161cce9a29ac0a911f6675dfbeb23cf336b38c659856a3f3435938fdd23c5af137db3f3af77c00147f50009506f1d31bfefb411e4f16ee1ded383f263f4010ea61cc1d867b898639211180d11ea431f1b74dade341c32ad54d67ead18d6d5d2c8d1a3fb1a2428b1abf8df059c9f5b0255cea9819f25f869a1f5c2a0854c4a01132c47b5979fbb1ac72beb52376b140f1c32e552dbc00ce98f76a72938289bb630c68039b9eddb7e73b4b6581acd673677c5be6552b9d25b93632791dbe9c6299bed000498f5955e7c7d0e00ce0b642a4e89bb338a2c5aa305d29768567ac68309cefa4859162dfec6d73fd2ef30647b5cd9d024d3d58ff6411d4e089c3922978dee71a496be6962dbbf17bed27d77bb6bec5da4a215b7f945e2a6166974fc0168a8b14ade1ba2eab6dbe9808e041f6b79ce5a8b291dd1931cb9951ec4b30162956311b755e3cc47b7ddded2c0589e5babb6aeadf9addace0442c2e0ab1fb8ada4bed420b41de9ee180c0694b1d9f6dec7c3efcc02bae55877feea27aca6feebdf897b3059a59a4126cf8c058a"})

03:31:52 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 3)

03:31:52 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
socket$netlink(0x10, 0x3, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r2, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6)
getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1065.912160] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1065.912168] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1065.912175] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1065.912181] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001
[ 1065.912188] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:31:52 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100", @ANYRES32=r0])

[ 1065.930946] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1065.936538] tmpfs: Bad value for 'size'
03:31:52 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:31:52 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 4)

03:31:52 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4070, 0xfe6, 0x0)
r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0xb, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000881}, 0x48040)
getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c)
recvfrom$inet6(r0, &(0x7f00000001c0)=""/17, 0x11, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00', 0x1ff}, 0x1c)

[ 1066.024386] FAULT_INJECTION: forcing a failure.
[ 1066.024386] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1066.026781] CPU: 0 PID: 6874 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1066.028069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1066.028858] Call Trace:
[ 1066.029106]  dump_stack+0x107/0x167
[ 1066.029677]  should_fail.cold+0x5/0xa
[ 1066.030461]  _copy_from_user+0x2e/0x1b0
[ 1066.031392]  __copy_msghdr_from_user+0x91/0x4b0
[ 1066.031814]  ? __ia32_sys_shutdown+0x80/0x80
[ 1066.032218]  ? __lock_acquire+0x1657/0x5b00
[ 1066.032638]  ___sys_recvmsg+0xd5/0x200
[ 1066.032969]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1066.033404]  ? __fget_files+0x2cf/0x520
[ 1066.033766]  ? lock_acquire+0x197/0x470
[ 1066.034104]  ? find_held_lock+0x2c/0x110
[ 1066.034452]  ? __might_fault+0xd3/0x180
[ 1066.034818]  ? lock_downgrade+0x6d0/0x6d0
[ 1066.035216]  do_recvmmsg+0x24c/0x6d0
[ 1066.035554]  ? ___sys_recvmsg+0x200/0x200
[ 1066.035990]  ? lock_downgrade+0x6d0/0x6d0
[ 1066.036373]  ? ksys_write+0x12d/0x260
[ 1066.036757]  ? wait_for_completion_io+0x270/0x270
[ 1066.037248]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1066.037669]  ? vfs_write+0x354/0xb10
[ 1066.038035]  __x64_sys_recvmmsg+0x20f/0x260
[ 1066.038422]  ? ksys_write+0x1a9/0x260
[ 1066.038782]  ? __do_sys_socketcall+0x600/0x600
[ 1066.039219]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1066.039684]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1066.040146]  do_syscall_64+0x33/0x40
[ 1066.040488]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1066.040991] RIP: 0033:0x7f96c2c53b19
[ 1066.041304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1066.042947] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1066.044656] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1066.045608] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1066.046284] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1066.046908] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001
[ 1066.047604] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:31:53 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r0, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r0, 0xfffffffffffffffc, 0x0, 0x2, 0x4, 0x1}, 0x7fffffff)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:31:53 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xfa, 0x0, 0x8, 0x0, 0x0, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext={0x1, 0x10001}, 0x20, 0xfffffffffffff6ce, 0x0, 0x7, 0x6, 0x8, 0x9, 0x0, 0x7, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x9)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
flistxattr(r0, &(0x7f00000000c0)=""/190, 0xbe)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:31:53 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:31:53 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r0])

03:32:07 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x500)

03:32:07 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r2, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6)
getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:32:07 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 5)

03:32:07 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:32:07 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1c, 0x200, 0x70bd26, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:32:07 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

[ 1080.410417] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1080.412370] FAULT_INJECTION: forcing a failure.
[ 1080.412370] name fail_usercopy, interval 1, probability 0, space 0, times 0
03:32:07 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r0])

[ 1080.415791] CPU: 1 PID: 6907 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1080.417536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1080.417541] Call Trace:
[ 1080.417561]  dump_stack+0x107/0x167
[ 1080.417575]  should_fail.cold+0x5/0xa
[ 1080.417593]  _copy_from_user+0x2e/0x1b0
[ 1080.417611]  __copy_msghdr_from_user+0x91/0x4b0
[ 1080.417659]  ? __ia32_sys_shutdown+0x80/0x80
[ 1080.417675]  ? __lock_acquire+0x1657/0x5b00
[ 1080.417728]  ___sys_recvmsg+0xd5/0x200
03:32:07 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000002100)={{r0}, "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"})
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r4, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r5, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1, 0x0, r4, 0x0, r5}, 0xce)

[ 1080.417741]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1080.417755]  ? __fget_files+0x2cf/0x520
[ 1080.417771]  ? lock_acquire+0x197/0x470
[ 1080.417782]  ? find_held_lock+0x2c/0x110
[ 1080.417799]  ? __might_fault+0xd3/0x180
03:32:07 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 6)

03:32:07 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x7ff, 0x3, 0x3, 0xc28, 0x80000001})

[ 1080.417810]  ? lock_downgrade+0x6d0/0x6d0
[ 1080.417835]  do_recvmmsg+0x24c/0x6d0
[ 1080.417851]  ? ___sys_recvmsg+0x200/0x200
[ 1080.417862]  ? lock_downgrade+0x6d0/0x6d0
[ 1080.417880]  ? ksys_write+0x12d/0x260
[ 1080.417904]  ? wait_for_completion_io+0x270/0x270
[ 1080.417918]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1080.417927]  ? vfs_write+0x354/0xb10
[ 1080.417943]  __x64_sys_recvmmsg+0x20f/0x260
[ 1080.417954]  ? ksys_write+0x1a9/0x260
[ 1080.417966]  ? __do_sys_socketcall+0x600/0x600
[ 1080.417980]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1080.417992]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1080.418005]  do_syscall_64+0x33/0x40
[ 1080.418016]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1080.418024] RIP: 0033:0x7f96c2c53b19
[ 1080.418035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1080.418041] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1080.418054] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1080.418061] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1080.418067] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1080.418074] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001
[ 1080.418107] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
[ 1080.531732] FAULT_INJECTION: forcing a failure.
[ 1080.531732] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1080.531758] CPU: 1 PID: 6925 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1080.531764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1080.531768] Call Trace:
[ 1080.531786]  dump_stack+0x107/0x167
[ 1080.531799]  should_fail.cold+0x5/0xa
[ 1080.531819]  _copy_from_user+0x2e/0x1b0
[ 1080.572722]  __copy_msghdr_from_user+0x91/0x4b0
[ 1080.573118]  ? __ia32_sys_shutdown+0x80/0x80
[ 1080.573492]  ? __lock_acquire+0x1657/0x5b00
[ 1080.573881]  ___sys_recvmsg+0xd5/0x200
[ 1080.574214]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1080.574629]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1080.575112]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1080.575501]  ? trace_hardirqs_on+0x5b/0x180
[ 1080.575877]  ? lock_acquire+0x197/0x470
[ 1080.576216]  ? find_held_lock+0x2c/0x110
[ 1080.576579]  ? __might_fault+0xd3/0x180
[ 1080.576917]  ? lock_downgrade+0x6d0/0x6d0
[ 1080.577282]  do_recvmmsg+0x24c/0x6d0
[ 1080.577616]  ? ___sys_recvmsg+0x200/0x200
[ 1080.577966]  ? lock_downgrade+0x6d0/0x6d0
[ 1080.578323]  ? ksys_write+0x12d/0x260
[ 1080.578668]  ? wait_for_completion_io+0x270/0x270
[ 1080.579151]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1080.579627]  ? vfs_write+0x354/0xb10
[ 1080.580009]  __x64_sys_recvmmsg+0x20f/0x260
[ 1080.580449]  ? ksys_write+0x1a9/0x260
[ 1080.580837]  ? __do_sys_socketcall+0x600/0x600
[ 1080.581305]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1080.581842]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1080.582368]  do_syscall_64+0x33/0x40
[ 1080.582746]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1080.583297] RIP: 0033:0x7f96c2c53b19
[ 1080.583682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1080.585558] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1080.586337] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1080.588359] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1080.589140] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1080.589920] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001
[ 1080.590702] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:32:07 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:32:07 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r0])

03:32:07 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000005, 0x80010, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x5, &(0x7f0000000000), 0x1, 0x0, 0x1}, 0x5)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x4000010, r0, 0x0)

03:32:07 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:32:07 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='ramfs\x00', 0x0, 0x0)
stat(0x0, &(0x7f0000000200))
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
openat(r1, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffff7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0)
pwrite64(r2, &(0x7f0000000140)="b2", 0x20000141, 0x8001)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
fstat(r4, &(0x7f00000000c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
open$dir(&(0x7f0000000280)='./file0/file0\x00', 0x242040, 0xfd)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="e42787758f6ef4b1d0c985bf19a825c55e11821df7396589b0b18db1c17eddf8f39429941b7a150388ef6ecd0cc884e8777a2f330eee4516e0bac4d08ea25eff8cb9edbabfd5b4b770c4eef80ac9c04e2aaca5a132562418f48f349eae640285a2f9f8ecc93ec696014229565a89827d8d1b6700a7e9b30f122fa55a188f13b5f071f05f946cd59df84a48fc15113988fd984f6d64ec5ea1cc982960768095fb", @ANYRES16=r3, @ANYBLOB="050000000000000000005100000008000300", @ANYRES32=r6, @ANYBLOB="05008a0000000000"], 0x24}}, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r7, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:32:07 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:32:22 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x1800)

03:32:22 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:32:22 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32=r0])

03:32:22 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:32:22 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000000), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
syz_io_uring_setup(0x32f8, &(0x7f00000000c0)={0x0, 0x59c7, 0x10, 0x2, 0x280, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r1, 0x0, &(0x7f0000000240)="6c1017c3d223a150f4f0f339ed146de9048e0cf98e9596cd55d011a6d9b3aee4aa17879afa1cb3be05c131a59fdf87dfb87d9eafb6819f30d5a7499ba44798ea3843462c8e60e07fe1a9b4a19bbb37d45518099e11ecf946ef9859ea6e814008220107a6476a5e84edcd4e6780ba2be2f8dff7af29cd0b842886c858ad752962356dacaa8e433e05aaddb143f99569de31035af235fbf2bb2752ec18178f11af7f8284f71bcad90d5e08c3c8581aac29c3c540b04ba5824ea9fd941a98b331cf980d6d1c58464a3b9d16c31d0c", 0xcd, 0x40000000, 0x1}, 0x9)

03:32:22 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r2, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6)
getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:32:22 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 7)

03:32:22 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1095.346218] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1095.352336] FAULT_INJECTION: forcing a failure.
[ 1095.352336] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1095.353466] CPU: 0 PID: 6962 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1095.354051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1095.354762] Call Trace:
[ 1095.355002]  dump_stack+0x107/0x167
[ 1095.355321]  should_fail.cold+0x5/0xa
[ 1095.355663]  _copy_from_user+0x2e/0x1b0
[ 1095.356013]  __copy_msghdr_from_user+0x91/0x4b0
[ 1095.356411]  ? __ia32_sys_shutdown+0x80/0x80
[ 1095.356797]  ? __lock_acquire+0x1657/0x5b00
[ 1095.357176]  ___sys_recvmsg+0xd5/0x200
[ 1095.357514]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1095.357933]  ? __fget_files+0x2cf/0x520
[ 1095.358277]  ? lock_acquire+0x197/0x470
[ 1095.358624]  ? find_held_lock+0x2c/0x110
[ 1095.358992]  ? __might_fault+0xd3/0x180
[ 1095.359352]  ? lock_downgrade+0x6d0/0x6d0
[ 1095.359731]  do_recvmmsg+0x24c/0x6d0
[ 1095.360063]  ? ___sys_recvmsg+0x200/0x200
[ 1095.360423]  ? lock_downgrade+0x6d0/0x6d0
[ 1095.360442]  ? ksys_write+0x12d/0x260
[ 1095.360465]  ? wait_for_completion_io+0x270/0x270
[ 1095.360480]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1095.360490]  ? vfs_write+0x354/0xb10
[ 1095.360505]  __x64_sys_recvmmsg+0x20f/0x260
[ 1095.360517]  ? ksys_write+0x1a9/0x260
[ 1095.360529]  ? __do_sys_socketcall+0x600/0x600
[ 1095.360543]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1095.360555]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1095.360568]  do_syscall_64+0x33/0x40
[ 1095.360583]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1095.360591] RIP: 0033:0x7f96c2c53b19
03:32:22 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x8, 0x800)

[ 1095.360602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1095.360608] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1095.360621] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1095.360627] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
03:32:22 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0xffffffffffffffff, r1, 0x0)
syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfff, 0x6, &(0x7f0000002400)=[{&(0x7f00000000c0)="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", 0x1000, 0x8}, {&(0x7f00000010c0)="9948e57323fb184c5d4b4d5c87e466e9b435b96863159717f75c98465f3dff2535bcd123d04c75a184da574f0b50e861b63f2b2f131fc1bffa4b", 0x3a, 0xffffffff}, {&(0x7f0000002100)="ddf767c63afc6b4e3906d9fd9733dc7a900027a243946eeb43e6d7b2156175c1114541bbc530bc2a51706083f2ef206557f9ab43d850e187c0fc7f2aa072eef59ce79f142e9b0e44165e6945828fb47ba7901b43c17debdea6aa18a066a7806ae0dfd3cbcfc90567d6d7766543b246082bf6d6df5a73d440fc12dfeb38dc60e0ff9632fd96167ac52f157a69c027d245a1eef5cd06bcd7ee286145966954ee9ac997e8985195c36a53e282259dc1222f5245b8254e05a05d40f2fddfba759d8c4ed49856a0c5d96e33fb27aca16880101488332e3ccbc08b5f3f390b85d0672ba7e2a226db06e7ea9faf34c0df2e361dd97722f614cc84", 0xf7}, {&(0x7f0000002200)="92e1acf4097ae6d8f3db4c750a7348255982e851b99ffbbf09d05bca0992ec7a5b9d149b8c9879d52cb33b1c91e9421eca58f81fe61cad3806c7f8766a25ee5f02e0ad9e1b5610cce326eba6cdfac4e30af102af63f47a6cbee828c4bb30813d0a4a16fb695be1ba735cf7facd056fcf2ec73dd6d97bd043c3d25522db44a03a38263680ab099d2417ef0fcacdf6607008583c51ec7d88120d01e0baab6ff90452519f025bfdb7864b48d95799833ee771e9789c1af688526b55ba1e3296cd022176354af8c2703598e8c9b29f9472ec96a78fed968322d909b34e0afaf90cba5a835580ce4986565a2f146a51aa7475f078948bd2c21d632f", 0xf9, 0x7f}, {&(0x7f0000002300)="5d6d62413f44ff0226cbdc9d2d004e4918f00cbd3ebba16e6e870e5258bc49549a35ae05ed5746ed36447e3e4b55dd71352c92e931c0346ab261514eba66ee16ce9aa4c174fc4457b05a2ca9501e7321a16d99679e80a42be3783306f2a2db72b83dabce42b47297e5bff898ab113e31ed", 0x71, 0x2}, {&(0x7f0000002380)="0f0c5c43c681147083020695a522b423554711fcaaf733e36a0fd08c905e209619af3cbbecfc58a76d6becfbc19e70764662495feba1946d94617f46dc5e3063e93ffe1aee1fc644b548", 0x4a, 0x400}], 0x1000000, &(0x7f00000024c0)=ANY=[@ANYBLOB="23292e263a03272c2c736d617073002c736d617073002c7065726d69745f646972656374696f2c7375626a5f757365723d736d617073002c666f776e65723d", @ANYRESDEC, @ANYBLOB=',seclabel,context=system_u,audit,uid>', @ANYRESDEC=r1, @ANYBLOB=',c'])

[ 1095.360634] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1095.360640] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001
03:32:22 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 8)

[ 1095.360647] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:32:22 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32=r0])

03:32:22 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, 0x0, 0x20002, 0x0)

[ 1095.450952] mmap: syz-executor.5 (6977) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
03:32:22 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0x4}}, './file0\x00'})
syz_io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0xded, 0x8, 0x1, 0xdb, 0x0, r2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140))

[ 1095.485142] FAULT_INJECTION: forcing a failure.
[ 1095.485142] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1095.486212] CPU: 0 PID: 6979 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1095.486787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1095.487490] Call Trace:
[ 1095.487721]  dump_stack+0x107/0x167
[ 1095.488033]  should_fail.cold+0x5/0xa
[ 1095.488363]  _copy_from_user+0x2e/0x1b0
[ 1095.488709]  __copy_msghdr_from_user+0x91/0x4b0
[ 1095.489110]  ? __ia32_sys_shutdown+0x80/0x80
[ 1095.489495]  ? __lock_acquire+0x1657/0x5b00
[ 1095.489879]  ___sys_recvmsg+0xd5/0x200
[ 1095.490213]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1095.490631]  ? __fget_files+0x2cf/0x520
[ 1095.490977]  ? lock_acquire+0x197/0x470
[ 1095.491723]  ? find_held_lock+0x2c/0x110
[ 1095.492412]  ? __might_fault+0xd3/0x180
[ 1095.493080]  ? lock_downgrade+0x6d0/0x6d0
[ 1095.493791]  do_recvmmsg+0x24c/0x6d0
[ 1095.494418]  ? ___sys_recvmsg+0x200/0x200
[ 1095.495081]  ? lock_downgrade+0x6d0/0x6d0
[ 1095.495441]  ? ksys_write+0x12d/0x260
[ 1095.495775]  ? wait_for_completion_io+0x270/0x270
[ 1095.496194]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1095.496589]  ? vfs_write+0x354/0xb10
[ 1095.496917]  __x64_sys_recvmmsg+0x20f/0x260
[ 1095.497291]  ? ksys_write+0x1a9/0x260
[ 1095.497622]  ? __do_sys_socketcall+0x600/0x600
[ 1095.498013]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1095.498456]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1095.498891]  do_syscall_64+0x33/0x40
[ 1095.499611]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1095.500481] RIP: 0033:0x7f96c2c53b19
[ 1095.501104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1095.504621] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1095.505917] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1095.507183] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1095.508389] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1095.509586] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001
[ 1095.515554] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:32:22 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x4b, 0x4, 0x16, 0x100000001, 0x3, 0x6, 0x352, 0x2e2, 0x40, 0x28b, 0xfffff718, 0x7, 0x38, 0x2, 0x2, 0x4, 0x6e96}, [{0x2, 0x2, 0x0, 0x5, 0x509, 0x7fffffff, 0x200, 0x7}], "8ba80b0f4914679c2a65efca5243d006d885f8d2f378d2c496bee1bcdbed3d9c9e536ce2de0449f722111745cd1426824f1173a41f048fd071938f797784cbbc7d2ad55d94c48f20ce404ecca876bd54ea770fcb46475aefcf7e06788604d6ea7463a1ca1be5fc234fca0a3800b73c8da3459cbc2e368b16711c7823cc1b8d36b3b7574700f84f5eca1849e1052827f1d17d0fab2bf1e8e310835e7a5759a4635374", ['\x00']}, 0x21a)

03:32:22 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000))

03:32:36 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, 0x0, 0x20002, 0x0)

03:32:36 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x80000)

03:32:36 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r2, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6)
getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:32:36 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32=r0])

03:32:36 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
readv(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/202, 0xca}, {&(0x7f00000001c0)=""/154, 0x9a}, {&(0x7f0000000280)=""/247, 0xf7}, {&(0x7f0000000000)=""/93, 0x5d}], 0x4)

03:32:36 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
syz_io_uring_setup(0x1a50, &(0x7f0000000000)={0x0, 0x98cf, 0x8, 0x3, 0x233, 0x0, r0}, &(0x7f0000ff1000/0xe000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:32:36 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 9)

03:32:36 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1109.862209] FAULT_INJECTION: forcing a failure.
[ 1109.862209] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1109.863507] CPU: 0 PID: 7018 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1109.864129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1109.864841] Call Trace:
[ 1109.865132]  dump_stack+0x107/0x167
[ 1109.865472]  should_fail.cold+0x5/0xa
[ 1109.865809]  _copy_from_user+0x2e/0x1b0
[ 1109.866748] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1109.868399]  __copy_msghdr_from_user+0x91/0x4b0
[ 1109.868414]  ? __ia32_sys_shutdown+0x80/0x80
[ 1109.868428]  ? __lock_acquire+0x1657/0x5b00
[ 1109.868453]  ___sys_recvmsg+0xd5/0x200
[ 1109.868466]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1109.868477]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1109.868488]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1109.868498]  ? trace_hardirqs_on+0x5b/0x180
[ 1109.868514]  ? lock_acquire+0x197/0x470
[ 1109.868525]  ? find_held_lock+0x2c/0x110
[ 1109.868541]  ? __might_fault+0xd3/0x180
[ 1109.868553]  ? lock_downgrade+0x6d0/0x6d0
[ 1109.868578]  do_recvmmsg+0x24c/0x6d0
[ 1109.868594]  ? ___sys_recvmsg+0x200/0x200
[ 1109.868605]  ? lock_downgrade+0x6d0/0x6d0
[ 1109.868623]  ? ksys_write+0x12d/0x260
[ 1109.868646]  ? wait_for_completion_io+0x270/0x270
[ 1109.875826]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1109.876275]  ? vfs_write+0x354/0xb10
[ 1109.876611]  __x64_sys_recvmmsg+0x20f/0x260
[ 1109.876979]  ? ksys_write+0x1a9/0x260
[ 1109.877353]  ? __do_sys_socketcall+0x600/0x600
[ 1109.877743]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1109.878261]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1109.878705]  do_syscall_64+0x33/0x40
[ 1109.879021]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1109.879536] RIP: 0033:0x7f96c2c53b19
[ 1109.879861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1109.881519] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1109.881533] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1109.881540] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1109.881546] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1109.881553] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001
[ 1109.881560] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:32:36 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, 0x0, 0x20002, 0x0)

03:32:36 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, <r1=>0x0})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)={0x0, <r3=>0x0})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r4, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000140)={0x0, <r5=>0x0})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_open_procfs(r5, &(0x7f0000000040)='smaps\x00')
pread64(r6, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:32:36 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 10)

03:32:36 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0])

03:32:36 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)

[ 1110.102734] FAULT_INJECTION: forcing a failure.
[ 1110.102734] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1110.103855] CPU: 1 PID: 7033 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1110.104427] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1110.105126] Call Trace:
[ 1110.105364]  dump_stack+0x107/0x167
[ 1110.105679]  should_fail.cold+0x5/0xa
[ 1110.106014]  _copy_from_user+0x2e/0x1b0
[ 1110.106360]  __copy_msghdr_from_user+0x91/0x4b0
[ 1110.106758]  ? __ia32_sys_shutdown+0x80/0x80
[ 1110.107144]  ? __lock_acquire+0x1657/0x5b00
[ 1110.107533]  ___sys_recvmsg+0xd5/0x200
[ 1110.107869]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1110.108291]  ? __fget_files+0x2cf/0x520
[ 1110.108637]  ? lock_acquire+0x197/0x470
[ 1110.108978]  ? find_held_lock+0x2c/0x110
[ 1110.109333]  ? __might_fault+0xd3/0x180
[ 1110.109675]  ? lock_downgrade+0x6d0/0x6d0
[ 1110.110043]  do_recvmmsg+0x24c/0x6d0
[ 1110.110367]  ? ___sys_recvmsg+0x200/0x200
[ 1110.110721]  ? lock_downgrade+0x6d0/0x6d0
[ 1110.111083]  ? ksys_write+0x12d/0x260
[ 1110.111433]  ? wait_for_completion_io+0x270/0x270
[ 1110.111847]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1110.112242]  ? vfs_write+0x354/0xb10
[ 1110.112564]  __x64_sys_recvmmsg+0x20f/0x260
[ 1110.112938]  ? ksys_write+0x1a9/0x260
[ 1110.113264]  ? __do_sys_socketcall+0x600/0x600
[ 1110.113657]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1110.114102]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1110.114543]  do_syscall_64+0x33/0x40
[ 1110.114860]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1110.115306] RIP: 0033:0x7f96c2c53b19
[ 1110.115627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1110.117172] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1110.117817] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1110.118419] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1110.119026] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1110.119640] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1110.120240] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:32:37 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:32:37 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 11)

03:32:37 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 1)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

[ 1110.199295] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1110.214302] FAULT_INJECTION: forcing a failure.
[ 1110.214302] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1110.215452] CPU: 1 PID: 7041 Comm: syz-executor.4 Not tainted 5.10.226 #1
03:32:37 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1110.216039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1110.216043] Call Trace:
[ 1110.216062]  dump_stack+0x107/0x167
[ 1110.216076]  should_fail.cold+0x5/0xa
[ 1110.216094]  _copy_from_user+0x2e/0x1b0
[ 1110.216112]  __copy_msghdr_from_user+0x91/0x4b0
[ 1110.216125]  ? __ia32_sys_shutdown+0x80/0x80
[ 1110.216138]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1110.216149]  ? SOFTIRQ_verbose+0x10/0x10
[ 1110.216160]  ? mark_lock+0xf5/0x2df0
[ 1110.216174]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1110.216185]  ? SOFTIRQ_verbose+0x10/0x10
[ 1110.216201]  ___sys_recvmsg+0xd5/0x200
[ 1110.216215]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1110.216228]  ? __fget_files+0x2cf/0x520
[ 1110.216239]  ? lock_downgrade+0x6d0/0x6d0
[ 1110.216255]  ? lock_downgrade+0x6d0/0x6d0
[ 1110.216271]  ? __fget_files+0x2f8/0x520
[ 1110.216288]  ? __fget_light+0xea/0x290
[ 1110.216305]  do_recvmmsg+0x24c/0x6d0
[ 1110.216321]  ? ___sys_recvmsg+0x200/0x200
[ 1110.216333]  ? lock_downgrade+0x6d0/0x6d0
[ 1110.216350]  ? ksys_write+0x12d/0x260
[ 1110.216369]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1110.216384]  ? wait_for_completion_io+0x270/0x270
[ 1110.216398]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1110.216408]  ? vfs_write+0x354/0xb10
[ 1110.216424]  __x64_sys_recvmmsg+0x20f/0x260
[ 1110.216436]  ? ksys_write+0x1a9/0x260
[ 1110.216448]  ? __do_sys_socketcall+0x600/0x600
[ 1110.216462]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1110.216474]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1110.216487]  do_syscall_64+0x33/0x40
[ 1110.216498]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1110.216506] RIP: 0033:0x7f06d872db19
[ 1110.216517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1110.216523] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1110.216537] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1110.216543] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1110.216550] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1110.216557] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001
[ 1110.216563] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1110.239021] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1110.260809] FAULT_INJECTION: forcing a failure.
[ 1110.260809] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1110.260825] CPU: 0 PID: 7045 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1110.260832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1110.260836] Call Trace:
[ 1110.260854]  dump_stack+0x107/0x167
[ 1110.260868]  should_fail.cold+0x5/0xa
[ 1110.260886]  _copy_from_user+0x2e/0x1b0
[ 1110.260904]  __copy_msghdr_from_user+0x91/0x4b0
[ 1110.260918]  ? __ia32_sys_shutdown+0x80/0x80
[ 1110.260931]  ? __lock_acquire+0x1657/0x5b00
[ 1110.260955]  ___sys_recvmsg+0xd5/0x200
[ 1110.260968]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1110.260982]  ? __fget_files+0x2cf/0x520
[ 1110.260998]  ? lock_acquire+0x197/0x470
[ 1110.261009]  ? find_held_lock+0x2c/0x110
[ 1110.261026]  ? __might_fault+0xd3/0x180
[ 1110.261037]  ? lock_downgrade+0x6d0/0x6d0
[ 1110.261063]  do_recvmmsg+0x24c/0x6d0
[ 1110.261079]  ? ___sys_recvmsg+0x200/0x200
[ 1110.261090]  ? lock_downgrade+0x6d0/0x6d0
[ 1110.261108]  ? ksys_write+0x12d/0x260
[ 1110.261132]  ? wait_for_completion_io+0x270/0x270
[ 1110.261146]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1110.261160]  ? vfs_write+0x354/0xb10
[ 1110.261176]  __x64_sys_recvmmsg+0x20f/0x260
[ 1110.261187]  ? ksys_write+0x1a9/0x260
[ 1110.261199]  ? __do_sys_socketcall+0x600/0x600
[ 1110.261213]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1110.261226]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1110.261239]  do_syscall_64+0x33/0x40
[ 1110.261250]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1110.261258] RIP: 0033:0x7f96c2c53b19
[ 1110.261270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1110.261276] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1110.261290] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1110.261296] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1110.261303] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1110.261310] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1110.261316] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:32:37 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x1000000)

03:32:37 executing program 5:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r0=>0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r0)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xfa71}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1110.791392] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1110.803746] FAULT_INJECTION: forcing a failure.
[ 1110.803746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1110.804095] FAULT_INJECTION: forcing a failure.
[ 1110.804095] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1110.805062] CPU: 0 PID: 7059 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1110.806616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1110.807334] Call Trace:
[ 1110.807575]  dump_stack+0x107/0x167
[ 1110.807892]  should_fail.cold+0x5/0xa
[ 1110.808224]  _copy_from_user+0x2e/0x1b0
[ 1110.808575]  __copy_msghdr_from_user+0x91/0x4b0
[ 1110.808976]  ? __ia32_sys_shutdown+0x80/0x80
[ 1110.809351]  ? __lock_acquire+0x1657/0x5b00
[ 1110.809741]  ___sys_recvmsg+0xd5/0x200
[ 1110.810076]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1110.810499]  ? __fget_files+0x2cf/0x520
[ 1110.810847]  ? lock_acquire+0x197/0x470
[ 1110.811194]  ? find_held_lock+0x2c/0x110
[ 1110.811557]  ? __might_fault+0xd3/0x180
[ 1110.811899]  ? lock_downgrade+0x6d0/0x6d0
[ 1110.812267]  do_recvmmsg+0x24c/0x6d0
[ 1110.812597]  ? ___sys_recvmsg+0x200/0x200
[ 1110.812953]  ? lock_downgrade+0x6d0/0x6d0
[ 1110.813313]  ? ksys_write+0x12d/0x260
[ 1110.813660]  ? wait_for_completion_io+0x270/0x270
[ 1110.814073]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1110.814471]  ? vfs_write+0x354/0xb10
[ 1110.814800]  __x64_sys_recvmmsg+0x20f/0x260
[ 1110.815175]  ? ksys_write+0x1a9/0x260
[ 1110.815515]  ? __do_sys_socketcall+0x600/0x600
[ 1110.815913]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1110.816360]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1110.816811]  do_syscall_64+0x33/0x40
[ 1110.817130]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1110.817573] RIP: 0033:0x7f96c2c53b19
[ 1110.817894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1110.819470] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1110.820130] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1110.820744] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1110.821351] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1110.821966] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1110.822579] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
[ 1110.823220] CPU: 1 PID: 7064 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1110.823829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1110.824531] Call Trace:
[ 1110.824766]  dump_stack+0x107/0x167
[ 1110.825079]  should_fail.cold+0x5/0xa
[ 1110.825412]  _copy_from_user+0x2e/0x1b0
[ 1110.825757]  __copy_msghdr_from_user+0x91/0x4b0
[ 1110.826152]  ? __ia32_sys_shutdown+0x80/0x80
[ 1110.826533]  ? __lock_acquire+0x1657/0x5b00
[ 1110.826911]  ___sys_recvmsg+0xd5/0x200
[ 1110.827271]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1110.827688]  ? __fget_files+0x2cf/0x520
[ 1110.828028]  ? lock_acquire+0x197/0x470
[ 1110.828362]  ? find_held_lock+0x2c/0x110
[ 1110.828713]  ? __might_fault+0xd3/0x180
[ 1110.829049]  ? lock_downgrade+0x6d0/0x6d0
[ 1110.829412]  do_recvmmsg+0x24c/0x6d0
[ 1110.829732]  ? ___sys_recvmsg+0x200/0x200
[ 1110.830082]  ? lock_downgrade+0x6d0/0x6d0
[ 1110.830439]  ? ksys_write+0x12d/0x260
[ 1110.830772]  ? wait_for_completion_io+0x270/0x270
03:32:37 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 2)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:32:37 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x40)
readv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f0000002100)=""/54, 0x36}, {&(0x7f0000002140)=""/247, 0xf7}, {&(0x7f0000002240)=""/137, 0x89}], 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8401, 0x101)
r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000000), 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$inet(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000000c0)=<r6=>0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r7, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
fsetxattr$trusted_overlay_nlink(r7, &(0x7f0000002340), &(0x7f0000002380)={'U-', 0x7fffffff}, 0x16, 0x3)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000280)={{r5}, r6, 0x0, @inherit={0x58, &(0x7f0000000200)={0x1, 0x2, 0x752, 0x23dc0000000, {0x6, 0x0, 0xbdef, 0x7f, 0x8}, [0x0, 0x399]}}, @name="d7eeadf8fc81379049be508c30b5c7592f235f3799664c6a017693650fef3c467cf2fc7ac8903bd24ddf76e68c4cb9d9f052d8d7cfaed10bf74f93901b2ede6f7f248aa26727f52152e99bf02982f0fe1cef7152c39e782aeedae7b144f3e3a73b94a783071bdec5eb2126aef5e3188179f92c43544b9f158b5e26d1cd495eb19d230498cd36b20e3b5b35000124c356245bd3c039cebed3b032b31859663701e8a8285e1a073eb2fa8dccdd83b8383ad06cdf87c7df4b499f2bb3b282795425c3fb3b2a6b60ad5cb84940941fe609edef748f79925bf8f685b864d61d6fa295918433160933742fbe1ce36614e50f597a89c2bab4a42a1d0d0591393d370b2e1e8ae48b7eff083114e4971a16e7f08247cb50d248fc7051cd9d58b032d3dd3bfd299378172d844c145aa9a1667657eefd4a725856e6bd9f3aeb0a9c34e17aaeb450ea67e23e42e037fe15493410c2d429291c371573bfd5110c82a85a80a1173aaa3c39c7127583bc6099b5cdf4d0ec5ddedfb94a8e53e67aa29def08c7eb7227917418b729c06b445555da4ead17272906c79d8bcbc6633a57d8122cfc1042ec5ccbce383f172130fda41623927025318c0bfa1c4f2eae87b0b4d6f0ecf445f6b5d930b5bd145531acdbd7550a01bba0f2768bb957c304b98dca56a2f9ca9942bfdfb967d7b77f05058f31fbf39ed320fbc6a82177b13c05acea9b782e4ad2935d665b1211820f456f36ff6ab58138bbfae87fafcd53993fc365e3aacd27807e0158950f638b9241c1d84a9601fb3c2d2abd5ee052e0cf2a7c95eba79e37ccf6d3b45f79d28e20094bf2a9b1658f0fd1d64c01e056d11f76a8d4d5abc1cc99c3d72218b84c0308946299b25e21d9d13b9ae2d69f147d76f94fc6a8a50a3a4ddf5a59a74a8660a1c5f089293cc1a0dbc5ff6944c68835b8bbd8e671092c1d974cb3a92fc480ec184cd64701951dfa2c325eae8f6cb06a05fb17aee80a073aacbad8101315fb141ad0ad5faab9096e6d3f23f92e7c55d29fb4577da821b3bc9fdfa48a44c16b65ff5fee8dcb7a6550eef5157f188825aa68b2b91ee89833f5877b4859e1af602aacc9d1896e53b1681b3e72e42d3b5d5a213af821b979beda4433f72453e05d290be2805784c9b3bb16f50d7aebf0075a104ba597f6ba38978dc06040c69255829fec0ee3aad0b6f7b256b88d6804a3ef9c269b842fe0bc93ae99b662cb01e887e6040dc3eabd9c44146413aa6a15299dd1a6ed12cb863b5dd7fbce12f904236091d1a3f02d1ffdf8389752b3af8e07269b8cd08cbd0bb76f542caf674b8209686db7d0211a82cb0147c168ebbea28356fe25cf7fa181373535d76f9776a2e234266695cd7cdcdbf4978b99925aa269e18ebc6d9d6771a57c95ffb33cb0573dc117f50932cc5638dbe5a6a641161087cfa0563701bac88ba83c4bc0e4b8589f47db6557d0427b0859271487427630de0eb15d7ea77a5a48f65fd017a39aea50b38bcd15d076c37b7a7b36aa82deaaa361e398add6f97e934dfdd5d4c7e2c2a8875f16dad693e9590cb7888609623d4491874bd6aa5cd91b888b0fbc149f7986b2350b5d9beee461f54fa8813511985482c7a969f06db8e41cc215bda8b9cea0bcdf937f38a8cd81778a01b82df34ce4f38b0e678e97cb57c9ee0b4cb22c821c2830e67e793d239ac6412b78b147a15428df158ba6cddb4e64c41ee381a30ba68ceb60be81ddc35b0970cfb945368a1f592e752d3e73861728d4f2e441dce1030aa67f4697da281181429568f702388df57cf0db7a3cf974cf27994fd50696fda01c769d3897d7c3b7da9af94f5169c2a543f3143fdb4ab5b513ff249b587144f9de5fbc296184c9b53583c9451fefbdef67e34bbdf12a7f1b591fc1ef444a0fa3c0d22679515fce82421355ed4f086d103a1935c36ec7dfe187ffe267b9c267f15b59d544fe0d4136c6fdf4e950fdd4a8ed2e2d1614adbfa62846cdd5156ec260654701edb92173fa11cf8fa899c128b107842b75f2e1640f37eb427ec048cf83df99f2125f4ec30a20a799b5b6d072b94fcb6bae5afab6495ff78d44b330293a2decd87663691f62c9d8c84d96cda97833d9728907192032043fe2b3495aebb12ad1665b5e707e4fc026a593d0e4079e97760b04a2919866adf2fcb37a0ca1fbac4c11f5fc07fabb908f840e788aedfbc5ebf63fbacf0cf98f493270f2349de90bd8c0901cb63e4d40ad927f3ec153d3b64cfd249a06015fb4e8bf799d5cb0d4e470151714290565c10061d7ffcc1ab0f9f8d4e141dc080acd02f80e45ee4f487691e9773e772006f50f42599798d0194eda00509f4603a107dea18ed4a0b05f7602fea4da8f283adcd3c9ac7fb9d0a5f9121dfa6b4d6e71d0e696716b414988c8e25bbf5f4bed1b98bef5a4bc05d956cfb5444eeb7bd74e1addbb382f3c83a7c4ac665993bcf005f2e12c9fdc08b2f0e396dc462f4886e1788781821b3789880bb2111b578991ab33bc6cd5002e4d76bf9260fe26b63a6d5b0dd8d215ed0d378516f049273d57d99126a44455ce35801037f3ded14b6cbfd9741128191e16d85b836dd30216d87dc9498f68fb118dcb5f3817341634df133f24ef6e6141ccfa52fce4d74dac8743f41ce0c2b22b512cc5c0eb511088f92dfe11d6686efc6c362697316bb80594e2a5c75249770893923b8ad1c5c1f42d34061aaa9acbdc91af790b0362d468fb3924d024c07d91901742c1c0f0ce5aab815a9ec30df68f5c91771f8b6f5a3ad0b08426d3e579d85284a2fda5ca863f2d751b7b26ae6624f635b0a5f9425c2db19e4c0ec70b3603e570d5f1c27b075262184cc0b7420e9f681737e4849667a34398b107301a4444e9900c362804fcbb99c996763b2c1dcfb22d10b1a4c04deac05a15f4c28ea387a65c03f0c44b43dd87b7d11e6a57747e09626ce9ad5748f1ae3597a2c1a7f5c3974ab1ce0d75ed2348ddbcabfcd8c3e6c3b89dc59475a49584a039e4b8bf5368df63715e008669e5123435f1d05ace5326fe79d6b5e8590b438abc83204ef25bf831211cd7ec3bc5fe232cd838447d15f19f6bfc1bee7b00416de19899e85c1eb048fc77309d68d6c7b022e34ac21d2e66748858d9d41ad4bf6c82bc75c2da113f568a4b00cd4b62459db37d3419d4c921c9158b75e441a74622855dd4bd46373e450fb1f5998860ceb87ded9c9bace6625b73d3969d0b2f8d3fec156c37fcde44612955dff0e4d614137e47799b5c8dccb27368f6874fead731878b1af831f72582e25400903b2439da37d02df1cb272f6b086a4a580733e37999febe475f266eedf94930dd9fced226bc1825dddf7f4ba2fcc3e964ff7ece7c9a2880fc07115d824afdc4ba2bde03dfad11b6ceac60a0647961a728c4c1bea45bd935252903d437356db58734c5ca1dfecdab3a6d093453b58ff0da021343c76cbb4133560be050d8833032225b138092d007fa2a28180345e04f7d4aef19bccd02a5fced6f5a2b3573aaea5c1301be7e5824e3bf464766eebbb7b9d2df44ea6505c6ac21685c5d54e75137d96fdb4c3c30f89f9ad8e6b7501213ca018499f389a1ae1a2d3cfea51c33c364f7b6b1e8ddaf2363c75870bc81b5c43a2ab486993a522df374af116eaf19327cc77c60f3adad3a811c282cd627dc975cbdecc386e8ffdc64f4b098045ccbe651aa6a4c30395040cce6c83ea5d27de09780e266842eed336921c80f58d925c7e620984765f2d5559eccb93e6d34eebd11a5ec3918d46fa0595652bca4553eadeb064b7890c2c630a9a433664120e3c4fd78e2fb62c0bf75a1fd0453e522c204defe4af1ff726994041a19c37e166cf9d5c7a7fc4d644b905a630a8b8a614567b8625c244fae9e5d7450146dd402ea5c03f59f9dbe419ea7173fb7786983c6a7f27fd10271c39d4a44c11308c8596fd6cd371addbde5d61954be4b21e32e81af7ba0c934bbd6d464cb4893b186fdf607de39b62333a45372fd7406affa088283109c6f523a166f6b02bd957827fa25fd74230d9fe650816b81b85a6d3b871c751fbc8ca54073849a884a570b0bd8f368f18138aa3946a5883cab2b2968fbb16ec46e94f6e5cba8888ff7ee7a82c0cfad17d1f7cacff10dce8795f23b21c2347ef836dec670e902616c8085bdc50e9f96b41fe9c4128e800d90d012205f8a50c064cc4b09b87be59d542048a750a90c26035cccc68b28f3669b16779c0d7bda2725b3ca87a95f1b193cbb036e05ec086e2b7921007f28e3c48777244ba341b77290c9c0bd9c8cedd91421730b2df873a0a906c2996f2c04d1a04fa264e04b8aa1f8284b9b6f8eecd1437cd74e66c37efefa6aba8602bd7cd1523aa3bfe6faa8e063f13a75a28cc9373144bb6d9eb5bf3b55efe15ab83fdd1b8d6b19f2cc0f4b5cd7e3ff5adc16492106599f12be4d9ae777a3557f2ee2229fc8c549fd283e9c5760a8322088e969094f951be8ab1dbfeb9979f52e3138f99cfc3e095d2a9cf24c749432eb777d2b8eeaafc1c862fe59903ce5f964af70c666551c188a1a90f4f0411f6c1afe63ce4df4580eb8f2dd6be8414733cf37a5ae4fbf1d30a0807570f2479ca432b9607e91325555e5d0fc39eccc11ece35b19ff74708f77a8c34399f47477f2b1c345598d68badd656b8706b5ea72c4237d5c018ed61875592eeffc529ff4f7c20cd8c108ebba12207a4d445f69a02498ffbb1e47344d0861afac2b3660568e0934a01bf02166a777c1d156abd6038ff9b64133e176e9bc24f0645db2ba27f2521d558921dda073e14c3ce51894f1c0bd3fb22f9de0517a82413ffd158841d810560246ede75c76d0fa1f457a9117cb66c5db5b677d564515f02da0cf8809cc2f44a0a3fc5992b73158509a676f8133183bf9e9ac46451cfd4f7f74794dc88a39d8340b4fb1ad2823630df9e67279c9a560a3eb0bf81f8276b3a44b2f57d53e199be02e3e46ad97b361502287c43f667423c62e0527249077a7047b3122abd75dcc5e7a6bf5f54d3db663da4d135d3c043f4453ea5e7bdb3df0bc486b81357b7d9f62f956af1fbfc5023a1600ae6bbb82ebff3e5c1e6256209c557469133427cef81ad45b0238bc0d4db81a57b081570e311864a26846b14ab97943e67597c02b85a31a4702e9f5ea1d640506b97dc0617f21262a718005542dd6ddde41df8c304c2c84731ab7a0e146bf3df77f42c7daced2d398288a1b5ccaa2ffa96ccc8c6ef28e128dac39c3e3caaf69f6bf6963846e22bc306773858340a4ac714b6fdb102e851aef06e557db4ae967ec1da248b91bfbd3d314fbaa5062ff655a8ea59a518ec9ad3aa113072e947390e5a94c036f51947c2b7d500bc24f549c961bf62adef24f5419b5e9ecf3750195b7171c1087cd93c5d0880d8068cdab541b6d7f773a670e9147436d33ce1a5ba589b2b504b3234eb1b873dfc0403a732d5d9c539e74e3699170b27347261cd542417aff1782e8f88f44eb7ae08051e7ac8ecea2331b548ba6cc5d46ab1dd2c02e2d593abb3e888632f160774323d919b6a4fab03fcc3a402a12e584a17fa17136477e66788ceb6a73b8c123194f8d71f69d4e0e4bfc7ae9c3f5fed002dd2d214ed6adfcc543af26708876685eb4482762231eb1bc81d9f8439ad1da55d1bf26bc40630b2d1bc35e23fb418168981a48feef2df5b39ebc61e9ba2f8acba56fa8"})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f00000000c0)={{r0}, r6, 0x10, @unused=[0x3ff, 0xc8, 0x3, 0x9], @subvolid=0x20})

03:32:37 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 12)

03:32:37 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:32:37 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1110.831198]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1110.831591]  ? vfs_write+0x354/0xb10
03:32:37 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
write$binfmt_aout(r1, &(0x7f0000000340)={{0x10b, 0x0, 0x2, 0x272, 0x3d3, 0xfffffffa, 0x1fe, 0x4}, "00a6ed47df5603952b0bebdee7082e4eb8b1c869b11006f0def75541a38760", ['\x00', '\x00', '\x00', '\x00']}, 0x43f)

[ 1110.831910]  __x64_sys_recvmmsg+0x20f/0x260
[ 1110.843269]  ? ksys_write+0x1a9/0x260
[ 1110.843592]  ? __do_sys_socketcall+0x600/0x600
[ 1110.843978]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1110.844417]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1110.844849]  do_syscall_64+0x33/0x40
[ 1110.855308]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1110.855738] RIP: 0033:0x7f06d872db19
[ 1110.856057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1110.857573] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1110.858207] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1110.858798] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1110.859408] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1110.860000] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001
[ 1110.860592] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1110.870247] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1110.883385] audit: type=1400 audit(1728963157.826:51): avc:  denied  { setattr } for  pid=7056 comm="syz-executor.6" name="smaps" dev="proc" ino=30397 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1
[ 1125.869756] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
03:32:52 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
io_uring_enter(r1, 0x7756, 0xbc95, 0x3, &(0x7f0000000280), 0x8)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, @out_args}, './file0\x00'})
r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x48802, 0x120)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1001089ace1e460000c375e773f24a8aa6e3598fa5bfa2a3cf95724d4f3d41f5063cf84ccc711773c7fde8fcfcd80690c468350b811c34c0a95a995fd73a403ae0e4cf28cfb0ad5d5f2222d2ccd8032efe7795", @ANYRES16=0x0, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x20000080}, 0x40)
pread64(r4, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10a00, 0x12c)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f0000000000))
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r5, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000000c0)={0x1, 0x6, 0x9, 0x3ff, 0x2})

03:32:52 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)

03:32:52 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x2000000)

03:32:52 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 3)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:32:52 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x9}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:32:52 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1125.871908] FAULT_INJECTION: forcing a failure.
[ 1125.871908] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1125.874420] CPU: 1 PID: 7085 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1125.875049] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1125.876317] Call Trace:
[ 1125.876573]  dump_stack+0x107/0x167
[ 1125.876920]  should_fail.cold+0x5/0xa
[ 1125.877273]  _copy_from_user+0x2e/0x1b0
[ 1125.877640]  __copy_msghdr_from_user+0x91/0x4b0
[ 1125.878072]  ? __ia32_sys_shutdown+0x80/0x80
[ 1125.878473]  ? __lock_acquire+0x1657/0x5b00
[ 1125.878888]  ___sys_recvmsg+0xd5/0x200
[ 1125.879268]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1125.880501]  ? __fget_files+0x2cf/0x520
[ 1125.880880]  ? lock_acquire+0x197/0x470
[ 1125.881268]  ? find_held_lock+0x2c/0x110
[ 1125.881662]  ? __might_fault+0xd3/0x180
[ 1125.882025]  ? lock_downgrade+0x6d0/0x6d0
[ 1125.882446]  do_recvmmsg+0x24c/0x6d0
[ 1125.882801]  ? ___sys_recvmsg+0x200/0x200
[ 1125.883187]  ? lock_downgrade+0x6d0/0x6d0
[ 1125.883615]  ? ksys_write+0x12d/0x260
[ 1125.883985]  ? wait_for_completion_io+0x270/0x270
[ 1125.884444]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1125.884858]  ? vfs_write+0x354/0xb10
[ 1125.885200]  __x64_sys_recvmmsg+0x20f/0x260
[ 1125.885608]  ? ksys_write+0x1a9/0x260
[ 1125.885956]  ? __do_sys_socketcall+0x600/0x600
[ 1125.886374]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1125.886865]  ? syscall_enter_from_user_mode+0x1d/0x50
03:32:52 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:32:52 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 13)

[ 1125.887533]  do_syscall_64+0x33/0x40
[ 1125.887895]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1125.888366] RIP: 0033:0x7f06d872db19
[ 1125.888730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1125.890962] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1125.892115] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1125.892756] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1125.893421] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1125.894082] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001
[ 1125.894737] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1125.905285] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1125.912327] FAULT_INJECTION: forcing a failure.
[ 1125.912327] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1125.913667] CPU: 1 PID: 7092 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1125.914298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1125.915040] Call Trace:
[ 1125.915310]  dump_stack+0x107/0x167
[ 1125.915668]  should_fail.cold+0x5/0xa
[ 1125.916035]  _copy_from_user+0x2e/0x1b0
[ 1125.916428]  __copy_msghdr_from_user+0x91/0x4b0
[ 1125.916861]  ? __ia32_sys_shutdown+0x80/0x80
[ 1125.917288]  ? __lock_acquire+0x1657/0x5b00
[ 1125.917705]  ___sys_recvmsg+0xd5/0x200
[ 1125.918087]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1125.918562]  ? __fget_files+0x2cf/0x520
[ 1125.918936]  ? lock_acquire+0x197/0x470
[ 1125.919311]  ? find_held_lock+0x2c/0x110
[ 1125.919730]  ? __might_fault+0xd3/0x180
[ 1125.920098]  ? lock_downgrade+0x6d0/0x6d0
[ 1125.920522]  do_recvmmsg+0x24c/0x6d0
[ 1125.920877]  ? ___sys_recvmsg+0x200/0x200
[ 1125.921260]  ? lock_downgrade+0x6d0/0x6d0
[ 1125.921680]  ? ksys_write+0x12d/0x260
[ 1125.922049]  ? wait_for_completion_io+0x270/0x270
[ 1125.922523]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1125.922952]  ? vfs_write+0x354/0xb10
[ 1125.923300]  __x64_sys_recvmmsg+0x20f/0x260
[ 1125.923748]  ? ksys_write+0x1a9/0x260
[ 1125.924102]  ? __do_sys_socketcall+0x600/0x600
[ 1125.924527]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1125.925010]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1125.925484]  do_syscall_64+0x33/0x40
[ 1125.925847]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1125.926314] RIP: 0033:0x7f96c2c53b19
[ 1125.926667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1125.928336] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1125.929071] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1125.929722] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1125.930381] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1125.931040] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1125.931697] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:32:52 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000))
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:32:52 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r4}}, 0x0)
r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r8}}, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x1, 0x4, 0x0, 0x20, 0x7, 0x0, {0x0, r8}}, 0x4)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1140.022800] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1140.024775] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
03:33:06 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 4)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:33:06 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x3000000)

03:33:06 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)

03:33:06 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f0000000000)={0x0, 0xd925, 0x4, 0x0, 0x22}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x40, 0x7f, 0x9, 0xf8, 0x0, 0xdbc, 0x8, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x0, 0x8}, 0x2a00, 0x1, 0xfff, 0x0, 0x20, 0x390, 0x3, 0x0, 0x753c0000, 0x0, 0xfff}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:33:06 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f00000000c0)=""/4070, 0xfe6, 0x0)

03:33:06 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 14)

03:33:06 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:33:06 executing program 0:
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1140.037194] FAULT_INJECTION: forcing a failure.
[ 1140.037194] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1140.038898] CPU: 0 PID: 7114 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1140.039798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1140.040509] Call Trace:
[ 1140.040747]  dump_stack+0x107/0x167
[ 1140.041061]  should_fail.cold+0x5/0xa
[ 1140.041392]  _copy_from_user+0x2e/0x1b0
[ 1140.041749]  __copy_msghdr_from_user+0x91/0x4b0
[ 1140.042148]  ? __ia32_sys_shutdown+0x80/0x80
[ 1140.042523]  ? __lock_acquire+0x1657/0x5b00
[ 1140.042901]  ___sys_recvmsg+0xd5/0x200
[ 1140.043231]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1140.043737]  ? __fget_files+0x2cf/0x520
[ 1140.044126]  ? lock_acquire+0x197/0x470
[ 1140.044510]  ? find_held_lock+0x2c/0x110
[ 1140.044922]  ? __might_fault+0xd3/0x180
[ 1140.045285]  ? lock_downgrade+0x6d0/0x6d0
[ 1140.045715]  do_recvmmsg+0x24c/0x6d0
[ 1140.046074]  ? ___sys_recvmsg+0x200/0x200
[ 1140.046451]  ? lock_downgrade+0x6d0/0x6d0
[ 1140.046869]  ? ksys_write+0x12d/0x260
[ 1140.047234]  ? wait_for_completion_io+0x270/0x270
[ 1140.047720]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1140.048149]  ? vfs_write+0x354/0xb10
[ 1140.048505]  __x64_sys_recvmmsg+0x20f/0x260
[ 1140.048936]  ? ksys_write+0x1a9/0x260
[ 1140.049289]  ? __do_sys_socketcall+0x600/0x600
[ 1140.049764]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1140.050250]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1140.050756]  do_syscall_64+0x33/0x40
[ 1140.051096]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1140.051589] RIP: 0033:0x7f06d872db19
[ 1140.051965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1140.053641] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1140.054358] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1140.055015] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1140.067704] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1140.068312] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001
[ 1140.068922] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1140.103900] FAULT_INJECTION: forcing a failure.
[ 1140.103900] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1140.105185] CPU: 1 PID: 7125 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1140.105763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1140.106501] Call Trace:
[ 1140.106732]  dump_stack+0x107/0x167
[ 1140.107044]  should_fail.cold+0x5/0xa
03:33:07 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1140.107430]  _copy_from_user+0x2e/0x1b0
[ 1140.107788]  __copy_msghdr_from_user+0x91/0x4b0
[ 1140.108232]  ? __ia32_sys_shutdown+0x80/0x80
[ 1140.108607]  ? __lock_acquire+0x1657/0x5b00
[ 1140.108984]  ___sys_recvmsg+0xd5/0x200
[ 1140.109387]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1140.109803]  ? __fget_files+0x2cf/0x520
[ 1140.110204]  ? lock_acquire+0x197/0x470
[ 1140.110540]  ? find_held_lock+0x2c/0x110
[ 1140.110889]  ? __might_fault+0xd3/0x180
[ 1140.111273]  ? lock_downgrade+0x6d0/0x6d0
[ 1140.111650]  do_recvmmsg+0x24c/0x6d0
[ 1140.111970]  ? ___sys_recvmsg+0x200/0x200
[ 1140.112369]  ? lock_downgrade+0x6d0/0x6d0
[ 1140.112726]  ? ksys_write+0x12d/0x260
[ 1140.113059]  ? wait_for_completion_io+0x270/0x270
[ 1140.113536]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1140.113929]  ? vfs_write+0x354/0xb10
[ 1140.114301]  __x64_sys_recvmmsg+0x20f/0x260
[ 1140.114664]  ? ksys_write+0x1a9/0x260
[ 1140.114985]  ? __do_sys_socketcall+0x600/0x600
[ 1140.115423]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1140.115882]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1140.116369]  do_syscall_64+0x33/0x40
[ 1140.116687]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1140.117189] RIP: 0033:0x7f96c2c53b19
[ 1140.117505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1140.119166] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1140.119822] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1140.120463] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1140.121059] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1140.121720] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1140.122372] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:33:07 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 5)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:33:07 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 15)

03:33:07 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)={0x0, <r3=>0x0})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r4, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r5, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="86b28c4cffae2a3601e8ae", 0xb}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000001000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r5], 0x68, 0x8000}, 0x4800)
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1140.214273] FAULT_INJECTION: forcing a failure.
[ 1140.214273] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1140.215677] CPU: 0 PID: 7134 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1140.216263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1140.216983] Call Trace:
[ 1140.217222]  dump_stack+0x107/0x167
[ 1140.217548]  should_fail.cold+0x5/0xa
[ 1140.217891]  _copy_from_user+0x2e/0x1b0
[ 1140.218243]  __copy_msghdr_from_user+0x91/0x4b0
[ 1140.218650]  ? __ia32_sys_shutdown+0x80/0x80
[ 1140.219036]  ? __lock_acquire+0x1657/0x5b00
[ 1140.219428]  ___sys_recvmsg+0xd5/0x200
[ 1140.219782]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1140.220210]  ? __fget_files+0x2cf/0x520
[ 1140.220566]  ? lock_acquire+0x197/0x470
[ 1140.220906]  ? find_held_lock+0x2c/0x110
[ 1140.221258]  ? __might_fault+0xd3/0x180
[ 1140.221598]  ? lock_downgrade+0x6d0/0x6d0
[ 1140.221965]  do_recvmmsg+0x24c/0x6d0
[ 1140.222294]  ? ___sys_recvmsg+0x200/0x200
[ 1140.222655]  ? lock_downgrade+0x6d0/0x6d0
[ 1140.223014]  ? ksys_write+0x12d/0x260
[ 1140.223361]  ? wait_for_completion_io+0x270/0x270
[ 1140.223790]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1140.224186]  ? vfs_write+0x354/0xb10
[ 1140.224519]  __x64_sys_recvmmsg+0x20f/0x260
[ 1140.224891]  ? ksys_write+0x1a9/0x260
[ 1140.225218]  ? __do_sys_socketcall+0x600/0x600
[ 1140.225616]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1140.226061]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1140.226503]  do_syscall_64+0x33/0x40
[ 1140.226820]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1140.227253] RIP: 0033:0x7f06d872db19
[ 1140.231600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1140.233125] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1140.233763] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1140.234359] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1140.234954] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1140.235561] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001
[ 1140.236159] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1140.249984] FAULT_INJECTION: forcing a failure.
[ 1140.249984] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1140.253297] CPU: 1 PID: 7138 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1140.253891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1140.254628] Call Trace:
[ 1140.254862]  dump_stack+0x107/0x167
[ 1140.255250]  should_fail.cold+0x5/0xa
[ 1140.255592]  _copy_from_user+0x2e/0x1b0
[ 1140.255936]  __copy_msghdr_from_user+0x91/0x4b0
[ 1140.256387]  ? __ia32_sys_shutdown+0x80/0x80
[ 1140.256760]  ? __lock_acquire+0x1657/0x5b00
[ 1140.257191]  ___sys_recvmsg+0xd5/0x200
[ 1140.257525]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1140.257940]  ? __fget_files+0x2cf/0x520
[ 1140.258330]  ? lock_acquire+0x197/0x470
[ 1140.258672]  ? find_held_lock+0x2c/0x110
[ 1140.259021]  ? __might_fault+0xd3/0x180
[ 1140.259429]  ? lock_downgrade+0x6d0/0x6d0
[ 1140.259870]  do_recvmmsg+0x24c/0x6d0
[ 1140.260316]  ? ___sys_recvmsg+0x200/0x200
[ 1140.260753]  ? lock_downgrade+0x6d0/0x6d0
[ 1140.261244]  ? ksys_write+0x12d/0x260
[ 1140.261663]  ? wait_for_completion_io+0x270/0x270
[ 1140.262217]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1140.262704]  ? vfs_write+0x354/0xb10
[ 1140.263166]  __x64_sys_recvmmsg+0x20f/0x260
[ 1140.263618]  ? ksys_write+0x1a9/0x260
[ 1140.264020]  ? __do_sys_socketcall+0x600/0x600
[ 1140.264561]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1140.265164]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1140.265714]  do_syscall_64+0x33/0x40
[ 1140.266155]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1140.266691] RIP: 0033:0x7f96c2c53b19
[ 1140.267148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1140.268819] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1140.269506] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1140.270148] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1140.270745] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1140.271408] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1140.272024] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:33:07 executing program 0:
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1140.348673] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
03:33:07 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1140.365855] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
03:33:21 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 6)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:33:21 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x4000000)

03:33:21 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:33:21 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
preadv2(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/98, 0x62}, {&(0x7f00000000c0)=""/96, 0x60}, {&(0x7f0000000140)=""/115, 0x73}], 0x3, 0x800, 0x0, 0xc)

03:33:21 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\xc4\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:33:21 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 16)

03:33:21 executing program 0:
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:33:21 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1154.416184] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1154.418185] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1154.421303] FAULT_INJECTION: forcing a failure.
[ 1154.421303] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1154.422610] CPU: 0 PID: 7166 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1154.423226] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1154.423985] Call Trace:
[ 1154.424238]  dump_stack+0x107/0x167
[ 1154.424582]  should_fail.cold+0x5/0xa
[ 1154.424943]  _copy_from_user+0x2e/0x1b0
[ 1154.425320]  __copy_msghdr_from_user+0x91/0x4b0
[ 1154.425753]  ? __ia32_sys_shutdown+0x80/0x80
[ 1154.426161]  ? __lock_acquire+0x1657/0x5b00
[ 1154.426580]  ___sys_recvmsg+0xd5/0x200
[ 1154.426945]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1154.427405]  ? __fget_files+0x2cf/0x520
[ 1154.427806]  ? lock_acquire+0x197/0x470
[ 1154.428175]  ? find_held_lock+0x2c/0x110
[ 1154.428565]  ? __might_fault+0xd3/0x180
[ 1154.428939]  ? lock_downgrade+0x6d0/0x6d0
[ 1154.429342]  do_recvmmsg+0x24c/0x6d0
[ 1154.429695]  ? ___sys_recvmsg+0x200/0x200
[ 1154.430082]  ? lock_downgrade+0x6d0/0x6d0
[ 1154.430474]  ? ksys_write+0x12d/0x260
[ 1154.430842]  ? wait_for_completion_io+0x270/0x270
[ 1154.431199] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1154.431294]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1154.432434]  ? vfs_write+0x354/0xb10
[ 1154.432787]  __x64_sys_recvmmsg+0x20f/0x260
[ 1154.433184]  ? ksys_write+0x1a9/0x260
[ 1154.433540]  ? __do_sys_socketcall+0x600/0x600
[ 1154.433966]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1154.434452]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1154.434932]  do_syscall_64+0x33/0x40
[ 1154.435280]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1154.435807] RIP: 0033:0x7f06d872db19
[ 1154.436150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1154.437799] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1154.438473] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1154.439120] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1154.439790] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1154.440443] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001
[ 1154.441094] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1154.451377] FAULT_INJECTION: forcing a failure.
[ 1154.451377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1154.453027] CPU: 0 PID: 7159 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1154.453636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1154.454367] Call Trace:
[ 1154.454618]  dump_stack+0x107/0x167
[ 1154.454959]  should_fail.cold+0x5/0xa
[ 1154.455320]  _copy_from_user+0x2e/0x1b0
[ 1154.455706]  __copy_msghdr_from_user+0x91/0x4b0
[ 1154.456140]  ? __ia32_sys_shutdown+0x80/0x80
[ 1154.456550]  ? __lock_acquire+0x1657/0x5b00
[ 1154.456968]  ___sys_recvmsg+0xd5/0x200
[ 1154.457331]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1154.457800]  ? __fget_files+0x2cf/0x520
[ 1154.458177]  ? lock_acquire+0x197/0x470
[ 1154.458548]  ? find_held_lock+0x2c/0x110
[ 1154.458930]  ? __might_fault+0xd3/0x180
[ 1154.459310]  ? lock_downgrade+0x6d0/0x6d0
[ 1154.459696]  do_recvmmsg+0x24c/0x6d0
[ 1154.460060]  ? ___sys_recvmsg+0x200/0x200
[ 1154.460445]  ? lock_downgrade+0x6d0/0x6d0
[ 1154.460834]  ? ksys_write+0x12d/0x260
[ 1154.461217]  ? wait_for_completion_io+0x270/0x270
[ 1154.461662]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1154.462089]  ? vfs_write+0x354/0xb10
[ 1154.462458]  __x64_sys_recvmmsg+0x20f/0x260
[ 1154.462857]  ? ksys_write+0x1a9/0x260
[ 1154.463211]  ? __do_sys_socketcall+0x600/0x600
[ 1154.463656]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1154.464147]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1154.464634]  do_syscall_64+0x33/0x40
[ 1154.464979]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1154.465444] RIP: 0033:0x7f96c2c53b19
[ 1154.465800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1154.467456] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1154.468172] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1154.468824] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1154.469477] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1154.470139] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1154.470783] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:33:21 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = fsmount(r0, 0x1, 0x8)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x8, 0x81, 0x1, 0x0, 0x3, 0x20, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x370, 0x1, @perf_config_ext={0x5, 0x962}, 0x80000, 0x80000000, 0x6, 0x2, 0xdc85, 0xffff, 0xad22, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0x7, r1, 0x8)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:33:21 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000006, 0x4010, r0, 0x10000000)
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r6}}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x100, 0x4, 0x0, {0x0, r6, r0}}, 0x1000)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r7, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:33:21 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 7)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:33:21 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:33:21 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 17)

[ 1154.687710] FAULT_INJECTION: forcing a failure.
[ 1154.687710] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1154.691029] CPU: 0 PID: 7180 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1154.692639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1154.694595] Call Trace:
[ 1154.695207]  dump_stack+0x107/0x167
[ 1154.696098]  should_fail.cold+0x5/0xa
[ 1154.697026]  _copy_from_user+0x2e/0x1b0
[ 1154.697935]  __copy_msghdr_from_user+0x91/0x4b0
[ 1154.699008]  ? __ia32_sys_shutdown+0x80/0x80
[ 1154.700094]  ? __lock_acquire+0x1657/0x5b00
[ 1154.701145]  ___sys_recvmsg+0xd5/0x200
[ 1154.702086]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1154.703293]  ? __fget_files+0x2cf/0x520
[ 1154.704204]  ? lock_acquire+0x197/0x470
[ 1154.705129]  ? find_held_lock+0x2c/0x110
[ 1154.706117]  ? __might_fault+0xd3/0x180
[ 1154.707036]  ? lock_downgrade+0x6d0/0x6d0
[ 1154.708101]  do_recvmmsg+0x24c/0x6d0
[ 1154.708955]  ? ___sys_recvmsg+0x200/0x200
[ 1154.709913]  ? lock_downgrade+0x6d0/0x6d0
[ 1154.710906]  ? ksys_write+0x12d/0x260
[ 1154.711830]  ? wait_for_completion_io+0x270/0x270
[ 1154.712998]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1154.714101]  ? vfs_write+0x354/0xb10
[ 1154.715001]  __x64_sys_recvmmsg+0x20f/0x260
[ 1154.716045]  ? ksys_write+0x1a9/0x260
[ 1154.716961]  ? __do_sys_socketcall+0x600/0x600
[ 1154.717974]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1154.719175]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1154.720427]  do_syscall_64+0x33/0x40
[ 1154.721307]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1154.722546] RIP: 0033:0x7f06d872db19
[ 1154.723430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1154.727739] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1154.729550] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1154.731257] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1154.732979] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1154.734601] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001
[ 1154.736296] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1154.744896] FAULT_INJECTION: forcing a failure.
[ 1154.744896] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1154.746990] CPU: 1 PID: 7186 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1154.748530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1154.750449] Call Trace:
[ 1154.751074]  dump_stack+0x107/0x167
[ 1154.751938]  should_fail.cold+0x5/0xa
[ 1154.752863]  _copy_from_user+0x2e/0x1b0
[ 1154.753822]  __copy_msghdr_from_user+0x91/0x4b0
[ 1154.754926]  ? __ia32_sys_shutdown+0x80/0x80
[ 1154.755405]  ? __lock_acquire+0x1657/0x5b00
[ 1154.756466]  ___sys_recvmsg+0xd5/0x200
[ 1154.756890]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1154.758061]  ? __fget_files+0x2cf/0x520
[ 1154.758504]  ? lock_acquire+0x197/0x470
[ 1154.759450]  ? find_held_lock+0x2c/0x110
[ 1154.759903]  ? __might_fault+0xd3/0x180
[ 1154.760874]  ? lock_downgrade+0x6d0/0x6d0
[ 1154.761346]  do_recvmmsg+0x24c/0x6d0
[ 1154.762234]  ? ___sys_recvmsg+0x200/0x200
[ 1154.762683]  ? lock_downgrade+0x6d0/0x6d0
[ 1154.763684]  ? ksys_write+0x12d/0x260
[ 1154.764113]  ? wait_for_completion_io+0x270/0x270
[ 1154.765264]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1154.765768]  ? vfs_write+0x354/0xb10
[ 1154.766658]  __x64_sys_recvmmsg+0x20f/0x260
[ 1154.767125]  ? ksys_write+0x1a9/0x260
[ 1154.768068]  ? __do_sys_socketcall+0x600/0x600
[ 1154.768561]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1154.769803]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1154.770353]  do_syscall_64+0x33/0x40
[ 1154.771212]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1154.771764] RIP: 0033:0x7f96c2c53b19
[ 1154.772637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1154.774541] RSP: 002b:00007f96c01a8188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1154.776292] RAX: ffffffffffffffda RBX: 00007f96c2d67020 RCX: 00007f96c2c53b19
[ 1154.777914] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1154.779538] RBP: 00007f96c01a81d0 R08: 0000000000000000 R09: 0000000000000000
[ 1154.781150] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1154.782804] R13: 00007ffd68b0182f R14: 00007f96c01a8300 R15: 0000000000022000
[ 1154.807894] syz-executor.1 (7171) used greatest stack depth: 23480 bytes left
03:33:36 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
recvmsg$unix(r0, &(0x7f0000000840)={&(0x7f0000000140), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000040)=""/15, 0xf}, {&(0x7f00000001c0)=""/236, 0xec}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/216, 0xd8}, {&(0x7f0000000680)=""/23, 0x17}, {&(0x7f00000006c0)}], 0x9, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r1=>0x0}}}], 0x68}, 0x102)
r2 = fsmount(r0, 0x0, 0x1)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xff, 0xbb, 0x0, 0x7f, 0x0, 0x400, 0x6a250, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x7}, 0x15488, 0x4, 0x2, 0x8, 0xa55, 0x1, 0x1, 0x0, 0x3, 0x0, 0x2}, r1, 0x0, r2, 0xa)
ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x6, 0x40, 0x3, 0x8, 0x42, 0xfffeffff})
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:33:36 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1169.240653] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1169.244251] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1169.261538] FAULT_INJECTION: forcing a failure.
03:33:36 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x5000000)

03:33:36 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/97, 0x61}, {&(0x7f00000000c0)=""/197, 0xc5}], 0x2, 0x800, 0x3)
r2 = syz_io_uring_setup(0x2d21, &(0x7f0000000240)={0x0, 0x9bd4, 0x20, 0x2, 0x26c, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380))
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000030000f30000e10005000000000000000100f0ff00000000fcffffff00000000040000fffffffc008180000000000000ffffffff000400000000000000000000ea54ffffffff040001000000002500"/96]}, @devid=r4})
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000003c0)={0x2, 0x0, {0x8001, @usage=0x2, <r5=>0x0, 0x81, 0xfffffffffffffe00, 0x80, 0x4f, 0x40, 0x800, @struct={0x7, 0x2}, 0x1, 0x2, [0x0, 0xe4, 0x7, 0x6, 0xffffffff, 0x7]}, {0x6, @struct={0x5, 0x5}, 0x0, 0x3, 0x7fffffff, 0xf27, 0x2b, 0x8, 0x20, @usage=0x223d3c0e, 0xffff8001, 0x0, [0x1ff, 0x40, 0xab54, 0x6a78, 0xfff, 0x3f]}, {0x5, @struct={0xffffff5d, 0x1000}, 0x0, 0x3, 0x9, 0x10001, 0x0, 0x5, 0x2, @usage=0x925, 0x4, 0x546, [0x1, 0x7, 0x2, 0x80000000, 0x80000001, 0x3]}, {0x80000000, 0x57227871, 0x101}})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000007c0)={<r6=>0x0, 0x9, 0x2})
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000bc0)={0x8, 0x0, {0x8001, @usage, r4, 0x10000, 0x200, 0x0, 0x7, 0x4fb082f5, 0x401, @usage=0x8, 0x1, 0x8, [0xffff, 0xffffffffffffe276, 0x1000, 0x8, 0x9]}, {0x6, @usage=0x6, r5, 0x101, 0x6, 0xebc, 0x928, 0x8, 0x0, @usage=0x3f, 0x76, 0xfffffffc, [0xfff, 0x7ff, 0x81, 0xe3, 0x80000000, 0x4]}, {0x45c1, @struct={0x0, 0x200}, r6, 0x2, 0xff, 0x7, 0x7ff, 0x80000001, 0x20, @usage=0x100000000, 0x10001, 0x7, [0xfffffffffffffdb7, 0xc, 0x7ff, 0x8, 0x43, 0xffff]}, {0x2e1, 0x1, 0x800}})
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000002100), 0x404000, 0x0)
openat(r7, &(0x7f0000002140)='./file0\x00', 0x206500, 0x94)

03:33:36 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:33:36 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:33:36 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 18)

03:33:36 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 8)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

[ 1169.261538] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1169.268460] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1169.269589] CPU: 1 PID: 7209 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1169.269596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1169.269600] Call Trace:
[ 1169.269619]  dump_stack+0x107/0x167
[ 1169.269632]  should_fail.cold+0x5/0xa
[ 1169.269650]  _copy_from_user+0x2e/0x1b0
[ 1169.269668]  __copy_msghdr_from_user+0x91/0x4b0
[ 1169.269681]  ? __ia32_sys_shutdown+0x80/0x80
[ 1169.269694]  ? __lock_acquire+0x1657/0x5b00
[ 1169.269718]  ___sys_recvmsg+0xd5/0x200
[ 1169.269730]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1169.269743]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
03:33:36 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:33:36 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 9)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:33:36 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 19)

[ 1169.269759]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1169.269770]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1169.269781]  ? trace_hardirqs_on+0x5b/0x180
[ 1169.269793]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
03:33:36 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x30, r0, 0x200)
r2 = perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x48, 0x48, 0x1, 0x1, 0x0, 0x1, 0x10000, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40, 0x4, 0x0, 0x8, 0x8, 0x20, 0x7fff, 0x0, 0x9, 0x0, 0x7fffffff}, r1, 0x0, r1, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x81, 0x4, 0x7, 0x0, 0x7, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x6}, 0x110, 0x0, 0x2005, 0x7, 0x100000000, 0x5, 0x400, 0x0, 0x5dc6, 0x0, 0xffff}, 0x0, 0x1, r2, 0x8)
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1169.269814]  ? lock_is_held_type+0x51/0x110
03:33:36 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r4}}, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r5, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/150, 0x96}, {&(0x7f0000000180)=""/127, 0x7f}, {&(0x7f0000000340)=""/237, 0xed}, {&(0x7f0000000240)=""/80, 0x50}, {&(0x7f0000000440)=""/223, 0xdf}], 0x5}, 0x0, 0x4, 0x1, {0x3}}, 0x9)

03:33:36 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 10)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

[ 1169.269835]  do_recvmmsg+0x24c/0x6d0
[ 1169.269851]  ? ___sys_recvmsg+0x200/0x200
03:33:36 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 20)

[ 1169.269863]  ? lock_downgrade+0x6d0/0x6d0
[ 1169.269881]  ? ksys_write+0x12d/0x260
[ 1169.269902]  ? wait_for_completion_io+0x270/0x270
[ 1169.269916]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1169.269927]  ? vfs_write+0x354/0xb10
[ 1169.269942]  __x64_sys_recvmmsg+0x20f/0x260
[ 1169.269953]  ? ksys_write+0x1a9/0x260
[ 1169.269965]  ? __do_sys_socketcall+0x600/0x600
[ 1169.269979]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1169.269990]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1169.270006]  do_syscall_64+0x33/0x40
[ 1169.270017]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1169.270025] RIP: 0033:0x7f96c2c53b19
[ 1169.270036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1169.270042] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1169.270055] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1169.270061] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1169.270068] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1169.270075] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1169.270082] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
[ 1169.276960] FAULT_INJECTION: forcing a failure.
[ 1169.276960] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1169.276971] CPU: 1 PID: 7206 Comm: syz-executor.4 Not tainted 5.10.226 #1
03:33:36 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 11)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

[ 1169.276977] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1169.276980] Call Trace:
[ 1169.276992]  dump_stack+0x107/0x167
[ 1169.277004]  should_fail.cold+0x5/0xa
[ 1169.277019]  _copy_from_user+0x2e/0x1b0
[ 1169.277034]  __copy_msghdr_from_user+0x91/0x4b0
[ 1169.277046]  ? __ia32_sys_shutdown+0x80/0x80
[ 1169.277057]  ? __lock_acquire+0x1657/0x5b00
[ 1169.277081]  ___sys_recvmsg+0xd5/0x200
[ 1169.277094]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1169.277107]  ? __fget_files+0x2cf/0x520
[ 1169.277123]  ? lock_acquire+0x197/0x470
[ 1169.277134]  ? find_held_lock+0x2c/0x110
[ 1169.277150]  ? __might_fault+0xd3/0x180
[ 1169.277162]  ? lock_downgrade+0x6d0/0x6d0
[ 1169.277187]  do_recvmmsg+0x24c/0x6d0
[ 1169.277203]  ? ___sys_recvmsg+0x200/0x200
[ 1169.277215]  ? lock_downgrade+0x6d0/0x6d0
[ 1169.277231]  ? ksys_write+0x12d/0x260
[ 1169.277253]  ? wait_for_completion_io+0x270/0x270
[ 1169.277265]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1169.277276]  ? vfs_write+0x354/0xb10
[ 1169.277291]  __x64_sys_recvmmsg+0x20f/0x260
[ 1169.277302]  ? ksys_write+0x1a9/0x260
[ 1169.277313]  ? __do_sys_socketcall+0x600/0x600
[ 1169.277328]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1169.277339]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1169.277352]  do_syscall_64+0x33/0x40
[ 1169.277367]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1169.277374] RIP: 0033:0x7f06d872db19
[ 1169.277384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1169.277390] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1169.277401] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1169.277408] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1169.277414] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1169.277421] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001
[ 1169.277429] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1169.366722] FAULT_INJECTION: forcing a failure.
[ 1169.366722] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1169.366737] CPU: 1 PID: 7221 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1169.366744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1169.366747] Call Trace:
[ 1169.366762]  dump_stack+0x107/0x167
[ 1169.366775]  should_fail.cold+0x5/0xa
[ 1169.366792]  _copy_from_user+0x2e/0x1b0
[ 1169.366811]  __copy_msghdr_from_user+0x91/0x4b0
[ 1169.366824]  ? __ia32_sys_shutdown+0x80/0x80
[ 1169.366837]  ? __lock_acquire+0x1657/0x5b00
[ 1169.366861]  ___sys_recvmsg+0xd5/0x200
[ 1169.366874]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1169.366887]  ? __fget_files+0x2cf/0x520
[ 1169.366903]  ? lock_acquire+0x197/0x470
[ 1169.366913]  ? find_held_lock+0x2c/0x110
[ 1169.366930]  ? __might_fault+0xd3/0x180
[ 1169.366941]  ? lock_downgrade+0x6d0/0x6d0
[ 1169.366966]  do_recvmmsg+0x24c/0x6d0
[ 1169.366983]  ? ___sys_recvmsg+0x200/0x200
[ 1169.366994]  ? lock_downgrade+0x6d0/0x6d0
[ 1169.367011]  ? ksys_write+0x12d/0x260
[ 1169.367033]  ? wait_for_completion_io+0x270/0x270
[ 1169.367047]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1169.367057]  ? vfs_write+0x354/0xb10
[ 1169.367072]  __x64_sys_recvmmsg+0x20f/0x260
[ 1169.367084]  ? ksys_write+0x1a9/0x260
[ 1169.367096]  ? __do_sys_socketcall+0x600/0x600
[ 1169.367110]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1169.367121]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1169.367134]  do_syscall_64+0x33/0x40
[ 1169.367145]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1169.367153] RIP: 0033:0x7f06d872db19
[ 1169.367163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1169.367169] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1169.367182] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1169.367188] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1169.367195] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1169.367201] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001
[ 1169.367208] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1169.392309] FAULT_INJECTION: forcing a failure.
[ 1169.392309] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1169.392328] CPU: 0 PID: 7222 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1169.392336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1169.392340] Call Trace:
[ 1169.392365]  dump_stack+0x107/0x167
[ 1169.392382]  should_fail.cold+0x5/0xa
[ 1169.392405]  _copy_from_user+0x2e/0x1b0
[ 1169.392436]  __copy_msghdr_from_user+0x91/0x4b0
[ 1169.392454]  ? __ia32_sys_shutdown+0x80/0x80
[ 1169.392483]  ? __lock_acquire+0x1657/0x5b00
[ 1169.392517]  ___sys_recvmsg+0xd5/0x200
[ 1169.392539]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1169.392573]  ? lock_acquire+0x197/0x470
[ 1169.392635]  ? find_held_lock+0x2c/0x110
[ 1169.392661]  ? __might_fault+0xd3/0x180
[ 1169.392677]  ? lock_downgrade+0x6d0/0x6d0
[ 1169.392697]  ? io_schedule_timeout+0x140/0x140
[ 1169.392731]  do_recvmmsg+0x24c/0x6d0
[ 1169.392751]  ? ___sys_recvmsg+0x200/0x200
[ 1169.392766]  ? lock_downgrade+0x6d0/0x6d0
[ 1169.392788]  ? ksys_write+0x12d/0x260
[ 1169.392818]  ? wait_for_completion_io+0x270/0x270
[ 1169.392839]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1169.392851]  ? vfs_write+0x354/0xb10
[ 1169.392870]  __x64_sys_recvmmsg+0x20f/0x260
[ 1169.392887]  ? ksys_write+0x1a9/0x260
[ 1169.392914]  ? __do_sys_socketcall+0x600/0x600
[ 1169.392937]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1169.392962]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1169.392989]  do_syscall_64+0x33/0x40
[ 1169.393009]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1169.393020] RIP: 0033:0x7f96c2c53b19
[ 1169.393036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1169.393045] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1169.393113] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1169.393129] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1169.393138] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1169.393147] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1169.393158] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
[ 1169.489635] FAULT_INJECTION: forcing a failure.
[ 1169.489635] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1169.489651] CPU: 1 PID: 7231 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1169.489657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1169.489661] Call Trace:
[ 1169.489680]  dump_stack+0x107/0x167
[ 1169.489693]  should_fail.cold+0x5/0xa
[ 1169.489711]  _copy_from_user+0x2e/0x1b0
[ 1169.489729]  __copy_msghdr_from_user+0x91/0x4b0
[ 1169.489743]  ? __ia32_sys_shutdown+0x80/0x80
[ 1169.489756]  ? __lock_acquire+0x1657/0x5b00
[ 1169.489780]  ___sys_recvmsg+0xd5/0x200
[ 1169.489793]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1169.489811]  ? lock_acquire+0x197/0x470
[ 1169.489822]  ? find_held_lock+0x2c/0x110
[ 1169.489839]  ? __might_fault+0xd3/0x180
[ 1169.489850]  ? lock_downgrade+0x6d0/0x6d0
[ 1169.489865]  ? io_schedule_timeout+0x140/0x140
[ 1169.489887]  do_recvmmsg+0x24c/0x6d0
[ 1169.489903]  ? ___sys_recvmsg+0x200/0x200
[ 1169.489915]  ? lock_downgrade+0x6d0/0x6d0
[ 1169.489932]  ? ksys_write+0x12d/0x260
[ 1169.489955]  ? wait_for_completion_io+0x270/0x270
[ 1169.489969]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1169.489978]  ? vfs_write+0x354/0xb10
[ 1169.489994]  __x64_sys_recvmmsg+0x20f/0x260
[ 1169.490006]  ? ksys_write+0x1a9/0x260
[ 1169.490018]  ? __do_sys_socketcall+0x600/0x600
[ 1169.490032]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1169.490044]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1169.490057]  do_syscall_64+0x33/0x40
[ 1169.490068]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1169.490076] RIP: 0033:0x7f06d872db19
[ 1169.490087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1169.490093] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1169.490106] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1169.490113] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1169.490120] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1169.490126] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1169.490133] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1169.533019] FAULT_INJECTION: forcing a failure.
[ 1169.533019] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1169.533038] CPU: 0 PID: 7234 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1169.533047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1169.533052] Call Trace:
[ 1169.533074]  dump_stack+0x107/0x167
[ 1169.533091]  should_fail.cold+0x5/0xa
[ 1169.533114]  _copy_from_user+0x2e/0x1b0
[ 1169.533136]  __copy_msghdr_from_user+0x91/0x4b0
03:33:36 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = getpgrp(0xffffffffffffffff)
r2 = syz_open_procfs(r1, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
dup3(r2, r0, 0x0)

[ 1169.533153]  ? __ia32_sys_shutdown+0x80/0x80
[ 1169.533176]  ? __lock_acquire+0x1657/0x5b00
[ 1169.588740] FAULT_INJECTION: forcing a failure.
[ 1169.588740] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1169.589237]  ___sys_recvmsg+0xd5/0x200
[ 1169.725477]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1169.725490]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1169.725500]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1169.725509]  ? trace_hardirqs_on+0x5b/0x180
[ 1169.725522]  ? lock_acquire+0x197/0x470
[ 1169.725532]  ? find_held_lock+0x2c/0x110
[ 1169.725546]  ? __might_fault+0xd3/0x180
[ 1169.725556]  ? lock_downgrade+0x6d0/0x6d0
[ 1169.725569]  ? io_schedule_timeout+0x140/0x140
[ 1169.725588]  do_recvmmsg+0x24c/0x6d0
[ 1169.725608]  ? ___sys_recvmsg+0x200/0x200
[ 1169.725620]  ? lock_downgrade+0x6d0/0x6d0
[ 1169.725637]  ? ksys_write+0x12d/0x260
[ 1169.725655]  ? wait_for_completion_io+0x270/0x270
[ 1169.725667]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1169.725676]  ? vfs_write+0x354/0xb10
[ 1169.725689]  __x64_sys_recvmmsg+0x20f/0x260
[ 1169.725699]  ? ksys_write+0x1a9/0x260
[ 1169.725709]  ? __do_sys_socketcall+0x600/0x600
[ 1169.725720]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1169.725730]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1169.725741]  do_syscall_64+0x33/0x40
[ 1169.725751]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1169.725758] RIP: 0033:0x7f96c2c53b19
[ 1169.725769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
03:33:36 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
syz_io_uring_setup(0x6187, &(0x7f0000000000)={0x0, 0x7f19, 0x1, 0x1, 0x203, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240))
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000340)={0x0, 0x2b, &(0x7f0000000280)="42cf1794cb9d53cb766f50b3857326db7eaa3791d13f69b4ed2f27e8e07e10e5340ca76c3bb95cc9b0eebf"})
r4 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x33, 0x1, 0x4, 0x1f, 0x0, 0x101, 0x22400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x81, 0x4, @perf_bp={&(0x7f0000000440), 0x9}, 0x80, 0x72a, 0x3, 0x9, 0x1ff, 0x5, 0xfff8, 0x0, 0x80, 0x0, 0x9}, r4, 0x0, 0xffffffffffffffff, 0x2)
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={<r5=>0x0}, &(0x7f00000003c0)=0xc)
syz_open_procfs(r5, &(0x7f0000000400)='net/ip6_mr_vif\x00')
pread64(r2, &(0x7f00000000c0)=""/198, 0xc6, 0x5)

[ 1169.725774] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1169.725785] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1169.725791] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1169.725796] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1169.725802] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1169.725807] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
[ 1169.725835] CPU: 1 PID: 7236 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1169.725843] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1169.725847] Call Trace:
[ 1169.725865]  dump_stack+0x107/0x167
[ 1169.725879]  should_fail.cold+0x5/0xa
[ 1169.725897]  _copy_from_user+0x2e/0x1b0
[ 1169.725914]  __copy_msghdr_from_user+0x91/0x4b0
[ 1169.725928]  ? __ia32_sys_shutdown+0x80/0x80
[ 1169.725941]  ? __lock_acquire+0x1657/0x5b00
[ 1169.725966]  ___sys_recvmsg+0xd5/0x200
[ 1169.725980]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1169.725999]  ? lock_acquire+0x197/0x470
[ 1169.726010]  ? find_held_lock+0x2c/0x110
[ 1169.726027]  ? __might_fault+0xd3/0x180
[ 1169.726039]  ? lock_downgrade+0x6d0/0x6d0
[ 1169.726065]  do_recvmmsg+0x24c/0x6d0
[ 1169.726082]  ? ___sys_recvmsg+0x200/0x200
[ 1169.726094]  ? lock_downgrade+0x6d0/0x6d0
[ 1169.726112]  ? ksys_write+0x12d/0x260
[ 1169.726135]  ? wait_for_completion_io+0x270/0x270
[ 1169.726150]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1169.726161]  ? vfs_write+0x354/0xb10
[ 1169.726177]  __x64_sys_recvmmsg+0x20f/0x260
[ 1169.726188]  ? ksys_write+0x1a9/0x260
[ 1169.726201]  ? __do_sys_socketcall+0x600/0x600
[ 1169.726216]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1169.726227]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1169.726241]  do_syscall_64+0x33/0x40
[ 1169.726253]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1169.726261] RIP: 0033:0x7f06d872db19
[ 1169.726272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1169.726278] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1169.726292] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1169.726299] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1169.726305] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1169.726312] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1169.726319] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
03:33:50 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 21)

03:33:50 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x18000000)

03:33:50 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, <r1=>0x0})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x524, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffff}, r1, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000040))
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000080)={0x1, 0x7, 0x81})

03:33:50 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 12)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:33:50 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1183.726626] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
03:33:50 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xb0d2, 0x10, 0x3, 0x344}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)={0x0, <r3=>0x0})
write(r0, &(0x7f0000000080)="60bb780caa5df762baa7c623aab0251806e8134995f09978f37a33b26c0a3a96d6a8dd22e3a4cd6d267edd199d65cf35", 0x30)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(r3, &(0x7f0000000240)='net/fib_trie\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r4, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r5 = inotify_init()
fcntl$dupfd(r4, 0x0, r5)
r6 = syz_open_procfs(r3, &(0x7f00000001c0)='net/sockstat\x00')
syz_io_uring_setup(0x61b, &(0x7f0000000000)={0x0, 0x5dce, 0x0, 0x2, 0x160, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=<r7=>0x0)
syz_io_uring_submit(r1, r7, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r6, &(0x7f0000000140)={0x8}, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x97a)
pread64(r6, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:33:50 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0) (fail_nth: 1)

03:33:50 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1183.775101] FAULT_INJECTION: forcing a failure.
[ 1183.775101] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1183.776630] CPU: 0 PID: 7261 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1183.777326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1183.778186] Call Trace:
[ 1183.778473]  dump_stack+0x107/0x167
[ 1183.778866]  should_fail.cold+0x5/0xa
[ 1183.779275]  _copy_from_user+0x2e/0x1b0
[ 1183.779707]  __copy_msghdr_from_user+0x91/0x4b0
[ 1183.780209]  ? __ia32_sys_shutdown+0x80/0x80
[ 1183.780673]  ? __lock_acquire+0x1657/0x5b00
[ 1183.781137]  ___sys_recvmsg+0xd5/0x200
[ 1183.781539]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1183.782689]  ? _raw_spin_unlock_irq+0x27/0x30
[ 1183.783176]  ? lock_acquire+0x197/0x470
[ 1183.784183]  ? find_held_lock+0x2c/0x110
[ 1183.785240]  ? __might_fault+0xd3/0x180
[ 1183.786244]  ? lock_downgrade+0x6d0/0x6d0
[ 1183.787271]  ? io_schedule_timeout+0x140/0x140
[ 1183.788418]  do_recvmmsg+0x24c/0x6d0
[ 1183.789331]  ? ___sys_recvmsg+0x200/0x200
[ 1183.790358]  ? lock_downgrade+0x6d0/0x6d0
[ 1183.791352]  ? ksys_write+0x12d/0x260
[ 1183.792322]  ? wait_for_completion_io+0x270/0x270
[ 1183.793499]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1183.794674]  ? vfs_write+0x354/0xb10
[ 1183.795577]  __x64_sys_recvmmsg+0x20f/0x260
[ 1183.796653]  ? ksys_write+0x1a9/0x260
[ 1183.797616]  ? __do_sys_socketcall+0x600/0x600
[ 1183.798740]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1183.800011]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1183.801273]  do_syscall_64+0x33/0x40
[ 1183.802198]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1183.803461] RIP: 0033:0x7f06d872db19
[ 1183.804387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1183.808829] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1183.810711] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1183.812425] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1183.814169] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1183.815800] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1183.817366] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
03:33:50 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1183.834670] FAULT_INJECTION: forcing a failure.
[ 1183.834670] name failslab, interval 1, probability 0, space 0, times 0
[ 1183.837810] CPU: 0 PID: 7263 Comm: syz-executor.1 Not tainted 5.10.226 #1
[ 1183.839485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1183.841507] Call Trace:
[ 1183.842194]  dump_stack+0x107/0x167
[ 1183.843011]  should_fail.cold+0x5/0xa
[ 1183.843857]  ? getname_flags.part.0+0x50/0x4f0
[ 1183.844873]  should_failslab+0x5/0x20
[ 1183.845713]  kmem_cache_alloc+0x5b/0x310
[ 1183.846618]  getname_flags.part.0+0x50/0x4f0
[ 1183.847588]  getname+0x8e/0xd0
[ 1183.848306]  do_sys_openat2+0xf9/0x4d0
[ 1183.849165]  ? build_open_flags+0x6f0/0x6f0
[ 1183.850115]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1183.851175]  ? wait_for_completion_io+0x270/0x270
[ 1183.852259]  __x64_sys_openat+0x13f/0x1f0
[ 1183.853174]  ? __ia32_sys_open+0x1c0/0x1c0
[ 1183.854104]  ? ksys_write+0x1a9/0x260
[ 1183.854956]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1183.856112]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1183.857252]  do_syscall_64+0x33/0x40
[ 1183.858071]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1183.859190] RIP: 0033:0x7fec5bd1db19
[ 1183.860016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1183.864029] RSP: 002b:00007fec59293188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1183.865693] RAX: ffffffffffffffda RBX: 00007fec5be30f60 RCX: 00007fec5bd1db19
[ 1183.867244] RDX: 0000000000020002 RSI: 0000000020000880 RDI: 0000000000000004
[ 1183.868807] RBP: 00007fec592931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1183.870357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1183.871917] R13: 00007fffba4da04f R14: 00007fec59293300 R15: 0000000000022000
[ 1183.878824] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1183.891182] FAULT_INJECTION: forcing a failure.
[ 1183.891182] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1183.894292] CPU: 0 PID: 7271 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1183.896005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1183.898087] Call Trace:
[ 1183.898752]  dump_stack+0x107/0x167
[ 1183.899672]  should_fail.cold+0x5/0xa
[ 1183.900646]  _copy_from_user+0x2e/0x1b0
[ 1183.901627]  __copy_msghdr_from_user+0x91/0x4b0
[ 1183.902792]  ? __ia32_sys_shutdown+0x80/0x80
[ 1183.903903]  ? __lock_acquire+0x1657/0x5b00
[ 1183.905019]  ___sys_recvmsg+0xd5/0x200
[ 1183.906003]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1183.907222]  ? __fget_files+0x2cf/0x520
[ 1183.908212]  ? lock_acquire+0x197/0x470
[ 1183.909193]  ? find_held_lock+0x2c/0x110
[ 1183.910205]  ? __might_fault+0xd3/0x180
[ 1183.911202]  ? lock_downgrade+0x6d0/0x6d0
[ 1183.912327]  do_recvmmsg+0x24c/0x6d0
[ 1183.913232]  ? ___sys_recvmsg+0x200/0x200
[ 1183.914289]  ? lock_downgrade+0x6d0/0x6d0
[ 1183.915292]  ? ksys_write+0x12d/0x260
[ 1183.916282]  ? wait_for_completion_io+0x270/0x270
[ 1183.917473]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1183.918624]  ? vfs_write+0x354/0xb10
[ 1183.919537]  __x64_sys_recvmmsg+0x20f/0x260
[ 1183.920619]  ? ksys_write+0x1a9/0x260
[ 1183.921592]  ? __do_sys_socketcall+0x600/0x600
[ 1183.922731]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1183.924037]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1183.925313]  do_syscall_64+0x33/0x40
[ 1183.926194]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1183.927481] RIP: 0033:0x7f96c2c53b19
[ 1183.928419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1183.932940] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1183.934785] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1183.936519] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1183.938214] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1183.939989] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1183.941672] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:33:50 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 13)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:33:50 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
fcntl$setflags(r0, 0x2, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d9936dd0", @ANYRES16=0x0, @ANYBLOB="080027bd7000fddbdf253500000014005500f45359998f3e71697e708bfc91b00aa61400550018ef934005169dd0d7a0eca9a301ca8f08001f01eb000000"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x4801)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:33:50 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000000e10daccee4a37d17957b8595741d5c4b9ccff2749e4a6f2454a040fdca1204d2c42beb4cae2a57ab274281a62556a5613bdadf92a106c9b05d7db174e31cdd1b9d38c10da5ec3cd3593d00d074c753b294bb721d", @ANYRES16=r2, @ANYBLOB="02002bbd7000fddbdf252100000004001f0070687932000000000c00050000030000000000000c0005000202aaaaaaaaaaaa"], 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x821)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0)

[ 1184.061718] FAULT_INJECTION: forcing a failure.
[ 1184.061718] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1184.064897] CPU: 0 PID: 7279 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1184.066575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1184.068661] Call Trace:
[ 1184.068962]  dump_stack+0x107/0x167
[ 1184.069355]  should_fail.cold+0x5/0xa
[ 1184.069766]  _copy_from_user+0x2e/0x1b0
[ 1184.070190]  __copy_msghdr_from_user+0x91/0x4b0
[ 1184.070677]  ? __ia32_sys_shutdown+0x80/0x80
[ 1184.071155]  ? __lock_acquire+0x1657/0x5b00
[ 1184.071641]  ___sys_recvmsg+0xd5/0x200
[ 1184.072078]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1184.072603]  ? __fget_files+0x2cf/0x520
[ 1184.073050]  ? lock_acquire+0x197/0x470
[ 1184.073484]  ? find_held_lock+0x2c/0x110
[ 1184.073920]  ? __might_fault+0xd3/0x180
[ 1184.074339]  ? lock_downgrade+0x6d0/0x6d0
[ 1184.074817]  do_recvmmsg+0x24c/0x6d0
[ 1184.075228]  ? ___sys_recvmsg+0x200/0x200
[ 1184.075686]  ? lock_downgrade+0x6d0/0x6d0
[ 1184.076144]  ? ksys_write+0x12d/0x260
[ 1184.076571]  ? wait_for_completion_io+0x270/0x270
[ 1184.077104]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1184.077604]  ? vfs_write+0x354/0xb10
[ 1184.078016]  __x64_sys_recvmmsg+0x20f/0x260
[ 1184.078466]  ? ksys_write+0x1a9/0x260
[ 1184.078876]  ? __do_sys_socketcall+0x600/0x600
[ 1184.079385]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1184.079951]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1184.080519]  do_syscall_64+0x33/0x40
[ 1184.080924]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1184.081463] RIP: 0033:0x7f06d872db19
[ 1184.081868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1184.083760] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1184.084632] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1184.085388] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1184.086127] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1184.086863] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1184.087622] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
03:33:51 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0) (fail_nth: 2)

03:33:51 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 22)

03:33:51 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x53d4, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
dup2(r2, r3)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:33:51 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:33:51 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f0000000000)={0x0, 0xecb7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1184.232815] FAULT_INJECTION: forcing a failure.
[ 1184.232815] name failslab, interval 1, probability 0, space 0, times 0
[ 1184.234828] CPU: 1 PID: 7291 Comm: syz-executor.1 Not tainted 5.10.226 #1
[ 1184.235481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1184.235652] FAULT_INJECTION: forcing a failure.
[ 1184.235652] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1184.236540] Call Trace:
[ 1184.236562]  dump_stack+0x107/0x167
[ 1184.236577]  should_fail.cold+0x5/0xa
[ 1184.236596]  ? create_object.isra.0+0x3a/0xa20
[ 1184.239828]  should_failslab+0x5/0x20
[ 1184.240166]  kmem_cache_alloc+0x5b/0x310
[ 1184.240532]  create_object.isra.0+0x3a/0xa20
[ 1184.241155]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1184.241613]  kmem_cache_alloc+0x159/0x310
[ 1184.242322]  getname_flags.part.0+0x50/0x4f0
[ 1184.243292]  getname+0x8e/0xd0
[ 1184.244011]  do_sys_openat2+0xf9/0x4d0
[ 1184.244351]  ? build_open_flags+0x6f0/0x6f0
[ 1184.244744]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1184.245230]  ? wait_for_completion_io+0x270/0x270
[ 1184.245717]  __x64_sys_openat+0x13f/0x1f0
[ 1184.246644]  ? __ia32_sys_open+0x1c0/0x1c0
[ 1184.247546]  ? ksys_write+0x1a9/0x260
[ 1184.247935]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1184.248449]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1184.249071]  do_syscall_64+0x33/0x40
[ 1184.249899]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1184.251005] RIP: 0033:0x7fec5bd1db19
[ 1184.251345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1184.254431] RSP: 002b:00007fec59293188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1184.256092] RAX: ffffffffffffffda RBX: 00007fec5be30f60 RCX: 00007fec5bd1db19
[ 1184.256754] RDX: 0000000000020002 RSI: 0000000020000880 RDI: 0000000000000004
[ 1184.257461] RBP: 00007fec592931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1184.258128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1184.259707] R13: 00007fffba4da04f R14: 00007fec59293300 R15: 0000000000022000
[ 1184.260472] CPU: 0 PID: 7288 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1184.261171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1184.261975] Call Trace:
[ 1184.262259]  dump_stack+0x107/0x167
[ 1184.262613]  should_fail.cold+0x5/0xa
[ 1184.263012]  _copy_from_user+0x2e/0x1b0
[ 1184.263454]  __copy_msghdr_from_user+0x91/0x4b0
[ 1184.263908]  ? __ia32_sys_shutdown+0x80/0x80
[ 1184.264346]  ? __lock_acquire+0x1657/0x5b00
[ 1184.264782]  ___sys_recvmsg+0xd5/0x200
[ 1184.265166]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1184.265638]  ? lock_acquire+0x197/0x470
[ 1184.266043]  ? find_held_lock+0x2c/0x110
[ 1184.266479]  ? __might_fault+0xd3/0x180
[ 1184.266869]  ? lock_downgrade+0x6d0/0x6d0
[ 1184.267289]  do_recvmmsg+0x24c/0x6d0
[ 1184.267660]  ? ___sys_recvmsg+0x200/0x200
[ 1184.268108]  ? lock_downgrade+0x6d0/0x6d0
[ 1184.268513]  ? ksys_write+0x12d/0x260
[ 1184.268897]  ? wait_for_completion_io+0x270/0x270
[ 1184.269352]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1184.269796]  ? vfs_write+0x354/0xb10
[ 1184.270171]  __x64_sys_recvmmsg+0x20f/0x260
[ 1184.270588]  ? ksys_write+0x1a9/0x260
[ 1184.270952]  ? __do_sys_socketcall+0x600/0x600
[ 1184.271391]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1184.271879]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1184.272383]  do_syscall_64+0x33/0x40
[ 1184.272747]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1184.273233] RIP: 0033:0x7f96c2c53b19
[ 1184.273592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1184.275323] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1184.276060] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1184.276733] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1184.277413] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1184.278088] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1184.278761] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
[ 1184.311211] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1198.199343] FAULT_INJECTION: forcing a failure.
[ 1198.199343] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1198.202251] CPU: 0 PID: 7318 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1198.203719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1198.205434] Call Trace:
[ 1198.206014]  dump_stack+0x107/0x167
[ 1198.206808]  should_fail.cold+0x5/0xa
[ 1198.207646]  _copy_from_user+0x2e/0x1b0
[ 1198.208540]  __copy_msghdr_from_user+0x91/0x4b0
[ 1198.209563]  ? __ia32_sys_shutdown+0x80/0x80
[ 1198.210525]  ? __lock_acquire+0x1657/0x5b00
[ 1198.211478]  ___sys_recvmsg+0xd5/0x200
[ 1198.212339]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1198.213415]  ? __fget_files+0x2cf/0x520
[ 1198.214285]  ? lock_acquire+0x197/0x470
[ 1198.215149]  ? find_held_lock+0x2c/0x110
[ 1198.216040]  ? __might_fault+0xd3/0x180
[ 1198.217133]  ? lock_downgrade+0x6d0/0x6d0
[ 1198.218113]  do_recvmmsg+0x24c/0x6d0
[ 1198.218222] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1198.218933]  ? ___sys_recvmsg+0x200/0x200
[ 1198.218947]  ? lock_downgrade+0x6d0/0x6d0
[ 1198.218965]  ? ksys_write+0x12d/0x260
[ 1198.218989]  ? wait_for_completion_io+0x270/0x270
[ 1198.219009]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1198.224603]  ? vfs_write+0x354/0xb10
[ 1198.224619]  __x64_sys_recvmmsg+0x20f/0x260
[ 1198.224632]  ? ksys_write+0x1a9/0x260
[ 1198.224644]  ? __do_sys_socketcall+0x600/0x600
[ 1198.224659]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1198.224677]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1198.230092]  do_syscall_64+0x33/0x40
[ 1198.230911]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1198.232037] RIP: 0033:0x7f06d872db19
[ 1198.232899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1198.237260] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1198.239044] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1198.240731] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1198.242411] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1198.244091] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1198.245789] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
03:34:05 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0) (fail_nth: 3)

03:34:05 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0xf6ffffff)

03:34:05 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:34:05 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="0300fb0000000000b303d500000018000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000002e2f66696c65300091e73778dc39db7521b1696787a53f02be5c433bcb243506fdddd50bdfb929f93dff8193450ecb2dafc14a6d0f5a7fdb833887d5348373b34a496073ec3217f5e0d4119e8ef0e7130ad6cd054ca4ae5bf42c877ac266e0a99028d97a924025ab14acf8e41a5ecf831155805f9782de4ca73de120d4c50c4f581b4cc31448670814429096ac480e2841213c795d99fe9ccb7ac8f2e95f0e7d6b794bcb2d922167069f1c5351ab61b141f4508680a87d336c29fa5caa1f1a6e6152812a10f73a3700229fa0398cb8436e82f67ef2d73a84ee1967f3"])
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"5ece82cbab9beb71b9c26d7fbdeab22b", 0x0, <r3=>0x0, {0x91, 0x3f}, {0x8001, 0xffffffff}, 0xc07c, [0x4401, 0x8, 0xfffffffffffffffb, 0x5, 0x1, 0x1, 0x5, 0xfffffffffffffff9, 0x5ac4ddc6, 0x8000, 0x1ff, 0x6, 0x2, 0x80, 0x100000001, 0x45]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000002100)={{r2}, r3, 0x0, @unused=[0x20, 0x5, 0x5, 0x8], @subvolid=0x6})
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
read(r1, &(0x7f00000000c0)=""/152, 0x98)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x100)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000007, 0x4010, r4, 0x242c7000)
pread64(r5, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r6, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
dup2(r0, r6)

03:34:05 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = syz_io_uring_setup(0x23f6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r4}}, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r5}}, 0x6a7f)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x10010, r1, 0xb29d3000)

03:34:05 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 23)

03:34:05 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:34:05 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 14)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

[ 1198.251297] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1198.252165] FAULT_INJECTION: forcing a failure.
[ 1198.252165] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1198.254560] CPU: 1 PID: 7311 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1198.255221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1198.256026] Call Trace:
[ 1198.260315]  dump_stack+0x107/0x167
[ 1198.260671]  should_fail.cold+0x5/0xa
[ 1198.261050]  _copy_from_user+0x2e/0x1b0
[ 1198.261454]  __copy_msghdr_from_user+0x91/0x4b0
[ 1198.261918]  ? __ia32_sys_shutdown+0x80/0x80
[ 1198.262346]  ? __lock_acquire+0x1657/0x5b00
[ 1198.262772]  ___sys_recvmsg+0xd5/0x200
[ 1198.263161]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1198.263634]  ? __fget_files+0x2cf/0x520
[ 1198.264025]  ? lock_acquire+0x197/0x470
[ 1198.264427]  ? find_held_lock+0x2c/0x110
[ 1198.264837]  ? __might_fault+0xd3/0x180
[ 1198.265232]  ? lock_downgrade+0x6d0/0x6d0
[ 1198.265640]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1198.272475]  do_recvmmsg+0x24c/0x6d0
[ 1198.272847]  ? ___sys_recvmsg+0x200/0x200
[ 1198.273254]  ? lock_downgrade+0x6d0/0x6d0
[ 1198.273665]  ? ksys_write+0x12d/0x260
[ 1198.274044]  ? wait_for_completion_io+0x270/0x270
[ 1198.274523]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1198.274983]  ? vfs_write+0x354/0xb10
[ 1198.275356]  __x64_sys_recvmmsg+0x20f/0x260
[ 1198.275766]  ? ksys_write+0x1a9/0x260
[ 1198.276141]  ? __do_sys_socketcall+0x600/0x600
[ 1198.276589]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1198.277106]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1198.277610]  do_syscall_64+0x33/0x40
[ 1198.277970]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1198.279110] RIP: 0033:0x7f96c2c53b19
[ 1198.279501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1198.281325] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1198.282085] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1198.282782] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1198.283472] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1198.284218] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1198.284918] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
[ 1198.286241] audit: type=1400 audit(1728963245.234:52): avc:  denied  { read } for  pid=7314 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 1198.291243] FAULT_INJECTION: forcing a failure.
[ 1198.291243] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1198.296624] CPU: 1 PID: 7309 Comm: syz-executor.1 Not tainted 5.10.226 #1
[ 1198.297309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1198.298146] Call Trace:
[ 1198.298431]  dump_stack+0x107/0x167
[ 1198.298811]  should_fail.cold+0x5/0xa
[ 1198.299210]  strncpy_from_user+0x34/0x470
[ 1198.299641]  getname_flags.part.0+0x95/0x4f0
[ 1198.300102]  getname+0x8e/0xd0
[ 1198.300459]  do_sys_openat2+0xf9/0x4d0
[ 1198.300867]  ? build_open_flags+0x6f0/0x6f0
[ 1198.301297]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1198.301779]  ? wait_for_completion_io+0x270/0x270
[ 1198.308525]  __x64_sys_openat+0x13f/0x1f0
[ 1198.308964]  ? __ia32_sys_open+0x1c0/0x1c0
[ 1198.309397]  ? ksys_write+0x1a9/0x260
[ 1198.309795]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1198.310326]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1198.311508]  do_syscall_64+0x33/0x40
[ 1198.311890]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1198.313082] RIP: 0033:0x7fec5bd1db19
[ 1198.313459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1198.317689] RSP: 002b:00007fec59293188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1198.318459] RAX: ffffffffffffffda RBX: 00007fec5be30f60 RCX: 00007fec5bd1db19
[ 1198.319180] RDX: 0000000000020002 RSI: 0000000020000880 RDI: 0000000000000004
[ 1198.319887] RBP: 00007fec592931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1198.320612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1198.321323] R13: 00007fffba4da04f R14: 00007fec59293300 R15: 0000000000022000
03:34:05 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 15)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:34:05 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, <r1=>0x0})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/route\x00')
r3 = epoll_create(0x7fffffff)
flock(r3, 0x0)
copy_file_range(r2, &(0x7f0000000000)=0xfff, r2, &(0x7f0000000040)=0x1bbc, 0x61dcc6aa, 0x0)
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0xb49a}}, './file0\x00'})

[ 1198.355982] FAULT_INJECTION: forcing a failure.
[ 1198.355982] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1198.357605] CPU: 0 PID: 7329 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1198.359244] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1198.361209] Call Trace:
[ 1198.361845]  dump_stack+0x107/0x167
[ 1198.362703]  should_fail.cold+0x5/0xa
[ 1198.363616]  _copy_from_user+0x2e/0x1b0
[ 1198.364571]  __copy_msghdr_from_user+0x91/0x4b0
[ 1198.365349]  ? __ia32_sys_shutdown+0x80/0x80
[ 1198.366395]  ? __lock_acquire+0x1657/0x5b00
[ 1198.367426]  ___sys_recvmsg+0xd5/0x200
[ 1198.368352]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1198.369510]  ? __fget_files+0x2cf/0x520
[ 1198.370453]  ? lock_acquire+0x197/0x470
[ 1198.371381]  ? find_held_lock+0x2c/0x110
[ 1198.372356]  ? __might_fault+0xd3/0x180
[ 1198.373288]  ? lock_downgrade+0x6d0/0x6d0
[ 1198.374272]  do_recvmmsg+0x24c/0x6d0
[ 1198.375156]  ? ___sys_recvmsg+0x200/0x200
[ 1198.376115]  ? lock_downgrade+0x6d0/0x6d0
[ 1198.376627]  ? ksys_write+0x12d/0x260
[ 1198.377537]  ? wait_for_completion_io+0x270/0x270
[ 1198.378111]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1198.379214]  ? vfs_write+0x354/0xb10
[ 1198.380094]  __x64_sys_recvmmsg+0x20f/0x260
[ 1198.381120]  ? ksys_write+0x1a9/0x260
[ 1198.382010]  ? __do_sys_socketcall+0x600/0x600
[ 1198.383095]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1198.384335]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1198.385552]  do_syscall_64+0x33/0x40
[ 1198.386423]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1198.387630] RIP: 0033:0x7f06d872db19
[ 1198.388516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1198.392374] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1198.394177] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1198.395856] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1198.397550] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1198.399216] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1198.400415] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
03:34:05 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0) (fail_nth: 4)

03:34:05 executing program 6:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xffffffffffffff98, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3f}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000495}, 0x2400c094)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1198.455081] FAULT_INJECTION: forcing a failure.
[ 1198.455081] name failslab, interval 1, probability 0, space 0, times 0
[ 1198.457171] CPU: 1 PID: 7334 Comm: syz-executor.1 Not tainted 5.10.226 #1
[ 1198.457842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1198.458676] Call Trace:
[ 1198.458978]  dump_stack+0x107/0x167
[ 1198.459353]  should_fail.cold+0x5/0xa
[ 1198.459751]  ? __alloc_file+0x21/0x320
[ 1198.460153]  should_failslab+0x5/0x20
[ 1198.460542]  kmem_cache_alloc+0x5b/0x310
[ 1198.460954]  __alloc_file+0x21/0x320
[ 1198.461340]  alloc_empty_file+0x6d/0x170
[ 1198.462271]  path_openat+0xe6/0x2770
[ 1198.462647]  ? __lock_acquire+0x1657/0x5b00
[ 1198.463621]  ? path_lookupat+0x860/0x860
[ 1198.464024]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1198.465223]  ? SOFTIRQ_verbose+0x10/0x10
[ 1198.465641]  ? find_held_lock+0x2c/0x110
[ 1198.466560]  do_filp_open+0x190/0x3e0
[ 1198.466936]  ? may_open_dev+0xf0/0xf0
[ 1198.467788]  ? alloc_fd+0x2e7/0x670
[ 1198.468161]  ? lock_downgrade+0x6d0/0x6d0
[ 1198.469092]  ? do_raw_spin_lock+0x121/0x260
[ 1198.470052]  ? rwlock_bug.part.0+0x90/0x90
[ 1198.470987]  ? _raw_spin_unlock+0x1a/0x30
[ 1198.471406]  ? alloc_fd+0x2e7/0x670
[ 1198.471782]  do_sys_openat2+0x171/0x4d0
[ 1198.472674]  ? build_open_flags+0x6f0/0x6f0
[ 1198.473113]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1198.474191]  ? wait_for_completion_io+0x270/0x270
[ 1198.474678]  __x64_sys_openat+0x13f/0x1f0
[ 1198.475599]  ? __ia32_sys_open+0x1c0/0x1c0
[ 1198.476015]  ? ksys_write+0x1a9/0x260
[ 1198.476881]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1198.477404]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1198.478560]  do_syscall_64+0x33/0x40
[ 1198.478921]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1198.479410] RIP: 0033:0x7fec5bd1db19
[ 1198.479773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1198.481538] RSP: 002b:00007fec59293188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1198.482264] RAX: ffffffffffffffda RBX: 00007fec5be30f60 RCX: 00007fec5bd1db19
[ 1198.482946] RDX: 0000000000020002 RSI: 0000000020000880 RDI: 0000000000000004
[ 1198.484485] RBP: 00007fec592931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1198.486075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1198.487432] R13: 00007fffba4da04f R14: 00007fec59293300 R15: 0000000000022000
03:34:05 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 24)

[ 1198.532233] FAULT_INJECTION: forcing a failure.
[ 1198.532233] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1198.533586] CPU: 1 PID: 7338 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1198.535078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1198.536903] Call Trace:
[ 1198.537488]  dump_stack+0x107/0x167
[ 1198.538263]  should_fail.cold+0x5/0xa
[ 1198.538922]  _copy_from_user+0x2e/0x1b0
[ 1198.539355]  __copy_msghdr_from_user+0x91/0x4b0
[ 1198.539757]  ? __ia32_sys_shutdown+0x80/0x80
[ 1198.540258]  ? __lock_acquire+0x1657/0x5b00
[ 1198.541023]  ___sys_recvmsg+0xd5/0x200
[ 1198.541875]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1198.542941]  ? __fget_files+0x2cf/0x520
[ 1198.543811]  ? lock_acquire+0x197/0x470
[ 1198.544694]  ? find_held_lock+0x2c/0x110
[ 1198.545574]  ? __might_fault+0xd3/0x180
[ 1198.546434]  ? lock_downgrade+0x6d0/0x6d0
[ 1198.547341]  do_recvmmsg+0x24c/0x6d0
[ 1198.547845]  ? ___sys_recvmsg+0x200/0x200
[ 1198.548776]  ? lock_downgrade+0x6d0/0x6d0
[ 1198.549658]  ? ksys_write+0x12d/0x260
[ 1198.550379]  ? wait_for_completion_io+0x270/0x270
[ 1198.551253]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1198.552035]  ? vfs_write+0x354/0xb10
[ 1198.552847]  __x64_sys_recvmmsg+0x20f/0x260
[ 1198.553733]  ? ksys_write+0x1a9/0x260
[ 1198.554171]  ? __do_sys_socketcall+0x600/0x600
[ 1198.555222]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1198.556427]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1198.557597]  do_syscall_64+0x33/0x40
[ 1198.558431]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1198.559592] RIP: 0033:0x7f96c2c53b19
[ 1198.560430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1198.564561] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1198.566268] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1198.567865] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1198.569487] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1198.571079] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1198.572697] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:34:20 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0xfeffffff)

03:34:20 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 25)

[ 1213.390913] FAULT_INJECTION: forcing a failure.
[ 1213.390913] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1213.392320] CPU: 0 PID: 7349 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1213.392948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1213.393668] Call Trace:
[ 1213.393904]  dump_stack+0x107/0x167
[ 1213.394216]  should_fail.cold+0x5/0xa
[ 1213.394546]  _copy_from_user+0x2e/0x1b0
[ 1213.394891]  __copy_msghdr_from_user+0x91/0x4b0
[ 1213.395285]  ? __ia32_sys_shutdown+0x80/0x80
[ 1213.395659]  ? __lock_acquire+0x1657/0x5b00
[ 1213.396037]  ___sys_recvmsg+0xd5/0x200
[ 1213.396381]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1213.396803]  ? _raw_spin_unlock_irq+0x27/0x30
[ 1213.397188]  ? lock_acquire+0x197/0x470
[ 1213.397525]  ? find_held_lock+0x2c/0x110
[ 1213.397875]  ? __might_fault+0xd3/0x180
[ 1213.398214]  ? lock_downgrade+0x6d0/0x6d0
[ 1213.398569]  ? io_schedule_timeout+0x140/0x140
[ 1213.398967]  do_recvmmsg+0x24c/0x6d0
[ 1213.399289]  ? ___sys_recvmsg+0x200/0x200
[ 1213.399645]  ? lock_downgrade+0x6d0/0x6d0
[ 1213.400007]  ? ksys_write+0x12d/0x260
[ 1213.400352]  ? wait_for_completion_io+0x270/0x270
[ 1213.400769]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1213.401162]  ? vfs_write+0x354/0xb10
[ 1213.401484]  __x64_sys_recvmmsg+0x20f/0x260
[ 1213.401851]  ? ksys_write+0x1a9/0x260
[ 1213.402176]  ? __do_sys_socketcall+0x600/0x600
[ 1213.402567]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1213.403012]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1213.403454]  do_syscall_64+0x33/0x40
[ 1213.403770]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1213.404203] RIP: 0033:0x7f96c2c53b19
[ 1213.404532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1213.406067] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1213.406709] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1213.407308] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1213.407908] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1213.408521] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1213.409120] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
[ 1213.415101] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
03:34:20 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:34:20 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:34:20 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 16)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:34:20 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0) (fail_nth: 5)

03:34:20 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd, r0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:34:20 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x5}, 0xffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000056b00)={{<r1=>0x0, 0x8, 0x7, 0x9, 0x3, 0x5, 0x6, 0xffff, 0x3, 0x1, 0x0, 0x2, 0x3f, 0x1000, 0x5}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x0, "46dacd8396fe92"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r4}], 0x80, "5fabd34a60e47f"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)={{r5, 0x7b8, 0xffffffffffffff80, 0x7013, 0x9, 0x1, 0x9, 0x2, 0x5, 0x1, 0x7f, 0x80000001, 0xfcbc, 0x2, 0x1f}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1213.473541] FAULT_INJECTION: forcing a failure.
[ 1213.473541] name failslab, interval 1, probability 0, space 0, times 0
[ 1213.474797] CPU: 1 PID: 7363 Comm: syz-executor.1 Not tainted 5.10.226 #1
[ 1213.475367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1213.476060] Call Trace:
[ 1213.476293]  dump_stack+0x107/0x167
[ 1213.476626]  should_fail.cold+0x5/0xa
[ 1213.476950]  ? create_object.isra.0+0x3a/0xa20
[ 1213.477335]  ? create_object.isra.0+0x3a/0xa20
[ 1213.477724]  should_failslab+0x5/0x20
[ 1213.478047]  kmem_cache_alloc+0x5b/0x310
[ 1213.478390]  ? __alloc_file+0x21/0x320
[ 1213.478723]  create_object.isra.0+0x3a/0xa20
[ 1213.479097]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1213.479530]  kmem_cache_alloc+0x159/0x310
[ 1213.479887]  __alloc_file+0x21/0x320
[ 1213.480205]  alloc_empty_file+0x6d/0x170
[ 1213.480582]  path_openat+0xe6/0x2770
[ 1213.480900]  ? __lock_acquire+0x1657/0x5b00
[ 1213.481273]  ? path_lookupat+0x860/0x860
[ 1213.481622]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1213.482064]  ? SOFTIRQ_verbose+0x10/0x10
[ 1213.482406]  ? find_held_lock+0x2c/0x110
[ 1213.482758]  do_filp_open+0x190/0x3e0
[ 1213.483080]  ? may_open_dev+0xf0/0xf0
[ 1213.483407]  ? alloc_fd+0x2e7/0x670
[ 1213.483716]  ? lock_downgrade+0x6d0/0x6d0
[ 1213.484068]  ? do_raw_spin_lock+0x121/0x260
[ 1213.484453]  ? rwlock_bug.part.0+0x90/0x90
[ 1213.484819]  ? _raw_spin_unlock+0x1a/0x30
[ 1213.485168]  ? alloc_fd+0x2e7/0x670
[ 1213.485485]  do_sys_openat2+0x171/0x4d0
[ 1213.485829]  ? build_open_flags+0x6f0/0x6f0
[ 1213.486195]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1213.486606]  ? wait_for_completion_io+0x270/0x270
[ 1213.487019]  __x64_sys_openat+0x13f/0x1f0
[ 1213.487370]  ? __ia32_sys_open+0x1c0/0x1c0
[ 1213.487728]  ? ksys_write+0x1a9/0x260
[ 1213.488056]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1213.488519]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1213.488960]  do_syscall_64+0x33/0x40
[ 1213.489277]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1213.489711] RIP: 0033:0x7fec5bd1db19
[ 1213.489954] FAULT_INJECTION: forcing a failure.
[ 1213.489954] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1213.490026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1213.490033] RSP: 002b:00007fec59293188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1213.493171] RAX: ffffffffffffffda RBX: 00007fec5be30f60 RCX: 00007fec5bd1db19
[ 1213.493768] RDX: 0000000000020002 RSI: 0000000020000880 RDI: 0000000000000004
[ 1213.494363] RBP: 00007fec592931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1213.494963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1213.495560] R13: 00007fffba4da04f R14: 00007fec59293300 R15: 0000000000022000
[ 1213.496174] CPU: 0 PID: 7358 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1213.496779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1213.497482] Call Trace:
[ 1213.497718]  dump_stack+0x107/0x167
[ 1213.498030]  should_fail.cold+0x5/0xa
[ 1213.498364]  _copy_from_user+0x2e/0x1b0
[ 1213.498711]  __copy_msghdr_from_user+0x91/0x4b0
[ 1213.499109]  ? __ia32_sys_shutdown+0x80/0x80
[ 1213.499485]  ? __lock_acquire+0x1657/0x5b00
[ 1213.499866]  ___sys_recvmsg+0xd5/0x200
[ 1213.500201]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1213.500636]  ? __fget_files+0x2cf/0x520
[ 1213.500982]  ? lock_acquire+0x197/0x470
[ 1213.501323]  ? find_held_lock+0x2c/0x110
[ 1213.501675]  ? __might_fault+0xd3/0x180
[ 1213.502015]  ? lock_downgrade+0x6d0/0x6d0
[ 1213.502383]  do_recvmmsg+0x24c/0x6d0
[ 1213.502708]  ? ___sys_recvmsg+0x200/0x200
[ 1213.503062]  ? lock_downgrade+0x6d0/0x6d0
[ 1213.503215] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1213.503420]  ? ksys_write+0x12d/0x260
[ 1213.503447]  ? wait_for_completion_io+0x270/0x270
[ 1213.504889]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1213.505285]  ? vfs_write+0x354/0xb10
[ 1213.505610]  __x64_sys_recvmmsg+0x20f/0x260
[ 1213.505979]  ? ksys_write+0x1a9/0x260
[ 1213.506305]  ? __do_sys_socketcall+0x600/0x600
[ 1213.506697]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1213.507142]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1213.507583]  do_syscall_64+0x33/0x40
[ 1213.507903]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1213.508346] RIP: 0033:0x7f06d872db19
[ 1213.508670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1213.510217] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1213.510872] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1213.510879] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1213.510885] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1213.510891] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1213.510898] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
03:34:20 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 26)

03:34:20 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0) (fail_nth: 6)

[ 1213.588113] FAULT_INJECTION: forcing a failure.
[ 1213.588113] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1213.589625] CPU: 0 PID: 7372 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1213.590203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1213.590900] Call Trace:
[ 1213.591132]  dump_stack+0x107/0x167
[ 1213.591446]  should_fail.cold+0x5/0xa
[ 1213.591780]  __alloc_pages_nodemask+0x182/0x600
[ 1213.592177]  ? lock_chain_count+0x20/0x20
[ 1213.592553]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 1213.593081]  alloc_pages_vma+0xbb/0x410
[ 1213.593424]  wp_page_copy+0xee7/0x1f00
[ 1213.593765]  ? print_bad_pte+0x5a0/0x5a0
[ 1213.594110]  ? lock_downgrade+0x6d0/0x6d0
[ 1213.594462]  ? vm_normal_page+0x162/0x2e0
[ 1213.594819]  ? count_memcg_event_mm.part.0+0x10f/0x2f0
[ 1213.595272]  do_wp_page+0x27b/0x1390
[ 1213.595596]  handle_mm_fault+0x1cc7/0x3500
03:34:20 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r2 = signalfd4(r0, &(0x7f0000000000)={[0x80000001]}, 0x8, 0x100000)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x3f}}, './file0\x00'})
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r4, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r6 = syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x6, &(0x7f0000000680)=[{&(0x7f0000000180)="8dd42aef08077499915e4d03b70b6d1394faad38d9898ada1b93c1df1c62bbcd09021c993290e0871e84ba6342854d95f298d066bf75036e205c6945f084f7f228640a9c3528dfe0a551a55ee55d63a0ef393c76ca7c638317e76b4d95e0c7830393590841fce9b4e63cb3b86737d3e50df7500d52c7878b986bfde66c3c845eb5e308b71354a51e7247cabe228c589498ccf4cd76c1f8ef40d7dac4ffb96bdf1b4f762278c0aad058c632f3c8de92ce7116ab6ec126834839", 0xb9, 0x800}, {&(0x7f0000000240)="056e7b285ccedbece9676945be84e55eba839db54039acb82a957f723334cd2fbc2aee5d0d522418a6e5337708e6ff586a5e215742f5040c8825a507d744927aa4a1991a78cea0e581f468de798b501f0957dcd813ecf78de12c560fa2e27d59ecb9b696d2a3e7706067ae4d30b5cacb7fe0e420c5bc6ff642caa970a8b6f6b83a33750e0bce4dadaa4e1b4ab0259baaefde3d", 0x93, 0x6}, {&(0x7f0000000300)="335cb5b5f85857f47e9aee290dbcfc1ae94ce068c147d8bff54dbf2cf07106577f63815666d00f4b9ad656f723a60b5cc2d21c6f3b8701c50beca5e60fb671848a34f3b7805df0d6d96de0bb5d5bfbe2e7c75c67421e8a63e0b3aa3bdf3f25c7680c7b75e82abe16f07a709dc20fde552afadbdc6e84df3777590a9fb5b3d0505c96af334ac4e33faed6d1b1c8a069b6cd25418ab88f73057a7c26191974c2a3cddea4f569782d5018a39fc495dea3b841f873255a7941dce89b593ec8dfcbdd71ed497b7539d177a9501660487601f7712c4436be419eb0061ccc55d4", 0xdd, 0x28}, {&(0x7f0000000400)="56465383428c332da9e628db8df4211c0111e7b164676fdfaf4adbf8043efac69af7e6b26949cb08d570e8a0704ab0a690317d09750abcce9c197da519ea6adee10a4fd6d5ddb0aad549ddcdf873ef3636cfc09e4477548cebfbe1b9c544d3462437eeebcc4a37b51556e2edd5e3f0bdd3ba523df1f7a3c9a890c3ae4a5ffb9c26cc5fca67917792f88cff3bf2896d393811de77050808c0f64a91af5891c0773bf28b1d777ce67f72f2ddb42b", 0xad, 0x4}, {&(0x7f00000004c0)="c61189a365697038055dda2fb2ecc6254c7fe04c678b815fac160c14e6ef769cecd951288d4f21de46dbb95fe8bd054569342ab146342330712fd930bd6f2cea8ac319730c816aa46111667b6c8d0d136ff16e7a300f433a6e923b120c789e96794798bc534eeeff1f1f6fc6bd9a2b5f80054df1d417285484545e031d77d0fa9e61d7ac352b808a83eda49d5f47c74fad5c7b1d354a66ad5ae4b5eabfc52b159344d4f2757eb9", 0xa7, 0x7b}, {&(0x7f0000000580)="6d9224feda074592df61efc3246207a658871cf09248b397a3ce3b48b152544167feb4a0e391dca3170ca6d35b1c1a1ff658037ee977ef809158597c84d3e8356e28af131db91dae1e9418c23c46df300387335804fd27d16baba5ef156bc7e162236c84854d31cca0477c6592939f71602bbf0513d097fdd49441cb2bd669e739afe82f7eb849fcbbb45f98965f160fe41fe8fa02a2cbd263bcf3bd706c45fe9b52648329d9a7ac2f19a1d980e60a342c8865311efeede830d70b6962241c3d5a0e253b74954761257999b0", 0xcc}], 0x102040, &(0x7f0000000740)={[{@dioread_lock}, {@jqfmt_vfsold}, {@abort}, {@noauto_da_alloc}, {@oldalloc}, {@nojournal_checksum}], [{@dont_measure}]})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x2)
fcntl$dupfd(r6, 0x406, r7)
pread64(r5, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r8, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000000c0)=[r3, r4, r5, r8], 0x4)

[ 1213.595961]  ? ip6_datagram_recv_common_ctl+0x3f0/0x3f0
[ 1213.596616]  ? ip6_datagram_recv_common_ctl+0x2c2/0x3f0
[ 1213.597071]  ? __skb_datagram_iter+0x1aa/0x880
[ 1213.597456]  ? __pmd_alloc+0x5e0/0x5e0
[ 1213.597791]  ? vmacache_find+0x55/0x2a0
[ 1213.598136]  do_user_addr_fault+0x56e/0xc60
[ 1213.598508]  exc_page_fault+0xa2/0x1a0
[ 1213.598840]  asm_exc_page_fault+0x1e/0x30
[ 1213.599194] RIP: 0010:__put_user_nocheck_4+0x3/0x11
[ 1213.599614] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca e9 81 32 1d 02 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca e9 62 32 1d 02 66 90 48 bb f9 ef ff ff ff 7f
[ 1213.601165] RSP: 0018:ffff8880485d79c8 EFLAGS: 00050206
[ 1213.601617] RAX: 0000000000000028 RBX: ffffffff831100d0 RCX: 0000000020002030
[ 1213.602214] RDX: 1ffff110090bafc3 RSI: ffffffff83105c9a RDI: 0000000000000005
[ 1213.602813] RBP: ffff8880485d7dc8 R08: 0000000000000001 R09: ffff88800e73021f
[ 1213.603409] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000020002030
[ 1213.604006] R13: 0000000020002000 R14: 0000000000000062 R15: 0000000000000004
[ 1213.604628]  ? sock_common_getsockopt+0xb0/0xb0
[ 1213.605024]  ? ____sys_recvmsg+0x2aa/0x590
[ 1213.605386]  ____sys_recvmsg+0x2dd/0x590
[ 1213.605737]  ? kernel_recvmsg+0x80/0x80
[ 1213.606078]  ? __import_iovec+0x458/0x590
[ 1213.606440]  ? import_iovec+0x83/0xb0
[ 1213.606768]  ___sys_recvmsg+0x127/0x200
[ 1213.607108]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1213.607522]  ? __fget_files+0x2cf/0x520
[ 1213.607864]  ? lock_acquire+0x197/0x470
[ 1213.608200]  ? find_held_lock+0x2c/0x110
[ 1213.608565]  ? __might_fault+0xd3/0x180
[ 1213.608903]  ? lock_downgrade+0x6d0/0x6d0
[ 1213.609268]  do_recvmmsg+0x24c/0x6d0
[ 1213.609592]  ? ___sys_recvmsg+0x200/0x200
[ 1213.609944]  ? lock_downgrade+0x6d0/0x6d0
[ 1213.610302]  ? ksys_write+0x12d/0x260
[ 1213.610636]  ? wait_for_completion_io+0x270/0x270
[ 1213.611048]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1213.611440]  ? vfs_write+0x354/0xb10
[ 1213.611762]  __x64_sys_recvmmsg+0x20f/0x260
[ 1213.612126]  ? ksys_write+0x1a9/0x260
[ 1213.612468]  ? __do_sys_socketcall+0x600/0x600
[ 1213.612858]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1213.613299]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1213.613738]  do_syscall_64+0x33/0x40
[ 1213.614054]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1213.614487] RIP: 0033:0x7f96c2c53b19
[ 1213.614802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1213.616347] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1213.616989] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1213.617586] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1213.618184] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1213.618783] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1213.619381] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:34:20 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 17)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

[ 1213.649136] FAULT_INJECTION: forcing a failure.
[ 1213.649136] name failslab, interval 1, probability 0, space 0, times 0
[ 1213.650719] CPU: 0 PID: 7376 Comm: syz-executor.1 Not tainted 5.10.226 #1
[ 1213.651299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1213.651996] Call Trace:
[ 1213.652231]  dump_stack+0x107/0x167
[ 1213.652560]  should_fail.cold+0x5/0xa
[ 1213.652894]  ? security_file_alloc+0x34/0x170
[ 1213.653283]  should_failslab+0x5/0x20
[ 1213.653612]  kmem_cache_alloc+0x5b/0x310
[ 1213.653976]  security_file_alloc+0x34/0x170
[ 1213.654353]  __alloc_file+0xb7/0x320
[ 1213.654676]  alloc_empty_file+0x6d/0x170
[ 1213.655028]  path_openat+0xe6/0x2770
[ 1213.655349]  ? __lock_acquire+0x1657/0x5b00
[ 1213.655734]  ? path_lookupat+0x860/0x860
[ 1213.656087]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1213.656547]  ? SOFTIRQ_verbose+0x10/0x10
[ 1213.656893]  ? find_held_lock+0x2c/0x110
[ 1213.657260]  do_filp_open+0x190/0x3e0
[ 1213.657588]  ? may_open_dev+0xf0/0xf0
[ 1213.657923]  ? alloc_fd+0x2e7/0x670
[ 1213.658238]  ? lock_downgrade+0x6d0/0x6d0
[ 1213.658596]  ? do_raw_spin_lock+0x121/0x260
[ 1213.658968]  ? rwlock_bug.part.0+0x90/0x90
[ 1213.659343]  ? _raw_spin_unlock+0x1a/0x30
[ 1213.659697]  ? alloc_fd+0x2e7/0x670
[ 1213.660033]  do_sys_openat2+0x171/0x4d0
[ 1213.660393]  ? build_open_flags+0x6f0/0x6f0
[ 1213.660765]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1213.661186]  ? wait_for_completion_io+0x270/0x270
[ 1213.661612]  __x64_sys_openat+0x13f/0x1f0
[ 1213.661971]  ? __ia32_sys_open+0x1c0/0x1c0
[ 1213.662334]  ? ksys_write+0x1a9/0x260
[ 1213.662673]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1213.663122]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1213.663570]  do_syscall_64+0x33/0x40
[ 1213.663894]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1213.664340] RIP: 0033:0x7fec5bd1db19
[ 1213.664667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1213.666223] RSP: 002b:00007fec59293188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1213.666874] RAX: ffffffffffffffda RBX: 00007fec5be30f60 RCX: 00007fec5bd1db19
[ 1213.667478] RDX: 0000000000020002 RSI: 0000000020000880 RDI: 0000000000000004
[ 1213.668082] RBP: 00007fec592931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1213.668723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1213.669333] R13: 00007fffba4da04f R14: 00007fec59293300 R15: 0000000000022000
[ 1213.702029] FAULT_INJECTION: forcing a failure.
[ 1213.702029] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1213.704753] CPU: 1 PID: 7381 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1213.706021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1213.707564] Call Trace:
[ 1213.708054]  dump_stack+0x107/0x167
[ 1213.708844]  should_fail.cold+0x5/0xa
[ 1213.709563]  _copy_from_user+0x2e/0x1b0
[ 1213.710303]  __copy_msghdr_from_user+0x91/0x4b0
[ 1213.711174]  ? __ia32_sys_shutdown+0x80/0x80
[ 1213.711988]  ? __lock_acquire+0x1657/0x5b00
[ 1213.712939]  ___sys_recvmsg+0xd5/0x200
[ 1213.713663]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1213.714585]  ? lock_acquire+0x197/0x470
[ 1213.715332]  ? find_held_lock+0x2c/0x110
[ 1213.716091]  ? __might_fault+0xd3/0x180
[ 1213.716982]  ? lock_downgrade+0x6d0/0x6d0
[ 1213.717754]  ? io_schedule_timeout+0x140/0x140
[ 1213.718609]  do_recvmmsg+0x24c/0x6d0
[ 1213.719301]  ? ___sys_recvmsg+0x200/0x200
[ 1213.720065]  ? lock_downgrade+0x6d0/0x6d0
[ 1213.720576]  ? ksys_write+0x12d/0x260
[ 1213.720912]  ? wait_for_completion_io+0x270/0x270
[ 1213.721323]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1213.721716]  ? vfs_write+0x354/0xb10
[ 1213.722037]  __x64_sys_recvmmsg+0x20f/0x260
[ 1213.722403]  ? ksys_write+0x1a9/0x260
[ 1213.722729]  ? __do_sys_socketcall+0x600/0x600
[ 1213.723120]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1213.723565]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1213.724003]  do_syscall_64+0x33/0x40
[ 1213.724329]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1213.725468] RIP: 0033:0x7f06d872db19
[ 1213.726095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1213.729503] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1213.730788] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1213.731991] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1213.733461] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1213.734669] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1213.735871] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
03:34:20 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:34:20 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10000, 0xfffffffffffffffd, 0x0, 0x8, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = getpid()
syz_open_procfs(r1, &(0x7f0000000000)='net/raw\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
pipe2(&(0x7f0000000140), 0x800)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/cpuidle_haltpoll', 0x2401c1, 0x48)
fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x1)
ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0)

03:34:20 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 27)

[ 1213.780667] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
03:34:20 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1213.788200] FAULT_INJECTION: forcing a failure.
[ 1213.788200] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1213.789669] CPU: 1 PID: 7386 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1213.790250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1213.790949] Call Trace:
[ 1213.791183]  dump_stack+0x107/0x167
[ 1213.791499]  should_fail.cold+0x5/0xa
[ 1213.791833]  _copy_from_user+0x2e/0x1b0
[ 1213.792180]  __copy_msghdr_from_user+0x91/0x4b0
[ 1213.792589]  ? __ia32_sys_shutdown+0x80/0x80
[ 1213.792969]  ? __lock_acquire+0x1657/0x5b00
[ 1213.793351]  ___sys_recvmsg+0xd5/0x200
[ 1213.793685]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1213.794107]  ? __fget_files+0x2cf/0x520
[ 1213.794452]  ? lock_acquire+0x197/0x470
[ 1213.794792]  ? find_held_lock+0x2c/0x110
[ 1213.795151]  ? __might_fault+0xd3/0x180
[ 1213.795491]  ? lock_downgrade+0x6d0/0x6d0
[ 1213.795862]  do_recvmmsg+0x24c/0x6d0
[ 1213.796187]  ? ___sys_recvmsg+0x200/0x200
[ 1213.796553]  ? lock_downgrade+0x6d0/0x6d0
[ 1213.796916]  ? ksys_write+0x12d/0x260
[ 1213.797255]  ? wait_for_completion_io+0x270/0x270
[ 1213.797670]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1213.798065]  ? vfs_write+0x354/0xb10
[ 1213.798394]  __x64_sys_recvmmsg+0x20f/0x260
[ 1213.798763]  ? ksys_write+0x1a9/0x260
[ 1213.799091]  ? __do_sys_socketcall+0x600/0x600
[ 1213.799484]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1213.799931]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1213.800382]  do_syscall_64+0x33/0x40
[ 1213.800707]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1213.801144] RIP: 0033:0x7f96c2c53b19
[ 1213.801464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1213.803012] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1213.803660] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1213.804265] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1213.804883] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1213.805493] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1213.806098] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
[ 1213.852114] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
03:34:34 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:34:34 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0xfffffff6)

03:34:34 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x51204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:34:34 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 28)

03:34:34 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0) (fail_nth: 7)

[ 1228.042174] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
03:34:34 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 18)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:34:34 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:34:34 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x20010, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000003100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x2000, @fd_index=0x2, 0x9, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x7fffffff)
pread64(r3, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r5 = fsopen(&(0x7f0000000040)='bpf\x00', 0x1)
preadv(r5, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/96, 0x60}, {&(0x7f0000000340)=""/46, 0x2e}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000000380)=""/21, 0x15}], 0x5, 0x1, 0x401)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r6=>r3, 0x80000001, 0x0, 0x3})
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/class/vc', 0x400000, 0x0)
r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000030000f30000e10005000000000000000100f0ff00000000fcffffff00000000040000fffffffc008180000000000000ffffffff000400000000000000000000ea54ffffffff040001000000002500"/96]}, @devid=r9})
ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f00000004c0)={0x0, 0x3, {0x5, @struct={0x800, 0x3}, 0x0, 0x3, 0x0, 0x0, 0x3, 0x4, 0x20, @struct={0x7, 0x40}, 0x6, 0x0, [0x6, 0x7fffffff, 0x7fffffff, 0x7ff, 0x7fff, 0xc41]}, {0x3, @struct={0xdb, 0x401}, r9, 0x5, 0x8, 0x3, 0x8000, 0x40, 0x0, @usage=0x8, 0x3, 0x2, [0x2, 0xffff, 0x5, 0x1000, 0x8, 0x7fd3]}, {0x591, @usage=0x3, 0x0, 0x8, 0x7fffffff, 0x5, 0x8, 0x2, 0xf4, @usage=0x8, 0xffffffff, 0x1, [0x9, 0x80000001, 0x101, 0xd1, 0x8, 0x5]}, {0x3, 0x5, 0xd46}})
r10 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x242, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0)
fstatfs(r6, &(0x7f00000000c0)=""/210)

[ 1228.053913] FAULT_INJECTION: forcing a failure.
[ 1228.053913] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1228.055013] CPU: 0 PID: 7415 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1228.055599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1228.056317] Call Trace:
[ 1228.056558]  dump_stack+0x107/0x167
[ 1228.056874]  should_fail.cold+0x5/0xa
[ 1228.057213]  _copy_from_user+0x2e/0x1b0
[ 1228.057571]  __copy_msghdr_from_user+0x91/0x4b0
[ 1228.057976]  ? __ia32_sys_shutdown+0x80/0x80
[ 1228.058358]  ? __lock_acquire+0x1657/0x5b00
[ 1228.058741]  ___sys_recvmsg+0xd5/0x200
[ 1228.059077]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1228.059504]  ? __fget_files+0x2cf/0x520
[ 1228.059855]  ? lock_acquire+0x197/0x470
[ 1228.060202]  ? find_held_lock+0x2c/0x110
[ 1228.060563]  ? __might_fault+0xd3/0x180
[ 1228.061334]  ? lock_downgrade+0x6d0/0x6d0
[ 1228.062134]  do_recvmmsg+0x24c/0x6d0
[ 1228.062824]  ? ___sys_recvmsg+0x200/0x200
[ 1228.063589]  ? lock_downgrade+0x6d0/0x6d0
[ 1228.064370]  ? ksys_write+0x12d/0x260
[ 1228.065280]  ? wait_for_completion_io+0x270/0x270
[ 1228.066195]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1228.067077]  ? vfs_write+0x354/0xb10
[ 1228.067786]  __x64_sys_recvmmsg+0x20f/0x260
[ 1228.068653]  ? ksys_write+0x1a9/0x260
[ 1228.069362]  ? __do_sys_socketcall+0x600/0x600
[ 1228.070217]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1228.071189]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1228.072039] FAULT_INJECTION: forcing a failure.
[ 1228.072039] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1228.072159]  do_syscall_64+0x33/0x40
[ 1228.073991]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1228.074870] RIP: 0033:0x7f06d872db19
[ 1228.075507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1228.077557] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1228.078194] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1228.078788] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1228.079380] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1228.079973] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1228.080724] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1228.081969] CPU: 1 PID: 7417 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1228.082669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1228.083509] Call Trace:
[ 1228.083784]  dump_stack+0x107/0x167
[ 1228.084160]  should_fail.cold+0x5/0xa
[ 1228.084560]  _copy_from_user+0x2e/0x1b0
[ 1228.084982]  __copy_msghdr_from_user+0x91/0x4b0
[ 1228.085470]  ? __ia32_sys_shutdown+0x80/0x80
[ 1228.085932]  ? __lock_acquire+0x1657/0x5b00
[ 1228.086389]  ___sys_recvmsg+0xd5/0x200
[ 1228.086796]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1228.087308]  ? __fget_files+0x2cf/0x520
[ 1228.087722]  ? lock_acquire+0x197/0x470
[ 1228.088144]  ? find_held_lock+0x2c/0x110
[ 1228.088575]  ? __might_fault+0xd3/0x180
[ 1228.088987]  ? lock_downgrade+0x6d0/0x6d0
[ 1228.089433]  do_recvmmsg+0x24c/0x6d0
[ 1228.089824]  ? ___sys_recvmsg+0x200/0x200
[ 1228.090264]  ? lock_downgrade+0x6d0/0x6d0
[ 1228.090718]  ? ksys_write+0x12d/0x260
[ 1228.091130]  ? wait_for_completion_io+0x270/0x270
[ 1228.091639]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1228.092127]  ? vfs_write+0x354/0xb10
[ 1228.092529]  __x64_sys_recvmmsg+0x20f/0x260
[ 1228.092976]  ? ksys_write+0x1a9/0x260
[ 1228.093378]  ? __do_sys_socketcall+0x600/0x600
[ 1228.093860]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1228.094407]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1228.094945]  do_syscall_64+0x33/0x40
[ 1228.095331]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1228.095858] RIP: 0033:0x7f96c2c53b19
[ 1228.096244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1228.098020] RSP: 002b:00007f96c01a8188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1228.098806] RAX: ffffffffffffffda RBX: 00007f96c2d67020 RCX: 00007f96c2c53b19
[ 1228.099554] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000003
[ 1228.100295] RBP: 00007f96c01a81d0 R08: 0000000000000000 R09: 0000000000000000
[ 1228.100990] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1228.101733] R13: 00007ffd68b0182f R14: 00007f96c01a8300 R15: 0000000000022000
03:34:35 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f00000000c0)=""/4085, 0xff5, 0x0)

[ 1228.141864] FAULT_INJECTION: forcing a failure.
[ 1228.141864] name failslab, interval 1, probability 0, space 0, times 0
[ 1228.143176] CPU: 0 PID: 7410 Comm: syz-executor.1 Not tainted 5.10.226 #1
[ 1228.143757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1228.144459] Call Trace:
[ 1228.144835]  dump_stack+0x107/0x167
[ 1228.145709]  should_fail.cold+0x5/0xa
[ 1228.146606]  ? create_object.isra.0+0x3a/0xa20
[ 1228.147695]  should_failslab+0x5/0x20
[ 1228.148623]  kmem_cache_alloc+0x5b/0x310
[ 1228.149602]  ? percpu_ref_put_many.constprop.0+0x4e/0x110
[ 1228.150933]  create_object.isra.0+0x3a/0xa20
[ 1228.151999]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1228.153228]  kmem_cache_alloc+0x159/0x310
[ 1228.154264]  security_file_alloc+0x34/0x170
[ 1228.155315]  __alloc_file+0xb7/0x320
[ 1228.156209]  alloc_empty_file+0x6d/0x170
[ 1228.157226]  path_openat+0xe6/0x2770
[ 1228.158116]  ? __lock_acquire+0x1657/0x5b00
[ 1228.159191]  ? path_lookupat+0x860/0x860
[ 1228.160153]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1228.161413]  ? SOFTIRQ_verbose+0x10/0x10
[ 1228.162375]  ? find_held_lock+0x2c/0x110
[ 1228.163378]  do_filp_open+0x190/0x3e0
[ 1228.164296]  ? may_open_dev+0xf0/0xf0
[ 1228.165233]  ? alloc_fd+0x2e7/0x670
[ 1228.166098]  ? lock_downgrade+0x6d0/0x6d0
[ 1228.167085]  ? do_raw_spin_lock+0x121/0x260
[ 1228.168130]  ? rwlock_bug.part.0+0x90/0x90
[ 1228.169155]  ? _raw_spin_unlock+0x1a/0x30
[ 1228.170125]  ? alloc_fd+0x2e7/0x670
[ 1228.170997]  do_sys_openat2+0x171/0x4d0
[ 1228.171931]  ? build_open_flags+0x6f0/0x6f0
[ 1228.172950]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1228.174083]  ? wait_for_completion_io+0x270/0x270
[ 1228.175223]  __x64_sys_openat+0x13f/0x1f0
[ 1228.176193]  ? __ia32_sys_open+0x1c0/0x1c0
[ 1228.177196]  ? ksys_write+0x1a9/0x260
[ 1228.178104]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1228.179350]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1228.180587]  do_syscall_64+0x33/0x40
[ 1228.181459]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1228.182666] RIP: 0033:0x7fec5bd1db19
[ 1228.183545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1228.187881] RSP: 002b:00007fec59293188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1228.189680] RAX: ffffffffffffffda RBX: 00007fec5be30f60 RCX: 00007fec5bd1db19
[ 1228.191348] RDX: 0000000000020002 RSI: 0000000020000880 RDI: 0000000000000004
[ 1228.193046] RBP: 00007fec592931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1228.194724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1228.195438] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1228.196404] R13: 00007fffba4da04f R14: 00007fec59293300 R15: 0000000000022000
03:34:35 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r4}}, 0x0)
r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r8}}, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r9, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r7, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x6, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r10}}, 0x800)
r11 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r12}}, 0x0)
r13 = syz_open_dev$vcsu(&(0x7f0000000040), 0x13, 0x600800)
r14 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r15=>0x0, &(0x7f0000000140)=<r16=>0x0)
r17 = io_uring_register$IORING_REGISTER_PERSONALITY(r14, 0x9, 0x0, 0x0)
syz_io_uring_submit(r15, r16, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r17}}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x2000, @fd=r13, 0x66, 0x0, 0x0, 0x0, 0x1, {0x3, r17}}, 0x8)
pread64(r11, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:34:35 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 19)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:34:35 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
fremovexattr(r1, &(0x7f0000000000)=@random={'trusted.', '%{!,\x00'})
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1228.314610] FAULT_INJECTION: forcing a failure.
[ 1228.314610] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1228.316741] CPU: 0 PID: 7434 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1228.317538] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1228.318499] Call Trace:
[ 1228.318827]  dump_stack+0x107/0x167
[ 1228.319255]  should_fail.cold+0x5/0xa
[ 1228.319715]  _copy_from_user+0x2e/0x1b0
[ 1228.320187]  __copy_msghdr_from_user+0x91/0x4b0
[ 1228.324725]  ? __ia32_sys_shutdown+0x80/0x80
[ 1228.325146]  ? __lock_acquire+0x1657/0x5b00
[ 1228.325578]  ___sys_recvmsg+0xd5/0x200
[ 1228.325955]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1228.326431]  ? lock_acquire+0x197/0x470
[ 1228.326812]  ? find_held_lock+0x2c/0x110
[ 1228.327203]  ? __might_fault+0xd3/0x180
[ 1228.327582]  ? lock_downgrade+0x6d0/0x6d0
[ 1228.327989]  ? io_schedule_timeout+0x140/0x140
[ 1228.328435]  do_recvmmsg+0x24c/0x6d0
[ 1228.328831]  ? ___sys_recvmsg+0x200/0x200
[ 1228.329224]  ? lock_downgrade+0x6d0/0x6d0
[ 1228.329619]  ? ksys_write+0x12d/0x260
[ 1228.329997]  ? wait_for_completion_io+0x270/0x270
[ 1228.331077]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1228.331541]  ? vfs_write+0x354/0xb10
[ 1228.331936]  __x64_sys_recvmmsg+0x20f/0x260
[ 1228.332357]  ? ksys_write+0x1a9/0x260
[ 1228.332783]  ? __do_sys_socketcall+0x600/0x600
[ 1228.333243]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1228.333771]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1228.334286]  do_syscall_64+0x33/0x40
[ 1228.334667]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1228.335177] RIP: 0033:0x7f06d872db19
[ 1228.335546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1228.337333] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1228.338081] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1228.338788] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1228.339486] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1228.340180] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1228.340899] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
03:34:35 executing program 5:
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
io_uring_enter(r1, 0x7ffa, 0xb889, 0x3, &(0x7f0000000140)={[0xdece]}, 0x8)

03:34:35 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1228.378324] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
03:34:35 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 29)

03:34:35 executing program 6:
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x7c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_MESH_SETUP={0x44, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x40}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x475}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, <r1=>0x0})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, r1, 0x80000, 0xffffffffffffffff, 0x2)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x7f, 0x0, 0x81, 0x5, 0x0, 0x800, 0x20000, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x2, 0x7}, 0x15200, 0x9, 0xfffffff8, 0xb, 0xfffffffffffffffa, 0x4, 0x56, 0x0, 0x7fffffff, 0x0, 0x7}, 0x0, 0x7, r3, 0x1)
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1228.427896] FAULT_INJECTION: forcing a failure.
[ 1228.427896] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1228.430377] CPU: 0 PID: 7444 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1228.431864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1228.433694] Call Trace:
[ 1228.434264]  dump_stack+0x107/0x167
[ 1228.435049]  should_fail.cold+0x5/0xa
[ 1228.435877]  _copy_from_user+0x2e/0x1b0
[ 1228.436756]  __copy_msghdr_from_user+0x91/0x4b0
[ 1228.437759]  ? __ia32_sys_shutdown+0x80/0x80
[ 1228.438716]  ? __lock_acquire+0x1657/0x5b00
[ 1228.439661]  ___sys_recvmsg+0xd5/0x200
[ 1228.440507]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1228.441572]  ? __fget_files+0x2cf/0x520
[ 1228.442437]  ? lock_acquire+0x197/0x470
[ 1228.443290]  ? find_held_lock+0x2c/0x110
[ 1228.444170]  ? __might_fault+0xd3/0x180
[ 1228.445040]  ? lock_downgrade+0x6d0/0x6d0
[ 1228.445959]  do_recvmmsg+0x24c/0x6d0
[ 1228.446766]  ? ___sys_recvmsg+0x200/0x200
[ 1228.447655]  ? lock_downgrade+0x6d0/0x6d0
[ 1228.448561]  ? ksys_write+0x12d/0x260
[ 1228.449390]  ? wait_for_completion_io+0x270/0x270
[ 1228.450435]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1228.451442]  ? vfs_write+0x354/0xb10
[ 1228.452244]  __x64_sys_recvmmsg+0x20f/0x260
[ 1228.453179]  ? ksys_write+0x1a9/0x260
[ 1228.454003]  ? __do_sys_socketcall+0x600/0x600
[ 1228.454994]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1228.456125]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1228.457246]  do_syscall_64+0x33/0x40
[ 1228.458059]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1228.459166] RIP: 0033:0x7f96c2c53b19
[ 1228.459964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1228.464010] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1228.465678] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1228.467215] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1228.468761] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1228.470299] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1228.471835] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:34:35 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1228.527073] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
03:34:49 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 30)

03:34:49 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0xfffffffe)

03:34:49 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:34:49 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0) (fail_nth: 8)

03:34:49 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
syz_io_uring_setup(0x3c0a, &(0x7f0000000180)={0x0, 0xad39, 0x20, 0x1, 0x55, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x12)
syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r4, 0x180, 0x0, 0x3b5a}, 0xfffffff7)
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r8=>r0, {r2}}, './file0\x00'})
io_uring_register$IORING_UNREGISTER_FILES(r8, 0x3, 0x0, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r9}}, 0x0)
r10 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r11=>0x0, &(0x7f0000000140)=<r12=>0x0)
r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0)
syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r13}}, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r14=>0x0, <r15=>0x0})
syz_io_uring_submit(r6, r12, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f0000000040)={r14, r15+60000000}, 0x1, 0x1, 0x1}, 0x3ff)

03:34:49 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 20)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:34:49 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x3, 0x5, 0x1, 0x80, 0x0, 0x1000, 0x50423, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x44810, 0x7fffffff, 0x2, 0x9, 0x8, 0x8, 0x0, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0xc, r1, 0x5)

03:34:49 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r2, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6)
getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r1, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1242.849017] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1242.850788] FAULT_INJECTION: forcing a failure.
[ 1242.850788] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1242.852365] CPU: 1 PID: 7462 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1242.853049] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1242.853916] Call Trace:
[ 1242.854199]  dump_stack+0x107/0x167
[ 1242.854593]  should_fail.cold+0x5/0xa
[ 1242.855013]  _copy_from_user+0x2e/0x1b0
[ 1242.855439]  __copy_msghdr_from_user+0x91/0x4b0
[ 1242.855940]  ? __ia32_sys_shutdown+0x80/0x80
[ 1242.856383]  ? __lock_acquire+0x1657/0x5b00
[ 1242.856835]  ___sys_recvmsg+0xd5/0x200
[ 1242.857170]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1242.857589]  ? __fget_files+0x2cf/0x520
[ 1242.857939]  ? lock_acquire+0x197/0x470
[ 1242.858277]  ? find_held_lock+0x2c/0x110
[ 1242.858629]  ? __might_fault+0xd3/0x180
[ 1242.858968]  ? lock_downgrade+0x6d0/0x6d0
[ 1242.859335]  do_recvmmsg+0x24c/0x6d0
[ 1242.859658]  ? ___sys_recvmsg+0x200/0x200
[ 1242.860011]  ? lock_downgrade+0x6d0/0x6d0
[ 1242.860371]  ? ksys_write+0x12d/0x260
[ 1242.860734]  ? wait_for_completion_io+0x270/0x270
[ 1242.861223]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1242.861713]  ? vfs_write+0x354/0xb10
[ 1242.862236]  __x64_sys_recvmmsg+0x20f/0x260
[ 1242.862974]  ? ksys_write+0x1a9/0x260
[ 1242.863623]  ? __do_sys_socketcall+0x600/0x600
[ 1242.864407]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1242.865538]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1242.866424]  do_syscall_64+0x33/0x40
[ 1242.867061]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1242.867937] RIP: 0033:0x7f06d872db19
[ 1242.868568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1242.870166] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1242.870811] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1242.871408] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1242.872006] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1242.872605] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1242.873256] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1242.895326] FAULT_INJECTION: forcing a failure.
[ 1242.895326] name failslab, interval 1, probability 0, space 0, times 0
[ 1242.896720] CPU: 1 PID: 7463 Comm: syz-executor.1 Not tainted 5.10.226 #1
[ 1242.897295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1242.898018] Call Trace:
[ 1242.898272]  dump_stack+0x107/0x167
[ 1242.898615]  should_fail.cold+0x5/0xa
[ 1242.898980]  ? alloc_pipe_info+0x10a/0x590
[ 1242.899376]  should_failslab+0x5/0x20
[ 1242.899732]  kmem_cache_alloc_trace+0x55/0x320
[ 1242.900164]  alloc_pipe_info+0x10a/0x590
[ 1242.900550]  fifo_open+0x293/0xba0
[ 1242.900947]  do_dentry_open+0x4b7/0x1090
[ 1242.901331]  ? pipe_release+0x330/0x330
[ 1242.901698]  ? may_open+0x1e4/0x400
[ 1242.902041]  path_openat+0x19ba/0x2770
[ 1242.902416]  ? path_lookupat+0x860/0x860
[ 1242.902798]  ? find_held_lock+0x2c/0x110
[ 1242.903195]  do_filp_open+0x190/0x3e0
[ 1242.903551]  ? may_open_dev+0xf0/0xf0
[ 1242.903923]  ? do_raw_spin_lock+0x121/0x260
[ 1242.904326]  ? rwlock_bug.part.0+0x90/0x90
[ 1242.904902]  ? _raw_spin_unlock+0x1a/0x30
[ 1242.905754]  ? alloc_fd+0x2e7/0x670
[ 1242.906397]  do_sys_openat2+0x171/0x4d0
[ 1242.907077]  ? build_open_flags+0x6f0/0x6f0
[ 1242.907815]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1242.908649]  ? wait_for_completion_io+0x270/0x270
[ 1242.909849]  __x64_sys_openat+0x13f/0x1f0
[ 1242.910557]  ? __ia32_sys_open+0x1c0/0x1c0
[ 1242.911310]  ? ksys_write+0x1a9/0x260
[ 1242.912192]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1242.912879]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1242.913317]  do_syscall_64+0x33/0x40
[ 1242.913635]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1242.914067] RIP: 0033:0x7fec5bd1db19
[ 1242.914383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1242.915924] RSP: 002b:00007fec59293188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1242.916564] RAX: ffffffffffffffda RBX: 00007fec5be30f60 RCX: 00007fec5bd1db19
[ 1242.917223] RDX: 0000000000020002 RSI: 0000000020000880 RDI: 0000000000000004
[ 1242.917824] RBP: 00007fec592931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1242.918422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1242.919021] R13: 00007fffba4da04f R14: 00007fec59293300 R15: 0000000000022000
[ 1242.927143] FAULT_INJECTION: forcing a failure.
[ 1242.927143] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1242.928322] CPU: 1 PID: 7473 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1242.928939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1242.929638] Call Trace:
[ 1242.929863]  dump_stack+0x107/0x167
[ 1242.930175]  should_fail.cold+0x5/0xa
[ 1242.930505]  _copy_from_user+0x2e/0x1b0
[ 1242.930848]  __copy_msghdr_from_user+0x91/0x4b0
[ 1242.931246]  ? __ia32_sys_shutdown+0x80/0x80
[ 1242.931622]  ? __lock_acquire+0x1657/0x5b00
[ 1242.932002]  ___sys_recvmsg+0xd5/0x200
[ 1242.932343]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1242.932977]  ? __fget_files+0x2cf/0x520
[ 1242.933665]  ? lock_acquire+0x197/0x470
[ 1242.934344]  ? find_held_lock+0x2c/0x110
[ 1242.935039]  ? __might_fault+0xd3/0x180
[ 1242.935717]  ? lock_downgrade+0x6d0/0x6d0
[ 1242.936439]  do_recvmmsg+0x24c/0x6d0
[ 1242.936879]  ? ___sys_recvmsg+0x200/0x200
[ 1242.937236]  ? lock_downgrade+0x6d0/0x6d0
[ 1242.937596]  ? ksys_write+0x12d/0x260
[ 1242.937935]  ? wait_for_completion_io+0x270/0x270
[ 1242.938352]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1242.938745]  ? vfs_write+0x354/0xb10
[ 1242.939068]  __x64_sys_recvmmsg+0x20f/0x260
[ 1242.939436]  ? ksys_write+0x1a9/0x260
[ 1242.939761]  ? __do_sys_socketcall+0x600/0x600
[ 1242.940152]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1242.940595]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1242.941086]  do_syscall_64+0x33/0x40
[ 1242.941410]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1242.941843] RIP: 0033:0x7f96c2c53b19
[ 1242.942160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1242.943700] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1242.944348] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1242.945410] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1242.946797] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1242.948182] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1242.949065] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:34:49 executing program 6:
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xf8, 0x40)
setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f00000000c0)="a98f50c7e5117c25a51c972c15dd319253a34706f26d298b3a8dd7f6fc8d21f56bcdca8211430a2c55603b39f5442bf6fc629a712199b247a99abcdd6da07e5de33634a89d5b9150e87759793fdd4ff6bc9dded04c9ef8b052f88ba70f6144c267839547f9d77bf128361641501819741c8ec8c4381bac5c34485fa41fa1f65434bd11e6956682fb26f808775a487272af8130a7bcc511096f8121c286339dffef", 0xa1)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:34:49 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0) (fail_nth: 9)

03:34:49 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r1, 0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0xee4, &(0x7f0000000000)=[r0, r0], 0x2, 0x0, 0x0, {0x0, r3}}, 0x101)

03:34:50 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 21)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

[ 1243.087982] FAULT_INJECTION: forcing a failure.
[ 1243.087982] name failslab, interval 1, probability 0, space 0, times 0
[ 1243.089799] CPU: 0 PID: 7485 Comm: syz-executor.1 Not tainted 5.10.226 #1
[ 1243.090382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1243.091087] Call Trace:
[ 1243.091324]  dump_stack+0x107/0x167
[ 1243.091653]  should_fail.cold+0x5/0xa
[ 1243.091996]  ? create_object.isra.0+0x3a/0xa20
03:34:50 executing program 6:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x3)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1243.092397]  should_failslab+0x5/0x20
[ 1243.092913]  kmem_cache_alloc+0x5b/0x310
[ 1243.093397]  create_object.isra.0+0x3a/0xa20
[ 1243.093862]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1243.094302]  kmem_cache_alloc_trace+0x151/0x320
[ 1243.094762]  alloc_pipe_info+0x10a/0x590
[ 1243.095119]  fifo_open+0x293/0xba0
[ 1243.095438]  do_dentry_open+0x4b7/0x1090
[ 1243.095844]  ? pipe_release+0x330/0x330
[ 1243.096232]  ? may_open+0x1e4/0x400
[ 1243.096550]  path_openat+0x19ba/0x2770
[ 1243.096949]  ? path_lookupat+0x860/0x860
[ 1243.097422]  ? find_held_lock+0x2c/0x110
[ 1243.097870]  do_filp_open+0x190/0x3e0
[ 1243.098269]  ? may_open_dev+0xf0/0xf0
[ 1243.098687]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1243.099225]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1243.099775]  ? trace_hardirqs_on+0x5b/0x180
[ 1243.100227]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1243.100894]  ? do_sys_openat2+0x143/0x4d0
[ 1243.101257]  ? do_sys_openat2+0x161/0x4d0
[ 1243.101628]  do_sys_openat2+0x171/0x4d0
[ 1243.101972]  ? recalibrate_cpu_khz+0x10/0x10
[ 1243.102351]  ? ktime_get+0x158/0x1f0
[ 1243.102675]  ? build_open_flags+0x6f0/0x6f0
[ 1243.103052]  ? clockevents_program_event+0x131/0x360
[ 1243.103492]  ? tick_program_event+0xa8/0x140
[ 1243.103878]  __x64_sys_openat+0x13f/0x1f0
[ 1243.104244]  ? __ia32_sys_open+0x1c0/0x1c0
[ 1243.104739]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1243.105224]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1243.105675]  do_syscall_64+0x33/0x40
[ 1243.105996]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1243.106433] RIP: 0033:0x7fec5bd1db19
[ 1243.106752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1243.108328] RSP: 002b:00007fec59293188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1243.108989] RAX: ffffffffffffffda RBX: 00007fec5be30f60 RCX: 00007fec5bd1db19
[ 1243.109592] RDX: 0000000000020002 RSI: 0000000020000880 RDI: 0000000000000004
[ 1243.110227] RBP: 00007fec592931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1243.110862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1243.111467] R13: 00007fffba4da04f R14: 00007fec59293300 R15: 0000000000022000
03:34:50 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 31)

[ 1243.139053] FAULT_INJECTION: forcing a failure.
[ 1243.139053] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1243.140248] CPU: 1 PID: 7490 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1243.140856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1243.141549] Call Trace:
[ 1243.141781]  dump_stack+0x107/0x167
[ 1243.142092]  should_fail.cold+0x5/0xa
[ 1243.142423]  _copy_from_user+0x2e/0x1b0
[ 1243.142766]  __copy_msghdr_from_user+0x91/0x4b0
[ 1243.143159]  ? __ia32_sys_shutdown+0x80/0x80
[ 1243.143533]  ? __lock_acquire+0x1657/0x5b00
[ 1243.143910]  ___sys_recvmsg+0xd5/0x200
[ 1243.144241]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1243.144666]  ? __fget_files+0x2cf/0x520
[ 1243.145014]  ? lock_acquire+0x197/0x470
[ 1243.145351]  ? find_held_lock+0x2c/0x110
[ 1243.145700]  ? __might_fault+0xd3/0x180
[ 1243.146036]  ? lock_downgrade+0x6d0/0x6d0
[ 1243.146402]  do_recvmmsg+0x24c/0x6d0
[ 1243.146728]  ? ___sys_recvmsg+0x200/0x200
[ 1243.147079]  ? lock_downgrade+0x6d0/0x6d0
[ 1243.147438]  ? ksys_write+0x12d/0x260
[ 1243.147773]  ? wait_for_completion_io+0x270/0x270
[ 1243.148184]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1243.148576]  ? vfs_write+0x354/0xb10
[ 1243.148918]  __x64_sys_recvmmsg+0x20f/0x260
[ 1243.149284]  ? ksys_write+0x1a9/0x260
[ 1243.149613]  ? __do_sys_socketcall+0x600/0x600
[ 1243.150003]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1243.150460]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1243.150897]  do_syscall_64+0x33/0x40
[ 1243.151214]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1243.151646] RIP: 0033:0x7f06d872db19
[ 1243.151962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1243.153531] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1243.154173] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1243.154785] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1243.155395] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1243.155997] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1243.156593] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
03:34:50 executing program 5:
syz_io_uring_setup(0x4dcf, &(0x7f00000002c0)={0x0, 0xf6d5, 0x0, 0x10000000}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1243.182100] FAULT_INJECTION: forcing a failure.
[ 1243.182100] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1243.183293] CPU: 0 PID: 7494 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1243.183936] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1243.184771] Call Trace:
[ 1243.185021]  dump_stack+0x107/0x167
[ 1243.185335]  should_fail.cold+0x5/0xa
[ 1243.185671]  _copy_from_user+0x2e/0x1b0
[ 1243.186017]  __copy_msghdr_from_user+0x91/0x4b0
[ 1243.186422]  ? __ia32_sys_shutdown+0x80/0x80
[ 1243.186796]  ? __lock_acquire+0x1657/0x5b00
[ 1243.187183]  ___sys_recvmsg+0xd5/0x200
[ 1243.187524]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1243.187943]  ? __fget_files+0x2cf/0x520
[ 1243.188323]  ? lock_acquire+0x197/0x470
[ 1243.188763]  ? find_held_lock+0x2c/0x110
[ 1243.189115]  ? __might_fault+0xd3/0x180
[ 1243.189454]  ? lock_downgrade+0x6d0/0x6d0
[ 1243.189817]  do_recvmmsg+0x24c/0x6d0
[ 1243.190140]  ? ___sys_recvmsg+0x200/0x200
[ 1243.190505]  ? lock_downgrade+0x6d0/0x6d0
[ 1243.190862]  ? ksys_write+0x12d/0x260
[ 1243.191197]  ? wait_for_completion_io+0x270/0x270
[ 1243.191609]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1243.192006]  ? vfs_write+0x354/0xb10
[ 1243.192363]  __x64_sys_recvmmsg+0x20f/0x260
[ 1243.192762]  ? ksys_write+0x1a9/0x260
[ 1243.193090]  ? __do_sys_socketcall+0x600/0x600
[ 1243.193480]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1243.193954]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1243.194393]  do_syscall_64+0x33/0x40
[ 1243.194708]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1243.195141] RIP: 0033:0x7f96c2c53b19
[ 1243.195457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1243.197123] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1243.197764] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1243.198361] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1243.198956] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1243.199550] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1243.200174] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:34:50 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0) (fail_nth: 10)

03:34:50 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1243.288450] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1243.324218] FAULT_INJECTION: forcing a failure.
[ 1243.324218] name failslab, interval 1, probability 0, space 0, times 0
[ 1243.325668] CPU: 0 PID: 7503 Comm: syz-executor.1 Not tainted 5.10.226 #1
[ 1243.326256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1243.326964] Call Trace:
[ 1243.327209]  dump_stack+0x107/0x167
[ 1243.327538]  should_fail.cold+0x5/0xa
[ 1243.327874]  ? alloc_pipe_info+0x1e5/0x590
[ 1243.328247]  should_failslab+0x5/0x20
[ 1243.328576]  __kmalloc+0x72/0x390
[ 1243.328920]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1243.329366]  alloc_pipe_info+0x1e5/0x590
[ 1243.329729]  fifo_open+0x293/0xba0
[ 1243.330045]  do_dentry_open+0x4b7/0x1090
[ 1243.330396]  ? pipe_release+0x330/0x330
[ 1243.330735]  ? may_open+0x1e4/0x400
[ 1243.331051]  path_openat+0x19ba/0x2770
[ 1243.331402]  ? path_lookupat+0x860/0x860
[ 1243.331767]  ? find_held_lock+0x2c/0x110
[ 1243.332131]  do_filp_open+0x190/0x3e0
[ 1243.332459]  ? may_open_dev+0xf0/0xf0
[ 1243.332851]  ? do_raw_spin_lock+0x121/0x260
[ 1243.333224]  ? rwlock_bug.part.0+0x90/0x90
[ 1243.333609]  ? _raw_spin_unlock+0x1a/0x30
[ 1243.333963]  ? alloc_fd+0x2e7/0x670
[ 1243.334292]  do_sys_openat2+0x171/0x4d0
[ 1243.334637]  ? build_open_flags+0x6f0/0x6f0
[ 1243.335012]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1243.335438]  ? wait_for_completion_io+0x270/0x270
[ 1243.335868]  __x64_sys_openat+0x13f/0x1f0
[ 1243.336224]  ? __ia32_sys_open+0x1c0/0x1c0
[ 1243.336587]  ? ksys_write+0x1a9/0x260
[ 1243.336963]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1243.337427]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1243.337878]  do_syscall_64+0x33/0x40
[ 1243.338201]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1243.338652] RIP: 0033:0x7fec5bd1db19
[ 1243.338973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1243.340522] RSP: 002b:00007fec59293188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1243.341207] RAX: ffffffffffffffda RBX: 00007fec5be30f60 RCX: 00007fec5bd1db19
[ 1243.341810] RDX: 0000000000020002 RSI: 0000000020000880 RDI: 0000000000000004
[ 1243.342411] RBP: 00007fec592931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1243.343023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1243.343636] R13: 00007fffba4da04f R14: 00007fec59293300 R15: 0000000000022000
03:35:06 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 32)

[ 1259.538178] FAULT_INJECTION: forcing a failure.
[ 1259.538178] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1259.539304] CPU: 0 PID: 7513 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1259.539885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1259.540584] Call Trace:
[ 1259.540825]  dump_stack+0x107/0x167
[ 1259.541149]  should_fail.cold+0x5/0xa
[ 1259.541482]  _copy_from_user+0x2e/0x1b0
[ 1259.541828]  __copy_msghdr_from_user+0x91/0x4b0
[ 1259.542223]  ? __ia32_sys_shutdown+0x80/0x80
[ 1259.542601]  ? __lock_acquire+0x1657/0x5b00
[ 1259.542980]  ___sys_recvmsg+0xd5/0x200
[ 1259.543313]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1259.543738]  ? lock_acquire+0x197/0x470
[ 1259.544076]  ? find_held_lock+0x2c/0x110
[ 1259.544427]  ? __might_fault+0xd3/0x180
[ 1259.544769]  ? lock_downgrade+0x6d0/0x6d0
[ 1259.545140]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1259.545611]  do_recvmmsg+0x24c/0x6d0
[ 1259.545936]  ? ___sys_recvmsg+0x200/0x200
[ 1259.546289]  ? lock_downgrade+0x6d0/0x6d0
[ 1259.546653]  ? ksys_write+0x12d/0x260
[ 1259.546990]  ? wait_for_completion_io+0x270/0x270
[ 1259.547404]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1259.547797]  ? vfs_write+0x354/0xb10
[ 1259.548120]  __x64_sys_recvmmsg+0x20f/0x260
[ 1259.548499]  ? ksys_write+0x1a9/0x260
[ 1259.548838]  ? __do_sys_socketcall+0x600/0x600
[ 1259.549243]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1259.549703]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1259.550152]  do_syscall_64+0x33/0x40
[ 1259.550471]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1259.550905] RIP: 0033:0x7f06d872db19
[ 1259.551223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1259.552768] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1259.553431] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1259.554032] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1259.554633] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1259.555233] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1259.555834] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1259.559742] FAULT_INJECTION: forcing a failure.
[ 1259.559742] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1259.560899] CPU: 1 PID: 7510 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1259.561486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1259.562182] Call Trace:
[ 1259.562416]  dump_stack+0x107/0x167
[ 1259.562729]  should_fail.cold+0x5/0xa
[ 1259.563063]  _copy_from_user+0x2e/0x1b0
[ 1259.563411]  __copy_msghdr_from_user+0x91/0x4b0
[ 1259.563812]  ? __ia32_sys_shutdown+0x80/0x80
[ 1259.564189]  ? __lock_acquire+0x1657/0x5b00
[ 1259.564571]  ___sys_recvmsg+0xd5/0x200
[ 1259.564923]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1259.565342]  ? __fget_files+0x2cf/0x520
[ 1259.565686]  ? lock_acquire+0x197/0x470
[ 1259.566024]  ? find_held_lock+0x2c/0x110
[ 1259.566379]  ? __might_fault+0xd3/0x180
[ 1259.566716]  ? lock_downgrade+0x6d0/0x6d0
[ 1259.567082]  do_recvmmsg+0x24c/0x6d0
[ 1259.567405]  ? ___sys_recvmsg+0x200/0x200
[ 1259.567769]  ? recalibrate_cpu_khz+0x10/0x10
[ 1259.568148]  ? lapic_next_deadline+0x1/0x50
[ 1259.568523]  ? tick_program_event+0xa8/0x140
[ 1259.568919]  __x64_sys_recvmmsg+0x20f/0x260
[ 1259.569292]  ? __do_sys_socketcall+0x600/0x600
[ 1259.569683]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1259.570129]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1259.570567]  do_syscall_64+0x33/0x40
[ 1259.570884]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1259.571315] RIP: 0033:0x7f96c2c53b19
[ 1259.571632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1259.573190] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1259.573837] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1259.574439] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1259.575039] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1259.575639] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1259.576240] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:35:06 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0) (fail_nth: 11)

03:35:06 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x1000000000000)

03:35:06 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:35:06 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:35:06 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 22)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:35:06 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r2, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6)
getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r1, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:35:06 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
fallocate(r0, 0x49, 0x200, 0x5)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1259.590284] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1259.596339] FAULT_INJECTION: forcing a failure.
[ 1259.596339] name failslab, interval 1, probability 0, space 0, times 0
[ 1259.597430] CPU: 1 PID: 7514 Comm: syz-executor.1 Not tainted 5.10.226 #1
[ 1259.598004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1259.598694] Call Trace:
[ 1259.598925]  dump_stack+0x107/0x167
[ 1259.599238]  should_fail.cold+0x5/0xa
[ 1259.599567]  ? create_object.isra.0+0x3a/0xa20
[ 1259.599960]  should_failslab+0x5/0x20
[ 1259.600286]  kmem_cache_alloc+0x5b/0x310
[ 1259.600629]  ? create_object.isra.0+0x3ad/0xa20
[ 1259.601047]  create_object.isra.0+0x3a/0xa20
[ 1259.601426]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1259.601869]  __kmalloc_node+0x1ae/0x420
[ 1259.602223]  memcg_alloc_page_obj_cgroups+0x73/0x100
[ 1259.602659]  memcg_slab_post_alloc_hook+0x1f0/0x430
[ 1259.603086]  ? trace_hardirqs_on+0x5b/0x180
[ 1259.603461]  kmem_cache_alloc_trace+0x169/0x320
[ 1259.603868]  alloc_pipe_info+0x10a/0x590
[ 1259.604221]  fifo_open+0x293/0xba0
[ 1259.604547]  do_dentry_open+0x4b7/0x1090
[ 1259.604913]  ? pipe_release+0x330/0x330
[ 1259.605257]  ? may_open+0x1e4/0x400
[ 1259.605571]  path_openat+0x19ba/0x2770
[ 1259.605915]  ? path_lookupat+0x860/0x860
[ 1259.606265]  ? find_held_lock+0x2c/0x110
[ 1259.606622]  do_filp_open+0x190/0x3e0
[ 1259.606946]  ? may_open_dev+0xf0/0xf0
[ 1259.607284]  ? do_raw_spin_lock+0x121/0x260
[ 1259.607654]  ? rwlock_bug.part.0+0x90/0x90
[ 1259.608022]  ? _raw_spin_unlock+0x1a/0x30
[ 1259.608375]  ? alloc_fd+0x2e7/0x670
[ 1259.608707]  do_sys_openat2+0x171/0x4d0
[ 1259.609079]  ? build_open_flags+0x6f0/0x6f0
[ 1259.609467]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1259.609902]  ? vfs_write+0x641/0xb10
[ 1259.609916]  ? wait_for_completion_io+0x270/0x270
[ 1259.609934]  __x64_sys_openat+0x13f/0x1f0
[ 1259.609946]  ? __ia32_sys_open+0x1c0/0x1c0
[ 1259.609957]  ? ksys_write+0x1a9/0x260
[ 1259.609977]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1259.609989]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1259.610003]  do_syscall_64+0x33/0x40
[ 1259.610014]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1259.610023] RIP: 0033:0x7fec5bd1db19
[ 1259.610035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1259.610048] RSP: 002b:00007fec59293188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1259.615961] RAX: ffffffffffffffda RBX: 00007fec5be30f60 RCX: 00007fec5bd1db19
[ 1259.616564] RDX: 0000000000020002 RSI: 0000000020000880 RDI: 0000000000000004
[ 1259.617190] RBP: 00007fec592931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1259.617802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1259.618410] R13: 00007fffba4da04f R14: 00007fec59293300 R15: 0000000000022000
03:35:06 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = dup(0xffffffffffffffff)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x30, r1, 0x8000000)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:35:06 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 23)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:35:06 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 33)

03:35:06 executing program 6:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0xf8, 0x8f, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x400, 0x4, @perf_config_ext={0x8000, 0x2}, 0x2d0f, 0x2, 0x101, 0x9, 0x7, 0x7fff, 0xffff, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x80000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8)
bind$packet(r3, &(0x7f0000000680)={0x11, 0x10, r4, 0x1, 0x1, 0x6, @remote}, 0x14)
readv(r1, &(0x7f0000001800)=[{&(0x7f00000000c0)=""/242, 0xf2}, {&(0x7f00000001c0)=""/98, 0x62}, {0x0}, {&(0x7f00000003c0)=""/72, 0x48}, {0x0}, {&(0x7f00000002c0)=""/212, 0xd4}, {&(0x7f0000000040)=""/25, 0x19}, {&(0x7f0000001700)=""/255, 0xff}], 0x8)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r5, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1259.712021] FAULT_INJECTION: forcing a failure.
[ 1259.712021] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1259.713097] CPU: 0 PID: 7536 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1259.713674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1259.714369] Call Trace:
[ 1259.714605]  dump_stack+0x107/0x167
[ 1259.714924]  should_fail.cold+0x5/0xa
[ 1259.715261]  _copy_from_user+0x2e/0x1b0
[ 1259.715613]  __copy_msghdr_from_user+0x91/0x4b0
[ 1259.716011]  ? __ia32_sys_shutdown+0x80/0x80
[ 1259.716387]  ? __lock_acquire+0x1657/0x5b00
[ 1259.716769]  ___sys_recvmsg+0xd5/0x200
[ 1259.717116]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1259.717535]  ? __fget_files+0x2cf/0x520
[ 1259.717877]  ? lock_acquire+0x197/0x470
[ 1259.718213]  ? find_held_lock+0x2c/0x110
[ 1259.718567]  ? __might_fault+0xd3/0x180
[ 1259.718906]  ? lock_downgrade+0x6d0/0x6d0
[ 1259.719271]  do_recvmmsg+0x24c/0x6d0
[ 1259.719594]  ? ___sys_recvmsg+0x200/0x200
[ 1259.719950]  ? lock_downgrade+0x6d0/0x6d0
[ 1259.720309]  ? ksys_write+0x12d/0x260
[ 1259.720651]  ? wait_for_completion_io+0x270/0x270
[ 1259.721084]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1259.721478]  ? vfs_write+0x354/0xb10
[ 1259.721799]  __x64_sys_recvmmsg+0x20f/0x260
[ 1259.722164]  ? ksys_write+0x1a9/0x260
[ 1259.722491]  ? __do_sys_socketcall+0x600/0x600
[ 1259.722886]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1259.723328]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1259.723773]  do_syscall_64+0x33/0x40
[ 1259.724090]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1259.724521] RIP: 0033:0x7f06d872db19
[ 1259.724847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1259.726392] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1259.727032] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1259.727630] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1259.728229] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
03:35:06 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
syz_io_uring_setup(0x3451, &(0x7f0000000240)={0x0, 0x8931, 0x10, 0x1, 0x70}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000400))
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r5}}, 0x0)
r6 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r9}}, 0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2, r9}}, 0xaed)
r10 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r10, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000340)=""/182, 0xb6})
syz_io_uring_setup(0x4159, &(0x7f0000000000)={0x0, 0x7498, 0x0, 0x0, 0x195, 0x0, r10}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0)=<r11=>0x0, &(0x7f0000000100))
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r11, 0x0, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x100000005, 0x0, 0x3ff, 0x0, 0x0, {0x0, r12}}, 0x8001)
pread64(r10, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1259.728841] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1259.729448] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1259.732230] FAULT_INJECTION: forcing a failure.
[ 1259.732230] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1259.733588] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s
[ 1259.733627] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1259.734383] CPU: 0 PID: 7535 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1259.734395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1259.734398] Call Trace:
[ 1259.734416]  dump_stack+0x107/0x167
[ 1259.734999] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1259.735543]  should_fail.cold+0x5/0xa
[ 1259.735560]  _copy_from_user+0x2e/0x1b0
[ 1259.735576]  __copy_msghdr_from_user+0x91/0x4b0
[ 1259.736280] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 1259.736479]  ? __ia32_sys_shutdown+0x80/0x80
[ 1259.736497]  ? __lock_acquire+0x1657/0x5b00
[ 1259.736837] print_req_error: 249 callbacks suppressed
[ 1259.736851] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[ 1259.737346]  ___sys_recvmsg+0xd5/0x200
[ 1259.738328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.738375]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1259.739007] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1259.739348]  ? __fget_files+0x2cf/0x520
[ 1259.739368]  ? lock_acquire+0x197/0x470
[ 1259.739753] buffer_io_error: 254 callbacks suppressed
[ 1259.739761] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1259.740153]  ? find_held_lock+0x2c/0x110
[ 1259.741235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.741345]  ? __might_fault+0xd3/0x180
[ 1259.741358]  ? lock_downgrade+0x6d0/0x6d0
[ 1259.741384]  do_recvmmsg+0x24c/0x6d0
[ 1259.741816] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1259.742217]  ? ___sys_recvmsg+0x200/0x200
[ 1259.742235]  ? lock_downgrade+0x6d0/0x6d0
[ 1259.743051] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1259.743371]  ? ksys_write+0x12d/0x260
[ 1259.743394]  ? wait_for_completion_io+0x270/0x270
[ 1259.743919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.744146]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1259.744763] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1259.745072]  ? vfs_write+0x354/0xb10
[ 1259.745089]  __x64_sys_recvmmsg+0x20f/0x260
[ 1259.745104]  ? ksys_write+0x1a9/0x260
[ 1259.745552] Buffer I/O error on dev sr0, logical block 2, async page read
[ 1259.745873]  ? __do_sys_socketcall+0x600/0x600
[ 1259.746427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.746527]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1259.747382] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1259.747682]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1259.748024] Buffer I/O error on dev sr0, logical block 3, async page read
[ 1259.748593]  do_syscall_64+0x33/0x40
[ 1259.748611]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1259.749154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.749347] RIP: 0033:0x7f96c2c53b19
[ 1259.749359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1259.749371] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246
[ 1259.749819] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1259.750185]  ORIG_RAX: 000000000000012b
[ 1259.750193] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1259.750201] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1259.750213] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1259.751031] Buffer I/O error on dev sr0, logical block 4, async page read
[ 1259.751322] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1259.751337] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
[ 1259.754506] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.764288] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1259.765142] Buffer I/O error on dev sr0, logical block 5, async page read
[ 1259.766116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.766596] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1259.767440] Buffer I/O error on dev sr0, logical block 6, async page read
[ 1259.768213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.768701] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1259.769567] Buffer I/O error on dev sr0, logical block 7, async page read
[ 1259.770278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.770761] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1259.771606] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1259.772294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.772780] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1259.773538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.774063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.774663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.775205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.775855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.776413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.777082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.778236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.778823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.779450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.779997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.780641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.781193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.781817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.783062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.783713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.784271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.785270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.785883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.786707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.787243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.787805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.789098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.790131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.791260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.791919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
03:35:06 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0) (fail_nth: 12)

[ 1259.792863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.793612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.794572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.795176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.796016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.796661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.797403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.798008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.798713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.799319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.800028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.800657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.801488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.802085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.802779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.803380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.804066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.804703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.805500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.806126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.806843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.807424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.807954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.808660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.809208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.809783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.810318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.810922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.811556] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.812091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.812678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.813233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.813810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.814384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.814918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.815473] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.816136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.817052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.817733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.818482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.819096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.819830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.820538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.821261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.821930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.822508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.823066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.823664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.824190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.824753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.825306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.825936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.826720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.827526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.828134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.828865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.829501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.830169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.830788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.831476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.832760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.835124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.835913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.836792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.838671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.839307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.840043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.840694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.842083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.842685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.843288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.843872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.844658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.845212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.845861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.846455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.847690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.850563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.851112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.851681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.852208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.852776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.853321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.853900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.855264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.855973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.856723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.861637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.862244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.862897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.863542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.864187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.864762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.865379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.865905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.866482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.867007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.867597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.868129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.868711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.869322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.869929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.870487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.871037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.871633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.874266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.874841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.875444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.876199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.876773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.877309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.877918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.878482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.879036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.879621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.880171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.880766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.881386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.881930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.882496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.883024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.883627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.884153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.884720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.889539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.890067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.890668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.891186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.891752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.892280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.892876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.893435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.894675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.895233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.897876] FAULT_INJECTION: forcing a failure.
[ 1259.897876] name failslab, interval 1, probability 0, space 0, times 0
[ 1259.899158] CPU: 0 PID: 7542 Comm: syz-executor.1 Not tainted 5.10.226 #1
[ 1259.899741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1259.900441] Call Trace:
[ 1259.900679]  dump_stack+0x107/0x167
[ 1259.901005]  should_fail.cold+0x5/0xa
[ 1259.901339]  ? alloc_pipe_info+0x1e5/0x590
[ 1259.901708]  should_failslab+0x5/0x20
[ 1259.902036]  __kmalloc+0x72/0x390
[ 1259.902339]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1259.902781]  alloc_pipe_info+0x1e5/0x590
[ 1259.903137]  fifo_open+0x293/0xba0
[ 1259.903456]  do_dentry_open+0x4b7/0x1090
[ 1259.903810]  ? pipe_release+0x330/0x330
[ 1259.904152]  ? may_open+0x1e4/0x400
[ 1259.904471]  path_openat+0x19ba/0x2770
[ 1259.904834]  ? path_lookupat+0x860/0x860
[ 1259.905197]  ? find_held_lock+0x2c/0x110
[ 1259.905566]  do_filp_open+0x190/0x3e0
[ 1259.905893]  ? may_open_dev+0xf0/0xf0
[ 1259.906238]  ? do_raw_spin_lock+0x121/0x260
[ 1259.906612]  ? rwlock_bug.part.0+0x90/0x90
[ 1259.906989]  ? _raw_spin_unlock+0x1a/0x30
[ 1259.907345]  ? alloc_fd+0x2e7/0x670
[ 1259.907677]  do_sys_openat2+0x171/0x4d0
[ 1259.908025]  ? build_open_flags+0x6f0/0x6f0
[ 1259.908397]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1259.908826]  ? wait_for_completion_io+0x270/0x270
[ 1259.909262]  __x64_sys_openat+0x13f/0x1f0
[ 1259.909623]  ? __ia32_sys_open+0x1c0/0x1c0
[ 1259.909988]  ? ksys_write+0x1a9/0x260
[ 1259.910329]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1259.910781]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1259.911232]  do_syscall_64+0x33/0x40
[ 1259.911564]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1259.911909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.912009] RIP: 0033:0x7fec5bd1db19
[ 1259.912029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1259.912676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.912844] RSP: 002b:00007fec59293188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1259.912861] RAX: ffffffffffffffda RBX: 00007fec5be30f60 RCX: 00007fec5bd1db19
[ 1259.912874] RDX: 0000000000020002 RSI: 0000000020000880 RDI: 0000000000000004
[ 1259.914541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.914845] RBP: 00007fec592931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1259.914858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1259.915629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.916093] R13: 00007fffba4da04f R14: 00007fec59293300 R15: 0000000000022000
[ 1259.919658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.920195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.920972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.924048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.924603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.925204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.925783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.926440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.926976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.927568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.928145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.928766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.929311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.930036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.930624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.931200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.931807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.932655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.933278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.933873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.934444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.935021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.935613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.936185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.936732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.937443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.938014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.938630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.939156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.939801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.940329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.940938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.941494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.942068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.942693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.943289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.943861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.944450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.944997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.945584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.946111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.947807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.951948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.953869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.954505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.955100] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.955731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.957702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.962654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.963280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.964068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.965882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.966523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.971509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.972148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.972769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.973553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
03:35:06 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1259.976489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.989584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.990269] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.990854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.993233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.994481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.995021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.996005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.996622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.997510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.998164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1259.999098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.000664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.001682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.002192] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1260.002457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.005246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.006662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.007242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.008208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.009124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.009710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.010233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.010818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.011368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.011953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.012623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.013626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.014641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.015681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.016861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.017423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.017997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.018583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.019245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.019876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.020463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.021070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.021680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.022249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.022849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.023490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.024109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.024723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.025307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.025923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.026526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.027095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.027734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.028303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.028993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.029602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.030157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.030761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.031311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.031882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.032449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.033029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.033647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.034219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.034785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.035366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.035955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.036595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.037176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.037806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.038588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.039182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.039811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.040428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.041004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.041586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.042148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.042765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.043403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.043999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.044622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.045202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.045802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.046417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.047169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.047752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.048443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.049112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.049805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.050584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.051240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.052027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.052698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.053387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.054041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.054648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.055204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.055804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.056426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.057001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.057620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.058190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.059650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.060737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.061295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.061942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.062519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.063098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.063822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.064448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.065259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.065909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.066520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.067298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.067903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.068523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.069076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.069686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.070214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.070883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.071565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.072145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.072726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.073321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.073908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.074588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.075112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.075694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.076216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.076911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.077535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.078184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.078727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.079299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.079847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.085756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.086407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.086975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.087697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.088330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.088955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.089773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.090489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.091054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.091691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.092241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.092845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.093710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.094277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.094858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.095476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.096126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.096785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.097446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.098090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.098674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.099244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.099857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.100532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.101134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.101744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.102296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.102945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.103609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.104214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.104818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.105453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.106113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.106675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.107257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.107936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.108545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.109113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.109740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.110521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.111168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.111773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.112384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.112942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.113591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.114122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.114804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.115393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.115970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.116575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.117279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.117865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.118478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.119095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.119724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.120249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.120864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.121573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.122154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.122722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.123453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.124081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.124753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.125318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.125946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.126589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.127175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.127771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.128379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.129149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.129785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.130315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.130958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.131564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.132145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.132718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.138205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.139313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.140524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.141823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.142902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.144067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.149498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.150621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.169993] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s
[ 1260.170845] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1260.171438] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1260.171983] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[ 1260.172851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1260.190849] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s
[ 1260.191693] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1260.192257] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1260.192833] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[ 1260.208914] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s
[ 1260.210048] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1260.210646] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1260.211194] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00
[ 1260.226308] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s
[ 1260.227145] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1260.227737] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1260.228280] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[ 1260.245863] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s
[ 1260.246686] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1260.247249] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1260.247829] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00
[ 1260.265503] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s
[ 1260.266317] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1260.267110] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1260.267692] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[ 1260.298186] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s
[ 1260.299791] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1260.300389] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1260.300955] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00
[ 1260.316796] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s
[ 1260.317637] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1260.318201] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1260.318769] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[ 1260.335929] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s
[ 1260.337098] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1260.337707] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1260.338253] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00
[ 1261.127277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1261.127909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1261.128531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1261.129182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1261.129732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1261.130254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1261.130800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1261.131350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1261.132148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1261.132756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1261.133435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1261.133960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1261.134530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1261.135076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1261.135755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1261.136289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1261.137068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1261.137711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
03:35:22 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x20000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
pread64(r1, &(0x7f0000000040)=""/8, 0x8, 0x4)

03:35:22 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00')

03:35:22 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x8000000000000)

03:35:22 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0) (fail_nth: 13)

03:35:22 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 34)

03:35:22 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r2, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6)
getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r1, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:35:22 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:35:22 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 24)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

[ 1275.612666] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1275.617018] FAULT_INJECTION: forcing a failure.
[ 1275.617018] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1275.618632] CPU: 0 PID: 7566 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1275.619218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1275.619928] Call Trace:
[ 1275.619948] FAULT_INJECTION: forcing a failure.
[ 1275.619948] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1275.620163]  dump_stack+0x107/0x167
[ 1275.620179]  should_fail.cold+0x5/0xa
[ 1275.621874]  _copy_from_user+0x2e/0x1b0
[ 1275.622222]  __copy_msghdr_from_user+0x91/0x4b0
[ 1275.622631]  ? __ia32_sys_shutdown+0x80/0x80
[ 1275.623007]  ? __lock_acquire+0x1657/0x5b00
[ 1275.623388]  ___sys_recvmsg+0xd5/0x200
[ 1275.623730]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1275.624150]  ? __fget_files+0x2cf/0x520
[ 1275.624503]  ? lock_acquire+0x197/0x470
[ 1275.624847]  ? find_held_lock+0x2c/0x110
[ 1275.625214]  ? __might_fault+0xd3/0x180
[ 1275.625562]  ? lock_downgrade+0x6d0/0x6d0
[ 1275.625929]  do_recvmmsg+0x24c/0x6d0
[ 1275.626252]  ? ___sys_recvmsg+0x200/0x200
[ 1275.626614]  ? lock_downgrade+0x6d0/0x6d0
[ 1275.626973]  ? ksys_write+0x12d/0x260
[ 1275.627309]  ? wait_for_completion_io+0x270/0x270
[ 1275.627731]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1275.628124]  ? vfs_write+0x354/0xb10
[ 1275.628450]  __x64_sys_recvmmsg+0x20f/0x260
[ 1275.628821]  ? ksys_write+0x1a9/0x260
[ 1275.629159]  ? __do_sys_socketcall+0x600/0x600
[ 1275.629561]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1275.632503]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1275.633091]  do_syscall_64+0x33/0x40
[ 1275.633415]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1275.634144] RIP: 0033:0x7f06d872db19
[ 1275.634468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1275.636020] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1275.636669] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1275.637285] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1275.637892] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1275.638495] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1275.639097] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1275.639727] CPU: 1 PID: 7569 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1275.640328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1275.641030] Call Trace:
[ 1275.641297]  dump_stack+0x107/0x167
[ 1275.641623]  should_fail.cold+0x5/0xa
[ 1275.641963]  _copy_from_user+0x2e/0x1b0
[ 1275.642306]  __copy_msghdr_from_user+0x91/0x4b0
[ 1275.642700]  ? __ia32_sys_shutdown+0x80/0x80
[ 1275.643075]  ? __lock_acquire+0x1657/0x5b00
[ 1275.643454]  ___sys_recvmsg+0xd5/0x200
[ 1275.643786]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1275.644211]  ? __fget_files+0x2cf/0x520
[ 1275.644552]  ? lock_acquire+0x197/0x470
[ 1275.644886]  ? find_held_lock+0x2c/0x110
[ 1275.649273]  ? __might_fault+0xd3/0x180
[ 1275.649608]  ? lock_downgrade+0x6d0/0x6d0
[ 1275.649971]  do_recvmmsg+0x24c/0x6d0
[ 1275.650289]  ? ___sys_recvmsg+0x200/0x200
[ 1275.650644]  ? lock_downgrade+0x6d0/0x6d0
[ 1275.651000]  ? ksys_write+0x12d/0x260
[ 1275.651333]  ? wait_for_completion_io+0x270/0x270
[ 1275.651747]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1275.652137]  ? vfs_write+0x354/0xb10
[ 1275.652457]  __x64_sys_recvmmsg+0x20f/0x260
[ 1275.652821]  ? ksys_write+0x1a9/0x260
[ 1275.653162]  ? __do_sys_socketcall+0x600/0x600
[ 1275.653624]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1275.654127]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1275.654673]  do_syscall_64+0x33/0x40
[ 1275.654998]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1275.655427] RIP: 0033:0x7f96c2c53b19
[ 1275.655743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1275.657276] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1275.657914] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1275.658509] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1275.659103] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1275.659696] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1275.660290] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
[ 1275.667304] FAULT_INJECTION: forcing a failure.
[ 1275.667304] name failslab, interval 1, probability 0, space 0, times 0
[ 1275.668586] CPU: 1 PID: 7568 Comm: syz-executor.1 Not tainted 5.10.226 #1
[ 1275.669176] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1275.669869] Call Trace:
[ 1275.670102]  dump_stack+0x107/0x167
[ 1275.670414]  should_fail.cold+0x5/0xa
[ 1275.670745]  ? create_object.isra.0+0x3a/0xa20
[ 1275.671143]  should_failslab+0x5/0x20
[ 1275.671468]  kmem_cache_alloc+0x5b/0x310
[ 1275.671816]  create_object.isra.0+0x3a/0xa20
[ 1275.672189]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1275.672621]  __kmalloc+0x16e/0x390
[ 1275.672930]  alloc_pipe_info+0x1e5/0x590
[ 1275.673292]  fifo_open+0x293/0xba0
[ 1275.673602]  do_dentry_open+0x4b7/0x1090
[ 1275.673955]  ? pipe_release+0x330/0x330
[ 1275.674294]  ? may_open+0x1e4/0x400
[ 1275.674609]  path_openat+0x19ba/0x2770
[ 1275.674950]  ? path_lookupat+0x860/0x860
[ 1275.675297]  ? find_held_lock+0x2c/0x110
[ 1275.675653]  do_filp_open+0x190/0x3e0
[ 1275.675975]  ? may_open_dev+0xf0/0xf0
[ 1275.676367]  ? do_raw_spin_lock+0x121/0x260
03:35:22 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="e60000010000002e2f66696c653000002432fd511a23eb3395154639d35effa872240ff42243e07cfeb40e529b5d0f7665a032343591b3747b69e27e9579df7f9326b82158a64907c1555c7de4f29ca477f5c59416afdad476435bb90d018dd6ac6e06bdc5ae055a88c72caa602dfd6680a86b25d5eb660653769759bf06000000e925e310de517bc037bf9b26f3e55862b6c1c2a0c8a528d6d55cc820488e669af22a4310ec7f0d57dff3b6224e9464def4e09d8fdbf94a82ad020d95264649c9d54c1f5ff1a19116031a79b80100000000000000ea3a1ab1d21bf99118d46920718f93647a2e465ea80e78"])
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200))
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup3(r0, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x80, 0x5, 0x5, 0x9, 0x5, 0x7fff})
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1275.676733]  ? rwlock_bug.part.0+0x90/0x90
[ 1275.677114]  ? _raw_spin_unlock+0x1a/0x30
[ 1275.677471]  ? alloc_fd+0x2e7/0x670
[ 1275.677792]  do_sys_openat2+0x171/0x4d0
[ 1275.678132]  ? build_open_flags+0x6f0/0x6f0
[ 1275.678497]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1275.678906]  ? wait_for_completion_io+0x270/0x270
[ 1275.679319]  __x64_sys_openat+0x13f/0x1f0
[ 1275.679671]  ? __ia32_sys_open+0x1c0/0x1c0
[ 1275.680026]  ? ksys_write+0x1a9/0x260
[ 1275.685197]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1275.685638]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1275.686074]  do_syscall_64+0x33/0x40
[ 1275.686389]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1275.686819] RIP: 0033:0x7fec5bd1db19
[ 1275.687134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1275.688662] RSP: 002b:00007fec59293188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1275.689310] RAX: ffffffffffffffda RBX: 00007fec5be30f60 RCX: 00007fec5bd1db19
[ 1275.689905] RDX: 0000000000020002 RSI: 0000000020000880 RDI: 0000000000000004
[ 1275.690501] RBP: 00007fec592931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1275.691096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1275.691692] R13: 00007fffba4da04f R14: 00007fec59293300 R15: 0000000000022000
03:35:22 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0) (fail_nth: 14)

03:35:22 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/41, 0x29}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x2, 0x1, 0x6)
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
pread64(r1, &(0x7f0000002100)=""/4096, 0x1000, 0x6)

03:35:22 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000040))

03:35:22 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 25)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:35:22 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 35)

03:35:22 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

[ 1275.877888] FAULT_INJECTION: forcing a failure.
[ 1275.877888] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1275.878987] CPU: 1 PID: 7590 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1275.879569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1275.880267] Call Trace:
[ 1275.880500]  dump_stack+0x107/0x167
[ 1275.880814]  should_fail.cold+0x5/0xa
[ 1275.881163]  _copy_from_user+0x2e/0x1b0
[ 1275.881511]  __copy_msghdr_from_user+0x91/0x4b0
[ 1275.881909]  ? __ia32_sys_shutdown+0x80/0x80
[ 1275.882292]  ? __lock_acquire+0x1657/0x5b00
[ 1275.882673]  ___sys_recvmsg+0xd5/0x200
[ 1275.883006]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1275.883431]  ? __fget_files+0x2cf/0x520
[ 1275.883776]  ? lock_acquire+0x197/0x470
[ 1275.884115]  ? find_held_lock+0x2c/0x110
[ 1275.884468]  ? __might_fault+0xd3/0x180
[ 1275.884810]  ? lock_downgrade+0x6d0/0x6d0
[ 1275.885191]  do_recvmmsg+0x24c/0x6d0
[ 1275.885516]  ? ___sys_recvmsg+0x200/0x200
[ 1275.885872]  ? lock_downgrade+0x6d0/0x6d0
[ 1275.886233]  ? ksys_write+0x12d/0x260
[ 1275.886572]  ? wait_for_completion_io+0x270/0x270
[ 1275.886987]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1275.887383]  ? vfs_write+0x354/0xb10
[ 1275.887706]  __x64_sys_recvmmsg+0x20f/0x260
[ 1275.888073]  ? ksys_write+0x1a9/0x260
[ 1275.888407]  ? __do_sys_socketcall+0x600/0x600
[ 1275.888799]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1275.889257]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1275.889697]  do_syscall_64+0x33/0x40
[ 1275.890015]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1275.890450] RIP: 0033:0x7f06d872db19
[ 1275.890769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1275.892308] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1275.892952] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1275.893568] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1275.894168] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1275.894772] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1275.895389] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1275.898812] FAULT_INJECTION: forcing a failure.
[ 1275.898812] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1275.899915] CPU: 0 PID: 7588 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1275.900500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1275.901213] Call Trace:
[ 1275.901453]  dump_stack+0x107/0x167
[ 1275.901769]  should_fail.cold+0x5/0xa
[ 1275.902105]  _copy_from_user+0x2e/0x1b0
[ 1275.902456]  __copy_msghdr_from_user+0x91/0x4b0
[ 1275.902855]  ? __ia32_sys_shutdown+0x80/0x80
[ 1275.903234]  ? __lock_acquire+0x1657/0x5b00
[ 1275.903621]  ___sys_recvmsg+0xd5/0x200
[ 1275.903955]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1275.904380]  ? __fget_files+0x2cf/0x520
[ 1275.904730]  ? lock_acquire+0x197/0x470
[ 1275.905086]  ? find_held_lock+0x2c/0x110
[ 1275.905445]  ? __might_fault+0xd3/0x180
[ 1275.905791]  ? lock_downgrade+0x6d0/0x6d0
[ 1275.906161]  do_recvmmsg+0x24c/0x6d0
[ 1275.906485]  ? ___sys_recvmsg+0x200/0x200
[ 1275.906844]  ? lock_downgrade+0x6d0/0x6d0
[ 1275.907219]  ? ksys_write+0x12d/0x260
[ 1275.907573]  ? wait_for_completion_io+0x270/0x270
[ 1275.907994]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1275.908388]  ? vfs_write+0x354/0xb10
[ 1275.908714]  __x64_sys_recvmmsg+0x20f/0x260
[ 1275.929139]  ? ksys_write+0x1a9/0x260
[ 1275.929470]  ? __do_sys_socketcall+0x600/0x600
[ 1275.929867]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1275.930314]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1275.930756]  do_syscall_64+0x33/0x40
[ 1275.931080]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1275.931513] RIP: 0033:0x7f96c2c53b19
[ 1275.931834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1275.933396] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1275.934045] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1275.934648] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1275.935251] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1275.935852] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1275.936454] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:35:22 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20003, 0x0)

03:35:22 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 26)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:35:22 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/235, 0xeb}], 0x1)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=<r2=>0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x20, 0x5f, 0xff, 0x0, 0x0, 0x6b5d, 0x40000, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x4, @perf_config_ext={0xc8, 0x5a}, 0x200, 0x1, 0x81, 0x5, 0x7, 0xfffffff8, 0x17c, 0x0, 0x5}, r2, 0x7, r1, 0x3)
openat(r1, &(0x7f00000001c0)='./file0\x00', 0x800, 0x7)

[ 1276.007215] FAULT_INJECTION: forcing a failure.
[ 1276.007215] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1276.008638] CPU: 1 PID: 7597 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1276.009224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1276.009918] Call Trace:
[ 1276.010151]  dump_stack+0x107/0x167
[ 1276.010464]  should_fail.cold+0x5/0xa
[ 1276.010795]  __alloc_pages_nodemask+0x182/0x600
[ 1276.011191]  ? lock_chain_count+0x20/0x20
[ 1276.011546]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 1276.012066]  alloc_pages_vma+0xbb/0x410
[ 1276.012410]  wp_page_copy+0xee7/0x1f00
[ 1276.012750]  ? print_bad_pte+0x5a0/0x5a0
[ 1276.013108]  ? lock_downgrade+0x6d0/0x6d0
[ 1276.013461]  ? vm_normal_page+0x162/0x2e0
[ 1276.013820]  ? count_memcg_event_mm.part.0+0x10f/0x2f0
[ 1276.014269]  do_wp_page+0x27b/0x1390
[ 1276.014598]  handle_mm_fault+0x1cc7/0x3500
[ 1276.014963]  ? ip6_datagram_recv_common_ctl+0x3f0/0x3f0
[ 1276.015415]  ? ip6_datagram_recv_common_ctl+0x2c2/0x3f0
[ 1276.015867]  ? __skb_datagram_iter+0x1aa/0x880
[ 1276.016251]  ? __pmd_alloc+0x5e0/0x5e0
[ 1276.016591]  ? vmacache_find+0x55/0x2a0
[ 1276.016938]  do_user_addr_fault+0x56e/0xc60
[ 1276.017328]  exc_page_fault+0xa2/0x1a0
[ 1276.017663]  asm_exc_page_fault+0x1e/0x30
[ 1276.018017] RIP: 0010:__put_user_nocheck_4+0x3/0x11
[ 1276.018438] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca e9 81 32 1d 02 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca e9 62 32 1d 02 66 90 48 bb f9 ef ff ff ff 7f
[ 1276.019969] RSP: 0018:ffff88804a2679c8 EFLAGS: 00050206
[ 1276.020420] RAX: 0000000000000028 RBX: ffffffff831100d0 RCX: 0000000020002030
[ 1276.021027] RDX: 1ffff1100944cfc3 RSI: ffffffff83105c9a RDI: 0000000000000005
[ 1276.021631] RBP: ffff88804a267dc8 R08: 0000000000000001 R09: ffff88800d20a85f
[ 1276.022229] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000020002030
[ 1276.022829] R13: 0000000020002000 R14: 0000000000000062 R15: 0000000000000004
[ 1276.023437]  ? sock_common_getsockopt+0xb0/0xb0
[ 1276.023834]  ? ____sys_recvmsg+0x2aa/0x590
[ 1276.024209]  ____sys_recvmsg+0x2dd/0x590
[ 1276.024560]  ? kernel_recvmsg+0x80/0x80
[ 1276.024902]  ? __import_iovec+0x458/0x590
[ 1276.025272]  ? import_iovec+0x83/0xb0
[ 1276.025603]  ___sys_recvmsg+0x127/0x200
[ 1276.025943]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1276.026362]  ? __fget_files+0x2cf/0x520
[ 1276.026706]  ? lock_acquire+0x197/0x470
[ 1276.027043]  ? find_held_lock+0x2c/0x110
[ 1276.027394]  ? __might_fault+0xd3/0x180
[ 1276.027733]  ? lock_downgrade+0x6d0/0x6d0
[ 1276.028101]  do_recvmmsg+0x24c/0x6d0
[ 1276.028424]  ? ___sys_recvmsg+0x200/0x200
[ 1276.028781]  ? lock_downgrade+0x6d0/0x6d0
[ 1276.029154]  ? ksys_write+0x12d/0x260
[ 1276.029505]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1276.029949]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1276.030412]  __x64_sys_recvmmsg+0x20f/0x260
[ 1276.030780]  ? __do_sys_socketcall+0x600/0x600
[ 1276.031170]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1276.031609]  do_syscall_64+0x33/0x40
[ 1276.031925]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1276.032358] RIP: 0033:0x7f06d872db19
[ 1276.032675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1276.034220] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1276.034860] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1276.035458] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1276.036057] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1276.036655] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1276.037268] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
03:35:37 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 36)

03:35:37 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x100000000000000)

03:35:37 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, <r1=>0x0})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x430301, 0x108)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xc9, 0x40, 0x9, 0x3, 0x0, 0x0, 0x28, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_config_ext={0x4, 0xffffffff}, 0x1c1a8, 0x6, 0x7, 0x0, 0x5, 0xffff, 0x9, 0x0, 0x1000, 0x0, 0x8}, r1, 0xd, r3, 0x3)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000000c0)={0x0, <r5=>0x0})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r6, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1, 0xc7, 0x0, 0xf7, 0x0, 0x3, 0x88900, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000000, 0x2, @perf_bp={&(0x7f00000001c0), 0xf}, 0x2, 0x9, 0x1, 0x4, 0xcbe2, 0x7, 0x8000, 0x0, 0x1, 0x0, 0x7}, r5, 0xffffffffffffffff, r6, 0x1)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00', @ANYRES32=<r7=>r3, @ANYBLOB="01010000060000002e2f66696c653000"])
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xff, 0x7, 0x1c, 0x8, 0x0, 0x3a, 0x3400, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5705, 0x2, @perf_config_ext={0x3ff, 0x6}, 0x42000, 0x5, 0x6, 0x8, 0x1, 0x4, 0x2, 0x0, 0x8, 0x0, 0x101}, r5, 0xa, r6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x10010, r7, 0x1006e000)
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r8, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:35:37 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:35:37 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:35:37 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x2)

03:35:37 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r2 = getpid()
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x1f, 0x6, 0xa6, 0x4, 0x0, 0x2, 0x40000, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x5, 0x9}, 0x4400, 0xddf, 0x9, 0x4, 0x100000000, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x100000000}, r2, 0x9, r0, 0xa)
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
openat(r1, &(0x7f00000000c0)='./file0\x00', 0xf139e94c7a3899c9, 0x48)
r3 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x7, &(0x7f0000000880)=[{&(0x7f0000000180)="55f074a20c0164c24cc1555bb4da580487", 0x11, 0x7}, {&(0x7f0000000340)="7a18d539ef71292fead6fa26347a73f3df14cc75521fe26e1454aa48c5e72661007083415df7be9c6487ba98a66fa8cee84c17cf020f6e8e2d2239030900401e709316a41f9f20fb58c6a5b0587759782fc2cce05883f7f5875cb57019adf3c80746369d03bc6c0b0423e851d9097ff68959cd92f6c10a68cfe3136e767db6c487482aef55", 0x85, 0x10001}, {&(0x7f0000000400)="e137c939f0720f7381c60b7994691f84fc440adc97c0c5eb6d968d82b4aed0c8ea453b02aa46973551f0f94e1d96cabc344072ccd1a99abf54e5bbd1ed9f29afb64bf718bbedf0add3b120a07eb614c24aad0f6d1465328e4910ceb71ad808113bbf17937956bff8fe3b69c9ce16f16c75cd4b85643d45d767a1b0b67369ba5c75f00552053f651a1acd56f15dd6901346db34de7515e4434caca2889feef653110bbaa3592bd3dd6f7ca2da1bb1b034a0188c5c204defdc186a1ca573e2e2503be5f9ac55a0cb5765206f81e89b25a3989df6b107b0596717ca982f3f3ffe1040c2f646b252671740", 0xe9, 0x4251}, {&(0x7f0000000500)="ac21701a1296c3405cd7c546df35c1071ab240260b14ad6d57438c0101efb6c11f988c6e345c294f08b305d56c9da0f9b4719b7b56dd82bb65ded337ae9423521b68fa92f0e5f28c200570d08c27151bac7f852ba72556a303f16f5b872dc2100be8f031a7d0e19970aae48cfa456a8c43e5765b2aab7faa1e297b7e7af983e8c6600e7a7a249bc5f168a914432e9a4cff3fbe63306f00c2c90a45d2cf02e15245391634e08dff47a8d155322afe8ec6a9cde75895416bd7a82bb363535d36fe0915ccfcefc46d167c28b215f6eddae1b8d42747e09f87309ca50488d5b6", 0xde, 0x7f}, {&(0x7f0000000600)="69a81d15999677b1c22659d03bd62c1e427705262572413379870f4a26b3a4f0f420c1411ff10112f7adae31dea93fb9fd4466d8056450c9d7ab3a51612163db521db0bae57930b183a2771b8463bcb8dfc02260f89e74e4d796b72d07865a006a0d3fe7532d37edf0e5112a05fbc0c906fa96832794136f400a020c395e64e328201fdb51925167b2831a5c72f8b34a7502902fe0d10422024d09d0e4f2b72d3358eef166c3b5fc2d2e5d96606a7373b85bbb25dd54b5fa6cf599fe1249ec41ee61f2b9fc1dc71a9c3f35e6eae5012d7dfebd93a0e0396ca32cdc5c306864f985afb13cee236bf1b054c90dcb38588e3b2d6e9427e2", 0xf6, 0x7}, {&(0x7f0000000700)="e99155fa9a57017a79da08020e4c5f2dc2de42544038315b74ca5627d80b9d1ce878b5bd316d5938302de48ca45aecb9a2557e0ca6d1f5e1377d5d33449d8b4949c5e42ddf26b713ea5efd1e787692b78191e5c3ee4354538370e2b833fbdf324efcebf81ebe32a1bb95ba962afece6e70c0e31b3c846100190d169a12552c3d9bbf0126dec0dc625c561a89f24b28", 0x8f, 0x5}, {&(0x7f00000007c0)="21dd404813864a0f8890ce2102522907659c7e72fdd673e88426c1747293122c259ffae608179529f087465dff93becb8bb10569d0a7eb7bc4a5379f8f45e0d14e412ae0d8268530678ebbc69a9e28e34a8ee54bc5af88a23786dbe80f17af2a2fb6e8a653b710634387efd31e7fa4d682d7567d8d717edd60ddfee9531e05e029d17c5a2d4e3c258040bac126ea25966b5b5a039100f5bf63335d53505de9e5d1ac96672beea27157dc7e0f6c", 0xad, 0xe0c2}], 0x2000000, &(0x7f0000000940)={[{@dots}, {@fat=@uid={'uid', 0x3d, 0xee01}}, {@dots}], [{@fowner_gt={'fowner>', 0xee00}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@subj_role={'subj_role', 0x3d, '/#)/('}}, {@subj_user={'subj_user', 0x3d, '&$'}}, {@uid_lt={'uid<', 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]})
unlinkat(r3, &(0x7f00000001c0)='./file0\x00', 0x0)

03:35:37 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 27)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

[ 1290.233678] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1290.247974] FAULT_INJECTION: forcing a failure.
[ 1290.247974] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1290.249166] CPU: 1 PID: 7613 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1290.249801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1290.250497] Call Trace:
[ 1290.250782]  dump_stack+0x107/0x167
[ 1290.251098]  should_fail.cold+0x5/0xa
[ 1290.251427]  _copy_from_user+0x2e/0x1b0
[ 1290.251821]  __copy_msghdr_from_user+0x91/0x4b0
[ 1290.252217]  ? __ia32_sys_shutdown+0x80/0x80
[ 1290.252593]  ? __lock_acquire+0x1657/0x5b00
[ 1290.253037]  ___sys_recvmsg+0xd5/0x200
[ 1290.253390]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1290.253853]  ? __fget_files+0x2cf/0x520
[ 1290.254195]  ? lock_acquire+0x197/0x470
[ 1290.254532]  ? find_held_lock+0x2c/0x110
[ 1290.254937]  ? __might_fault+0xd3/0x180
[ 1290.255277]  ? lock_downgrade+0x6d0/0x6d0
[ 1290.255821]  do_recvmmsg+0x24c/0x6d0
[ 1290.256142]  ? ___sys_recvmsg+0x200/0x200
[ 1290.256156] FAT-fs (loop5): Unrecognized mount option "fowner>00000000000000060928" or missing value
[ 1290.256504]  ? lock_downgrade+0x6d0/0x6d0
[ 1290.256524]  ? ksys_write+0x12d/0x260
[ 1290.256549]  ? wait_for_completion_io+0x270/0x270
[ 1290.259597]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1290.260033]  ? vfs_write+0x354/0xb10
[ 1290.260355]  __x64_sys_recvmmsg+0x20f/0x260
[ 1290.260789]  ? ksys_write+0x1a9/0x260
[ 1290.261115]  ? __do_sys_socketcall+0x600/0x600
[ 1290.261528]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1290.262015]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1290.262453]  do_syscall_64+0x33/0x40
[ 1290.262824]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1290.263261] RIP: 0033:0x7f96c2c53b19
[ 1290.263579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1290.265222] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1290.265920] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1290.266526] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1290.267173] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1290.267818] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1290.268417] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
[ 1290.281805] FAULT_INJECTION: forcing a failure.
[ 1290.281805] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1290.282943] CPU: 1 PID: 7624 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1290.283520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1290.286944] Call Trace:
[ 1290.287176]  dump_stack+0x107/0x167
[ 1290.287492]  should_fail.cold+0x5/0xa
[ 1290.287873]  _copy_from_user+0x2e/0x1b0
[ 1290.288217]  __copy_msghdr_from_user+0x91/0x4b0
[ 1290.288615]  ? __ia32_sys_shutdown+0x80/0x80
[ 1290.289055]  ? __lock_acquire+0x1657/0x5b00
[ 1290.289454]  ___sys_recvmsg+0xd5/0x200
[ 1290.289839]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1290.290109] FAT-fs (loop5): Unrecognized mount option "fowner>00000000000000060928" or missing value
[ 1290.290262]  ? __fget_files+0x2cf/0x520
[ 1290.291424]  ? lock_acquire+0x197/0x470
[ 1290.291819]  ? find_held_lock+0x2c/0x110
[ 1290.292167]  ? __might_fault+0xd3/0x180
[ 1290.292503]  ? lock_downgrade+0x6d0/0x6d0
[ 1290.292935]  do_recvmmsg+0x24c/0x6d0
[ 1290.293266]  ? ___sys_recvmsg+0x200/0x200
[ 1290.293628]  ? lock_downgrade+0x6d0/0x6d0
[ 1290.294028]  ? ksys_write+0x12d/0x260
[ 1290.294371]  ? wait_for_completion_io+0x270/0x270
[ 1290.294940]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1290.295336]  ? vfs_write+0x354/0xb10
[ 1290.295854]  __x64_sys_recvmmsg+0x20f/0x260
[ 1290.296219]  ? ksys_write+0x1a9/0x260
[ 1290.296635]  ? __do_sys_socketcall+0x600/0x600
[ 1290.297103]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1290.298501]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1290.299105]  do_syscall_64+0x33/0x40
[ 1290.299424]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1290.300046] RIP: 0033:0x7f06d872db19
[ 1290.300363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1290.302334] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1290.303120] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1290.303851] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1290.304450] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1290.305122] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1290.309331] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
03:35:37 executing program 5:
syz_io_uring_setup(0x8f1, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000000340)=""/4092, 0xffc, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x2000c2)
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
getdents(r1, &(0x7f0000000040)=""/19, 0x13)

03:35:37 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x4)

03:35:37 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x408000, 0x100)
openat(r1, &(0x7f0000000040)='./file0\x00', 0x4400, 0xc4)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)={0x0, <r3=>0x0})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000000c0)={0x0, <r5=>0x0})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000340)={0x10c018000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x2b}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f00000002c0)=""/12, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5], 0x7}, 0x58)
sendfile(r1, r0, &(0x7f00000000c0)=0x1000, 0xf3)

03:35:37 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 37)

03:35:37 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 28)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:35:37 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
dup2(r1, 0xffffffffffffffff)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1290.537009] FAULT_INJECTION: forcing a failure.
[ 1290.537009] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1290.538235] CPU: 1 PID: 7647 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1290.538303] FAULT_INJECTION: forcing a failure.
[ 1290.538303] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1290.538809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1290.538813] Call Trace:
[ 1290.538832]  dump_stack+0x107/0x167
[ 1290.538845]  should_fail.cold+0x5/0xa
[ 1290.538872]  _copy_from_user+0x2e/0x1b0
[ 1290.545792]  __copy_msghdr_from_user+0x91/0x4b0
[ 1290.546186]  ? __ia32_sys_shutdown+0x80/0x80
[ 1290.546568]  ? __lock_acquire+0x1657/0x5b00
[ 1290.546944]  ___sys_recvmsg+0xd5/0x200
[ 1290.547275]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1290.547700]  ? __fget_files+0x2cf/0x520
[ 1290.548041]  ? lock_acquire+0x197/0x470
[ 1290.548376]  ? find_held_lock+0x2c/0x110
[ 1290.548732]  ? __might_fault+0xd3/0x180
[ 1290.549068]  ? lock_downgrade+0x6d0/0x6d0
[ 1290.549451]  do_recvmmsg+0x24c/0x6d0
[ 1290.549778]  ? ___sys_recvmsg+0x200/0x200
[ 1290.550130]  ? lock_downgrade+0x6d0/0x6d0
[ 1290.550493]  ? ksys_write+0x12d/0x260
[ 1290.550830]  ? wait_for_completion_io+0x270/0x270
[ 1290.551241]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1290.551643]  ? vfs_write+0x354/0xb10
[ 1290.551963]  __x64_sys_recvmmsg+0x20f/0x260
[ 1290.552328]  ? ksys_write+0x1a9/0x260
[ 1290.552660]  ? __do_sys_socketcall+0x600/0x600
[ 1290.553054]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1290.553512]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1290.553951]  do_syscall_64+0x33/0x40
[ 1290.554267]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1290.554710] RIP: 0033:0x7f06d872db19
[ 1290.555028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1290.556579] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1290.557236] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1290.557846] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1290.558443] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1290.559040] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1290.559642] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1290.560261] CPU: 0 PID: 7644 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1290.560886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1290.561636] Call Trace:
[ 1290.561882]  dump_stack+0x107/0x167
[ 1290.562213]  should_fail.cold+0x5/0xa
[ 1290.562562]  _copy_from_user+0x2e/0x1b0
[ 1290.562923]  __copy_msghdr_from_user+0x91/0x4b0
[ 1290.563342]  ? __ia32_sys_shutdown+0x80/0x80
[ 1290.563737]  ? __lock_acquire+0x1657/0x5b00
[ 1290.564138]  ___sys_recvmsg+0xd5/0x200
[ 1290.564490]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1290.564924]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1290.565403]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1290.565794]  ? trace_hardirqs_on+0x5b/0x180
[ 1290.566183]  ? lock_acquire+0x197/0x470
[ 1290.566534]  ? find_held_lock+0x2c/0x110
[ 1290.566900]  ? __might_fault+0xd3/0x180
[ 1290.567254]  ? lock_downgrade+0x6d0/0x6d0
[ 1290.567625]  ? io_schedule_timeout+0x140/0x140
[ 1290.568041]  do_recvmmsg+0x24c/0x6d0
[ 1290.568381]  ? ___sys_recvmsg+0x200/0x200
[ 1290.568748]  ? lock_downgrade+0x6d0/0x6d0
[ 1290.569126]  ? ksys_write+0x12d/0x260
[ 1290.569500]  ? wait_for_completion_io+0x270/0x270
[ 1290.569929]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1290.570340]  ? vfs_write+0x354/0xb10
[ 1290.570677]  __x64_sys_recvmmsg+0x20f/0x260
[ 1290.571059]  ? ksys_write+0x1a9/0x260
[ 1290.571400]  ? __do_sys_socketcall+0x600/0x600
[ 1290.571814]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1290.572277]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1290.572739]  do_syscall_64+0x33/0x40
[ 1290.573073]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1290.573543] RIP: 0033:0x7f96c2c53b19
[ 1290.573875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1290.575459] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1290.576135] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1290.576764] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1290.577408] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1290.578027] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1290.578651] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:35:37 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="fb310002000010002e2f01006c653000"])

03:35:37 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x6)

03:35:37 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1290.685696] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1304.868986] FAULT_INJECTION: forcing a failure.
[ 1304.868986] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1304.870105] CPU: 1 PID: 7671 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1304.870683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1304.871385] Call Trace:
[ 1304.871618]  dump_stack+0x107/0x167
[ 1304.871931]  should_fail.cold+0x5/0xa
[ 1304.872263]  _copy_from_user+0x2e/0x1b0
[ 1304.872610]  __copy_msghdr_from_user+0x91/0x4b0
[ 1304.873007]  ? __ia32_sys_shutdown+0x80/0x80
[ 1304.873528]  ? __lock_acquire+0x1657/0x5b00
[ 1304.874283]  ___sys_recvmsg+0xd5/0x200
[ 1304.874954]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1304.875801]  ? __fget_files+0x2cf/0x520
[ 1304.876486]  ? lock_acquire+0x197/0x470
03:35:51 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:35:51 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x200000000000000)

03:35:51 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 38)

03:35:51 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 29)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

[ 1304.877168]  ? find_held_lock+0x2c/0x110
[ 1304.877622]  ? __might_fault+0xd3/0x180
[ 1304.877959]  ? lock_downgrade+0x6d0/0x6d0
[ 1304.881617]  do_recvmmsg+0x24c/0x6d0
[ 1304.881939]  ? ___sys_recvmsg+0x200/0x200
[ 1304.882289]  ? lock_downgrade+0x6d0/0x6d0
[ 1304.882646]  ? ksys_write+0x12d/0x260
[ 1304.882981]  ? wait_for_completion_io+0x270/0x270
[ 1304.883392]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1304.883781]  ? vfs_write+0x354/0xb10
[ 1304.884106]  __x64_sys_recvmmsg+0x20f/0x260
[ 1304.884468]  ? ksys_write+0x1a9/0x260
[ 1304.884789]  ? __do_sys_socketcall+0x600/0x600
[ 1304.885174]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1304.885629]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1304.886065]  do_syscall_64+0x33/0x40
[ 1304.886381]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
03:35:51 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x8)

03:35:51 executing program 6:
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)={0x1})
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)={0x0, <r2=>0x0})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r4 = creat(0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000100)={<r7=>0x0})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="001800007bc2000000000000b9ab2b3b8d7d4ebbce54cdb6a461c1df8be3a0642cf5dc46855e3ace55d874c740080d888b96e4757e36cc210045cb6fc11ef0a47669756aef14d6673fa1ff20091748b7a93ee050ba01fce417472c6e66436b65130539259cabb26a8cf4a3d10c128e096410313c9d9adcdce087d7a47bc9d20f094728a0e7e3421d17d84cadda33dcd71483e2f4a2ec9a97f0949f3b6b7780ad8b855bdf07d3d2b9070a70221820a474", @ANYRESDEC=r7])
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000480)=r7)
sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x334, 0x33, 0x800, 0x70bd2d, 0x25dfdbfe, {0xf}, [@nested={0x20, 0x1d, 0x0, 0x1, [@typed={0xb, 0x82, 0x0, 0x0, @str='\'&:}/%\x00'}, @typed={0x8, 0x9, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x26, 0x0, 0x0, @pid=r2}]}, @generic="f7cbbd92f9c74b3de41b37dd1beffd6048d52c7e4d042dfc6d85d6538a73b84194744debb298b85dd7124c37c4aaae2944949f817c64059f8aed98c022fa2f403d3df4db2b92", @generic="ab6af16c641e6d125bc4d2acf81cdb1e984f01226da969132988baab4a11053a05839bd0771b3f4af74a7151ceea7546900c594df604746833d1c3f0a83a14b2ab6f3334979ba0f9aa90c02cb6d15e06cd2e98377161509e753fa62175758eaba36679d94401d40de0ba13564d8adc8894320fda2e14bd2e3fcfc6ef3bb0dd54a66e1f54f3afba7ad147400ba6adcc3e8e1300708009f90606a279454349080d9fa7244d86adb0b028e07a16b5e1218dd78eb75a86222d9a1509ebd447bc5e4e93029b102924dd4a748c4b112d896494e3e83bf8e3521eab40b4407fb549550f6064286cc9901986a119e3d4135eef7a2a397274b731", @nested={0x1ab, 0x5a, 0x0, 0x1, [@generic="4c2b2e04c40394a55d94720ac305ea7fa2fdb63a932a37afb2f3ddcce30367f9a1515b486e4fb786cb430c8dcb46ec1bcd27f34ca81285605e1b1fac06e04b96c687557382bdb8a85fadd36d86ed78fd9ebe49b949b55cc299970593c731fc65f46c4899cc5721a31d458189e4e97e96397a787ee6c69ff47bebe517869d2c60a2abc378c3d0a6680696e37caf6f9d0ed7a2413a14f6c0715f192fb5d3760304134cb22434b60c5b97b2decd3ff574790f7123f4778dd2b35f7b17d9450a2f5e3ed14a35becab4c9bb303d2bcee0bd3e81b00a734900", @generic="88c265e79c964b7ae2f78a1813b18150e31fc5d8947355e89cd8b6495371f04056e2852f5beed49b22d0d8216519654a720f67b0c3a25c9d697126", @generic="8e6da8d15726fbe2056e9f5eff10c0a985b3e0f04a52ba56f26c5a93efbcbc3a691f84a1e4a0177eb0c57c5137e0489402c563baa9999fa06d90f6c892b07799e33a0d03c919f0dee561bc2c5b140e8809bab672242b17331ed29dd55cc35411cced2e4bbb8f68854f0e55b9c3763137f0c365612ba892f77956a7202bab9493971040ab95271ea2d2a673433be5a5b7ed2830773582"]}, @typed={0xd, 0x21, 0x0, 0x0, @str='#,\\\'//\\\\\x00'}, @typed={0x8, 0x83, 0x0, 0x0, @fd=r3}]}, 0x334}, 0x1, 0x0, 0x0, 0x24000000}, 0x44040)

03:35:51 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1304.893350] RIP: 0033:0x7f06d872db19
[ 1304.901649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1304.903175] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1304.903814] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1304.904415] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1304.905010] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1304.905625] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1304.906226] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1304.926281] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1304.936587] FAULT_INJECTION: forcing a failure.
[ 1304.936587] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1304.937689] CPU: 0 PID: 7679 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1304.938269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1304.938962] Call Trace:
[ 1304.939193]  dump_stack+0x107/0x167
[ 1304.939507]  should_fail.cold+0x5/0xa
[ 1304.939837]  _copy_from_user+0x2e/0x1b0
[ 1304.940185]  __copy_msghdr_from_user+0x91/0x4b0
[ 1304.940583]  ? __ia32_sys_shutdown+0x80/0x80
[ 1304.940963]  ? __lock_acquire+0x1657/0x5b00
[ 1304.941373]  ___sys_recvmsg+0xd5/0x200
[ 1304.941745]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1304.942170]  ? lock_acquire+0x197/0x470
[ 1304.942507]  ? find_held_lock+0x2c/0x110
[ 1304.942857]  ? __might_fault+0xd3/0x180
[ 1304.943194]  ? lock_downgrade+0x6d0/0x6d0
[ 1304.943562]  do_recvmmsg+0x24c/0x6d0
[ 1304.943883]  ? ___sys_recvmsg+0x200/0x200
[ 1304.944235]  ? lock_downgrade+0x6d0/0x6d0
[ 1304.944592]  ? ksys_write+0x12d/0x260
[ 1304.944927]  ? wait_for_completion_io+0x270/0x270
[ 1304.945368]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1304.945795]  ? vfs_write+0x354/0xb10
[ 1304.946118]  __x64_sys_recvmmsg+0x20f/0x260
[ 1304.946483]  ? ksys_write+0x1a9/0x260
[ 1304.946807]  ? __do_sys_socketcall+0x600/0x600
[ 1304.947195]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1304.947637]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1304.948072]  do_syscall_64+0x33/0x40
[ 1304.948387]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1304.948817] RIP: 0033:0x7f96c2c53b19
[ 1304.949133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1304.950727] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1304.951368] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1304.951964] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1304.952560] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1304.953155] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1304.953816] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:35:51 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r4}}, 0x0)
syz_io_uring_setup(0x4b44, &(0x7f0000000000)={0x0, 0x64d6, 0x2, 0x2, 0x136, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=<r5=>0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r5, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x9, 0x8, {0x0, r0}, 0x9, 0x4, 0x0, {0x0, r6, r0}}, 0x1f)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r7, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:35:51 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x18)

03:35:51 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
openat(r0, &(0x7f0000000000)='./file0\x00', 0x88000, 0x10)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:35:51 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x8010, r1, 0x0)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
lseek(r1, 0x5, 0x3)

03:35:52 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 39)

03:35:52 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 30)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:35:52 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x600)

03:35:52 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x94a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x108001, 0x0)
r2 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x2, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000100)="1b13c0cff870587bafdc3873fe30dfbdfd25595d080d276658a5db03a0b0413c68835bc0282f6ff09f8700ee8e8846e28224aaf6b19557888f1795fbc58286ef74f45ce29b0daf7448502dc6005d1d5e69aa39cdc588e538dc750f7fd4fd9ff12af729df43cfaed9ec244a592d2ff17f3abfca2e0c9bdebde6168a87afd6a70d197f098dd94a02db6802f7e557109ed5c1dd3ab5b56023c35f8317826e4431769075cd84fb860dfeb7b1bf", 0xab, 0xfffffffffffffffe}], 0x3800, &(0x7f0000000200)={[{@uni_xlateno}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x37}}]})
dup3(r1, r2, 0x80000)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1305.179054] FAULT_INJECTION: forcing a failure.
[ 1305.179054] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1305.180960] CPU: 1 PID: 7706 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1305.182054] FAULT_INJECTION: forcing a failure.
[ 1305.182054] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1305.182464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1305.182469] Call Trace:
[ 1305.182490]  dump_stack+0x107/0x167
[ 1305.182505]  should_fail.cold+0x5/0xa
[ 1305.186724]  _copy_from_user+0x2e/0x1b0
[ 1305.187122]  __copy_msghdr_from_user+0x91/0x4b0
[ 1305.187578]  ? __ia32_sys_shutdown+0x80/0x80
[ 1305.187995]  ? __lock_acquire+0x1657/0x5b00
[ 1305.188422]  ___sys_recvmsg+0xd5/0x200
[ 1305.188766]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1305.189248]  ? __fget_files+0x2cf/0x520
[ 1305.189646]  ? lock_acquire+0x197/0x470
[ 1305.190033]  ? find_held_lock+0x2c/0x110
[ 1305.190439]  ? __might_fault+0xd3/0x180
[ 1305.190823]  ? lock_downgrade+0x6d0/0x6d0
[ 1305.191239]  do_recvmmsg+0x24c/0x6d0
[ 1305.191571]  ? ___sys_recvmsg+0x200/0x200
[ 1305.191955]  ? lock_downgrade+0x6d0/0x6d0
[ 1305.192366]  ? ksys_write+0x12d/0x260
[ 1305.192707]  ? wait_for_completion_io+0x270/0x270
[ 1305.193638]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1305.194655]  ? vfs_write+0x354/0xb10
[ 1305.195473]  __x64_sys_recvmmsg+0x20f/0x260
[ 1305.196414]  ? ksys_write+0x1a9/0x260
[ 1305.197235]  ? __do_sys_socketcall+0x600/0x600
[ 1305.198234]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1305.199364]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1305.200478]  do_syscall_64+0x33/0x40
[ 1305.201281]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1305.202412] RIP: 0033:0x7f96c2c53b19
[ 1305.203221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1305.207241] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1305.208892] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1305.210444] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1305.211981] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1305.213562] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1305.215161] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
[ 1305.216733] CPU: 0 PID: 7710 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1305.218368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1305.220426] Call Trace:
[ 1305.221112]  dump_stack+0x107/0x167
[ 1305.221722]  should_fail.cold+0x5/0xa
[ 1305.222143]  _copy_from_user+0x2e/0x1b0
[ 1305.223172]  __copy_msghdr_from_user+0x91/0x4b0
[ 1305.225630]  ? __ia32_sys_shutdown+0x80/0x80
[ 1305.226118]  ? __lock_acquire+0x1657/0x5b00
[ 1305.227208]  ___sys_recvmsg+0xd5/0x200
[ 1305.227727]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1305.228933]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1305.229518]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1305.230679]  ? trace_hardirqs_on+0x5b/0x180
[ 1305.231163]  ? lock_acquire+0x197/0x470
[ 1305.232156]  ? find_held_lock+0x2c/0x110
[ 1305.232693]  ? __might_fault+0xd3/0x180
[ 1305.233720]  ? lock_downgrade+0x6d0/0x6d0
[ 1305.234186]  ? io_schedule_timeout+0x140/0x140
[ 1305.235324]  do_recvmmsg+0x24c/0x6d0
[ 1305.235799]  ? ___sys_recvmsg+0x200/0x200
[ 1305.236824]  ? lock_downgrade+0x6d0/0x6d0
[ 1305.237921]  ? ksys_write+0x12d/0x260
[ 1305.238351]  ? wait_for_completion_io+0x270/0x270
[ 1305.239525]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1305.240708]  ? vfs_write+0x354/0xb10
[ 1305.241122]  __x64_sys_recvmmsg+0x20f/0x260
[ 1305.242262]  ? ksys_write+0x1a9/0x260
[ 1305.242702]  ? __do_sys_socketcall+0x600/0x600
[ 1305.243805]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1305.245071]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1305.245704]  do_syscall_64+0x33/0x40
[ 1305.246674]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1305.247226] RIP: 0033:0x7f06d872db19
[ 1305.248161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1305.252754] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1305.253655] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1305.254420] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1305.255240] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1305.256033] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1305.256831] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
03:35:52 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x1800)

03:36:12 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x8000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000002100)={{r0}, "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"})
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, r2, 0x8000000)

03:36:12 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x300000000000000)

03:36:12 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x80000)

03:36:12 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x40)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:36:12 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:36:12 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:36:12 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 40)

03:36:12 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 31)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

[ 1325.711807] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1325.730060] FAULT_INJECTION: forcing a failure.
[ 1325.730060] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1325.731624] CPU: 0 PID: 7745 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1325.732367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1325.733261] Call Trace:
[ 1325.733555]  dump_stack+0x107/0x167
[ 1325.733955]  should_fail.cold+0x5/0xa
[ 1325.734379]  _copy_from_user+0x2e/0x1b0
[ 1325.734812]  __copy_msghdr_from_user+0x91/0x4b0
[ 1325.735318]  ? __ia32_sys_shutdown+0x80/0x80
[ 1325.735800]  ? __lock_acquire+0x1657/0x5b00
[ 1325.736286]  ___sys_recvmsg+0xd5/0x200
[ 1325.736712]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1325.737240]  ? __fget_files+0x2cf/0x520
[ 1325.737720]  ? lock_acquire+0x197/0x470
[ 1325.738157]  ? find_held_lock+0x2c/0x110
[ 1325.738607]  ? __might_fault+0xd3/0x180
[ 1325.739045]  ? lock_downgrade+0x6d0/0x6d0
[ 1325.739514]  do_recvmmsg+0x24c/0x6d0
[ 1325.739927]  ? ___sys_recvmsg+0x200/0x200
[ 1325.740382]  ? lock_downgrade+0x6d0/0x6d0
[ 1325.740838]  ? ksys_write+0x12d/0x260
[ 1325.741266]  ? wait_for_completion_io+0x270/0x270
[ 1325.741792]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1325.742300]  ? vfs_write+0x354/0xb10
[ 1325.742711]  __x64_sys_recvmmsg+0x20f/0x260
[ 1325.743180]  ? ksys_write+0x1a9/0x260
[ 1325.743595]  ? __do_sys_socketcall+0x600/0x600
[ 1325.744099]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1325.744668]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1325.745231]  do_syscall_64+0x33/0x40
[ 1325.745639]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1325.746191] RIP: 0033:0x7f06d872db19
[ 1325.746597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1325.748561] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1325.749390] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1325.754159] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1325.754920] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1325.755687] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1325.756446] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
03:36:12 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1325.791018] FAULT_INJECTION: forcing a failure.
[ 1325.791018] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1325.792275] CPU: 0 PID: 7750 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1325.793004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1325.793882] Call Trace:
[ 1325.794179]  dump_stack+0x107/0x167
[ 1325.794580]  should_fail.cold+0x5/0xa
[ 1325.795004]  _copy_from_user+0x2e/0x1b0
[ 1325.795441]  __copy_msghdr_from_user+0x91/0x4b0
[ 1325.795945]  ? __ia32_sys_shutdown+0x80/0x80
[ 1325.796431]  ? __lock_acquire+0x1657/0x5b00
[ 1325.796917]  ___sys_recvmsg+0xd5/0x200
[ 1325.797348]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1325.801904]  ? lock_acquire+0x197/0x470
[ 1325.802333]  ? find_held_lock+0x2c/0x110
[ 1325.802780]  ? __might_fault+0xd3/0x180
[ 1325.803207]  ? lock_downgrade+0x6d0/0x6d0
[ 1325.803655]  ? io_schedule_timeout+0x140/0x140
[ 1325.804160]  do_recvmmsg+0x24c/0x6d0
[ 1325.804566]  ? ___sys_recvmsg+0x200/0x200
[ 1325.805005]  ? lock_downgrade+0x6d0/0x6d0
[ 1325.805464]  ? ksys_write+0x12d/0x260
[ 1325.805889]  ? wait_for_completion_io+0x270/0x270
[ 1325.806415]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1325.806914]  ? vfs_write+0x354/0xb10
[ 1325.813876]  __x64_sys_recvmmsg+0x20f/0x260
[ 1325.814347]  ? ksys_write+0x1a9/0x260
[ 1325.814757]  ? __do_sys_socketcall+0x600/0x600
[ 1325.815255]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1325.815808]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1325.816360]  do_syscall_64+0x33/0x40
[ 1325.816756]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1325.817301] RIP: 0033:0x7f96c2c53b19
[ 1325.817715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1325.819690] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1325.820509] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1325.821273] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1325.822028] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1325.822788] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1325.823550] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:36:12 executing program 5:
readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000040)=""/44, 0x2c}], 0x2)
syz_io_uring_setup(0x4d4e, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:36:12 executing program 6:
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@sha1={0x1, "4793d75b9ecdc115c4ba96718b29f8a203c8c739"}, 0x15, 0x3)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:36:12 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 32)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:36:12 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x1000000)

03:36:12 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 41)

[ 1325.975957] FAULT_INJECTION: forcing a failure.
[ 1325.975957] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1325.978658] CPU: 1 PID: 7765 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1325.979843] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1325.981298] Call Trace:
[ 1325.981812]  dump_stack+0x107/0x167
[ 1325.982425]  should_fail.cold+0x5/0xa
[ 1325.983067]  _copy_from_user+0x2e/0x1b0
[ 1325.983738]  __copy_msghdr_from_user+0x91/0x4b0
[ 1325.984517]  ? __ia32_sys_shutdown+0x80/0x80
[ 1325.985260]  ? __lock_acquire+0x1657/0x5b00
[ 1325.986158]  ___sys_recvmsg+0xd5/0x200
[ 1325.987015]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1325.988084]  ? lock_acquire+0x197/0x470
[ 1325.988938]  ? find_held_lock+0x2c/0x110
[ 1325.989829]  ? __might_fault+0xd3/0x180
[ 1325.990684]  ? lock_downgrade+0x6d0/0x6d0
[ 1325.991587]  do_recvmmsg+0x24c/0x6d0
[ 1325.992391]  ? ___sys_recvmsg+0x200/0x200
[ 1325.993289]  ? lock_downgrade+0x6d0/0x6d0
[ 1325.994215]  ? ksys_write+0x12d/0x260
[ 1325.995048]  ? wait_for_completion_io+0x270/0x270
[ 1325.996089]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1325.997087]  ? vfs_write+0x354/0xb10
[ 1325.997903]  __x64_sys_recvmmsg+0x20f/0x260
[ 1325.998835]  ? ksys_write+0x1a9/0x260
[ 1325.999657]  ? __do_sys_socketcall+0x600/0x600
[ 1326.000640]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1326.001792]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1326.002902]  do_syscall_64+0x33/0x40
[ 1326.003708]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1326.004822] RIP: 0033:0x7f06d872db19
[ 1326.005636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1326.009648] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1326.011290] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1326.012830] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1326.014384] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1326.015947] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1326.017489] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1326.027311] FAULT_INJECTION: forcing a failure.
[ 1326.027311] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1326.030218] CPU: 0 PID: 7767 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1326.031811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1326.033722] Call Trace:
[ 1326.034336]  dump_stack+0x107/0x167
[ 1326.035182]  should_fail.cold+0x5/0xa
[ 1326.036073]  _copy_from_user+0x2e/0x1b0
[ 1326.037003]  __copy_msghdr_from_user+0x91/0x4b0
[ 1326.038109]  ? __ia32_sys_shutdown+0x80/0x80
[ 1326.039137]  ? __lock_acquire+0x1657/0x5b00
[ 1326.040157]  ___sys_recvmsg+0xd5/0x200
03:36:12 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000), 0x4)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1326.041054]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1326.042857]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1326.045159]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1326.046231]  ? trace_hardirqs_on+0x5b/0x180
[ 1326.047242]  ? lock_acquire+0x197/0x470
[ 1326.048166]  ? find_held_lock+0x2c/0x110
[ 1326.050203]  ? __might_fault+0xd3/0x180
[ 1326.051135]  ? lock_downgrade+0x6d0/0x6d0
[ 1326.052101]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1326.054468]  do_recvmmsg+0x24c/0x6d0
[ 1326.055351]  ? ___sys_recvmsg+0x200/0x200
[ 1326.056324]  ? lock_downgrade+0x6d0/0x6d0
[ 1326.057303]  ? ksys_write+0x12d/0x260
[ 1326.059305]  ? wait_for_completion_io+0x270/0x270
[ 1326.060431]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1326.061513]  ? vfs_write+0x354/0xb10
[ 1326.062402]  __x64_sys_recvmmsg+0x20f/0x260
[ 1326.063400]  ? ksys_write+0x1a9/0x260
[ 1326.065379]  ? __do_sys_socketcall+0x600/0x600
[ 1326.066463]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1326.067692]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1326.069974]  do_syscall_64+0x33/0x40
[ 1326.070669]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1326.071636] RIP: 0033:0x7f96c2c53b19
[ 1326.072338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1326.077572] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1326.080321] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1326.081928] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1326.083599] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1326.085257] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1326.086930] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:36:13 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1326.185726] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
03:36:27 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x400000000000000)

03:36:27 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:36:27 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x4, 0x7, 0x20, 0x2, 0x9a7a, 0x8a4c})
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:36:27 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 33)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:36:27 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x2000000)

03:36:27 executing program 5:
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000002100)={0x111c, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x4}, @ETHTOOL_A_EEE_MODES_OURS={0x10fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf477}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "bca36fc4ffcb4f87a036f17f7a1316fbeaa3b3c672aba754a499799b085e82da0cd1cdd326bbca6b2285ff901c7227accfaace4d35c198dc451f4cbe566b6ac40d9243ca09de52a8b66de4692e71b22437f06fd53daa9e5dfeb0c7ff8fd6c4cc996829cb08430c3e86d57d4148c3fb8b21720a8f40082e4b2c25aa2e34c9176fc59578bf2bb29bbef6a88b2be8fad63c2e0b27dcd69ff34d9ce5cc4c4f991895cda81da848ef2e7eefb242543bd865de8d5240278e9f55a5a720c40cb39405331ee04bec7be1ce0c99ef387d89894d2e059afd40596b8a2b754b9d438f1f25a95b4c0e350f75d8f353068510ae8350959a8e1692e582038f501574e2d8cf666a0368b9d65dd84d0c72402e0b00a18d03067c41a9968dc840719a76d36ccf1678cef1962b2a871090c2e92ff2d22e99b3410a6465730c02fd4b54091a99355c7373f50c77186076786f3ac29b35e99d09617b82a6d84320563e8d0bb49cb6d5b890b136c62eb82b6ded97f54593c3238117abb0325580899e8a63fa9b3fd5a18f00da6ea83a04a0b0f14577d1a4965f97dcf06805901b3609b9f9682078b3027ed8021ca322d2c46f6c7e447825ce5f2db26eb56dec181a9ffd43211d2ed9af66e299dc986ecf9e7b8927d1e3f8d1f2f699de235a4a44221677609db905a76bc8cd0cb1d03e6193363e93a780c03c77c527015bcaafe83a1ffe8f6303e1ea0984d9cbdf63d22d2e24bd3966e289d38ea83728a04ff337366d277d25684cf427889ce60230a0f2d530f820f4adf32ce4b4c410962d55596bad3a40f460338698a8e1ebbab5d0d28197eb1fbc6fc2c6c599ea983af09798374ebf69c0090585985aacd03f817128cbc18d2f0c86c7b3b1bf5c4377a871d50dcf066733fda4169d3052e57fd6ed1febac2389f3160d6781703acf28a46ad3e1e6cf3d04cd3d0e5a6d2a20ba72e3e3c4ed769e6396912ad83a6e48d85a4ec02fc21f347dd34eea9bf895dc3abdb1f857a0747b8469e12a64d0d8ec281da19d1bcaa1345606ad1041b78b129d4f0de60218bf038b86b4dce39ad3f5e9877031ae2f1c0adff71ad8d2446d45a9a3b9de672ad241e49edc46c997d61af36d0227d3d644814619768e06ac8982151c31c144d05d60fbaef199222c239a265c9c2a1e4a7c966384cd19d54001d345a6a32d4cbfb3c050a2e4831c3336f77ea038d462d1ad5f01953e2930c901a36f98c9e4a4aa8fed75c1aa92899ed6ee7ad60e3a683d5b04037855de2c80b1f26fa22f8266cfb8355a052c3dcadf3ab64af2e3f01d37002da38c4c69daf56546464005e04b512092d839b7da18bce8acc693b60439027a8252004c66e368eca50e0612792e1c5a14791196726bb3a4450e903d3a97e1036f16c33e82ba65ab47956321414d0c101905fa9c0ca71da7f4172e6a43efbc122723043ab75abc9def990b5934a11aad618305c6790685b323b295bcd37d656df35f12778badab30b3b3613da0a35dfd15653feb6985a08bacdd5f6053d8bc31fb1a00555d61f039d56b65bd2f615cdd241624c044defd415c9df58fdd4c4b4f16c3318ced07f6fe155b50ce67f81f0a13428b68ccd167f1a2f262d0ff52cc28b455c1b5d21b2685d91f1ac9e36b605d50b2f7a53a92f0904720c4fb9b2fa00fac968d8cc4e5abcbf56c1bc564880856bd9d65531202c48da037ddd93d2e0abbe09bdebf4f34c58c282e37bb81c5c73286081ab3fd2640ac634d80dc204834848d111d2734a2bd98241cfcb029e6ba6af786242bc0f2f434d3ecff3603271c4a14e64308f779d13d6266fb112f30665a76beb52f12f1c9047549e7cc88f7c04e2b34d2ef61719b61ede0638e1373f1e0f15d403ddc5b859859d054fe586b4591541b124f2c2110b229fbea46636c97bfbc82cedd39f735e6225ddb976c5f7e67bc1b30fd93894c42eb0056d3f6081e8c33b59f785684dd10f1835d78a13d3ca1512db91a6f795aea06be232314d0b02d2362475bd8fe3fc0ac35bb45e82ee7f7c0d47f107a7a94c4d5edc3f2475ae360604e7a10a9f81ba34995a4ef273635685852db8e83db0468fd3800c27de7bef830a2467048ee0bb406ff3d7124bf21cb35ff5ef8df7ed7331b057d0242ef016ade933e5bf113dc74e31600eccd60e7e80d84d28e05b5583b7b13f1df825547ae234e9d1d21b3627e03f51cff4b31abe8ad760a1c127bde6e127b5c61faa551d5c83dcb445a1516e16f7e1e9e26f47761f7b59cc3f74106cd2dbcf2954b657c5e974eb81ff64ac904ca57662e351f7ebfe3c1bc8537f595247f2db61038870cdfebc2e1a903183c6ff580bc2a505b7512eb462d2b2501b591c352c1fe1cfe3b52069018239f100406c8661f76fcd001ab4724b8a4bcc938142b12f3eba7450b0b0de595c4ef77bcf061cb7ca13e93a9fa2491db68179ff631fe9a640ce7474148aae3bba860ebcda65a5f0800154a10724df258188c6e74e4d321c821dd851c717d2da4988bcf0e1f53e0011932e3ffae016b2002419dded2e0fedc6474d5b7a48573d7e591ca43f87259ec2e0e8d10284a010ded52e63f8aac3bb19ec4126331f1c7290842522741bc92587ca92f2adfe7e665ffe618ad3afe6c2e4885e15e6fe71ce05cb6ec76d9b92cf3f6bc68af9145da57af98c8872b6ac569955f9b7af47d98f0cf7701f90a6e67fa3f08f9d63814bdb1431b9f7a2a50590fd09e423c676f2c830986ab990e621850196a618f8f6e19df4544afc32d02b3ac82e39390bd2d1502f19cf1af5a7107aa5f4a25acc8273ee3284d3bbaa7f1b89e73a95d1fddafc30a32edf5b0e7b55b12054924e8927664fd2b22bad6d4657e831cd0c57734d5944d3017cb2e20198f66b04fc47cdd45fd3e1f121f94e40d16d2497315435ffd7c7cc9fa5d40276885ee039aa93e0ff760025bc095334130731c6a16cc8540ca907256dc5d9a4689eaadd55de6de993150bf08861a8643473a959a6cab9a097325415613c38d9051fe58fba96cc96cf4b9aae6120e27f2edab0b754b0317d2dfe3f87863fb478b2187c4b4c70a84276a88b4024a556f0c85cac8f4e55ace9e75df020c583281e9a86ff736c415a3341d0bef7b4b8d78c6cb54ad9c7fe6c027dd2638d68f0eb48d8569e2e2a26152737fea9b39e731162f882818e3e65704978a09e8e6418aaaaf28aee2efcf1e700b23dcee2f33a287743a765a2e048476ee228f879d3c26c19e3b84f580edd171bf588e390afa4fe05a330d7a0ef55ad08ac2dbc22d97ce10f5af89b811dc1d0f68f1d8e49369f18e3ec1cc91d64bdcf2e8f3b30962468e3c8ea1387331b4263fd33222a9fec451416e67520b8a5b79575bc6d6e84bd8953ad9244953c87e6b599b74932883f4f2966e8f2d62cdd160114ee0cc9e3bb156069a4bdada1a025b2c61d3edd14a5fa385f4c6d32589c72b3c76ee9490f75572972c9ede477223103ab585dadfe924066d7f56d7b77d1723858a50fd68a568c16632f3be4a6a042e77060135d6d19e17391f52eefe417e1c56d00b6fb9133ae03c8596826820dcbd8f18553b4c0486bbb4fb08377e80320b86df37a7e675dbcdb1e98c8b90c4909414e40801d4cb4dff54c352e806d8137d8f9ed45a7fd6fcaaaa5261dd6cc533a223f7c8a5031068517601ae4efc616efcfbbf2bfb0ad2891ad8449ad4d1dbfa336e684cf0de2b1c1d62a10c245543f72c5a14688053c0caf3715bfece035b4ed7569d5904f5fb6a6c7a47f0f692c6ddc2cb5617f15d23e0341afef47d31fd760f7008afe3275fd0e597360d6844f0e6889cf6f24643ada8f9e90fde74a8826fa5c46ec6ae9d1712dbb6df663479b31dbd19addac731f2adb297be7daed361e9e0907944fae47bb38fb454ddff34966e1c0057e9faad39cce5a35ba617a3c64c0244c158c0710468aaecc14f5f774e7aab5b05f85748a53607a55d6a006d4396d53fa3eb2723310254947d3d3a270fab51bbf20b41d864d9018cda2c34caa93a66f00e887094660812d9337a79c0531c373aad00b08c459a13019eaf903dcb80de071e9c1a2b3e74108e13baf403d560712290f7d48d1a52ddbb9d2502a4421568ebb3a2a18a4d0faa4da56879dcf9b61e6119781c328dca7b6229d0a8076fe4ed2abc2ffc84c6146f73dbca85547cd969f863bbb9456eed0c73386f809af917265bcf189b4407fee9685162e9fe03fbc7008b44aff975ad4cb5da29b9fcf71e77598e41024a26e4432027ece07ba4c1fb2f7145e33696d1ba2a002eb71937f19a7dd444ba440cdd52d96a2ecba06af189783256e9b7c77700d68ba096d29a5eb460e1e0d7416daca387fb34227d85671b6090a154cc8bf36986873c88a42c3e2357bd27e213767b1321dfc92b7548c59136fc7d4283cf47449870b6e2999d10ac508fe94db413004f0e0ad62d1170d706be3fc68290060c25f91b9e4bb9946a74562a92cca0db1aa7a10d852cdbb8bfa507c00e227886f7b9fcae82d43e0f9cd9162abf7c2c9adf407c1078cd0a766cdfac56b83acf0ee0edb30db09c614eb048d245539ae4628b4fae805dc4c49126723ac34f6b5b0efb7045662065454ddb52655a903aaa64e22793a5d1bc80d9b9eace717f9e262b5aff4114a41edef2b43203df546d43067b69f1376873a800bf8e90701a8768ed06c661b8ded74e100fb5f73fe0f300c9a32de03cbf194af05877623ba812caee1f436204aa07836765f795a58a86cf801ba7bd6486701e12483f7a40b7d41cdf5c1f6fc8f66cf1c24b09538fbcef46ec7a3406e7d02d3014486cb248e732f3eb1aa6ac790a4471a84617aaaa66e9b3935ba0a33756c55b65e52566616c6a317adca781ce4150d5161fb0b49031a3898099d1ec772843285a47d68717db4bc1c7aee0de2ca1b6998a5574fe4871e378431e6f006e02b372c1bfd2d9ca19e1b5374047edd3830207dafa1125dd64d9b96bb94815ade0fc5ffb6c3d6bde76c2c775df4551644ed92b64c7e4a6fd6e03643a9aceda0c9af99bb85cad95bf9899db3013efa260b8026cbf261a5da90b5f8f66d66f18c3a2dcda49d810413beeda68ae15580809f6bb106967b105a33ef238af313f6a4ee526ac45629568da89c01ca13b45a7ec1ca0a710acc613befbfbe1f93236899d9496d7e24bc33ca97874b7beec50bfa67ea2c78fc9a84d9320289f9f8fa1a2e19c87c9d8c3a6a74bfe3375a6fce128dfc0faf299883de28d447fe1ad8dfe864bf9b7989ba756ac32d3b473d1c43142a259c2e0390798667064905ec216bdeab55ab326719114b3c4ca01ea8469188b9eb9bc47dc3615fc6b96b9bccfdee25473005ebbc77f02d23400dd60b125b6f798821e0cfbd482682a5ba35da6b65c55c93158509744733a5e383d1245274edb8ba8fb474b002ef2e9597dfc6680c26fff257d94923261ddac14676e8ad71cd63829e72ab69c3d6ad175983e4bd5a9fddac57695ca5336228441641d93ae73540f6cc41961776574bc48ccc7980a2c7c0f5fc4a0679e3d362e4663e9e8c093ef6774e2a7e69843031d9c793e5aebcd8d7fbfc99220062be4f6a5ea17bee3f1a64ce820ee2fcf594c31d2ceb4904dba46af4fde0d3ad8027d9962605e3eccfdc67db7eb7ae3a4fae568211aa0ed05ca1912d08ad628a6b9e04da2577c7969c336f5f9cb5b6c883cbe1aae7e9445250c4fe16415212d019c7769d6c734997760b096c3d574da77339303d88a5dfa82122d1fdbaa7954d15b9943761d6a0b879588f77fcbe3a50b42bcab42b08030b527bc"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xcd, 0x5, "b63488e296f3071ce1933d0e1d90260d4cb3f1db5caefa349088a69eb861897fee08087c750e0d240d5623fcdb87ac8c3412cb84c781fce6418ed6c9c057d85791444f2c7ff7d97ef1f7052753b2f4d6843bd032fad10cce23e9de9a48fe4e3f8c72956551c43834d5f2ef6fefd5f4a6624ff7efba01ecc1789543599175559a5a148fcdc5a7e1a35dddd9d88d3dc57198b498199fd1f44c007642f60b1b0ba4d37dc2a31f132f88bd4e242591274deb0fdc56aea96ae32abbe8b774c198fdabaa4e5c701c30246566"}]}]}, 0x111c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000000)=[0x4, 0x11])

03:36:27 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 42)

03:36:27 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1340.129668] FAULT_INJECTION: forcing a failure.
[ 1340.129668] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1340.131870] CPU: 1 PID: 7787 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1340.133561] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1340.134414] Call Trace:
[ 1340.135049]  dump_stack+0x107/0x167
[ 1340.135442]  should_fail.cold+0x5/0xa
[ 1340.136348]  _copy_from_user+0x2e/0x1b0
[ 1340.136785]  __copy_msghdr_from_user+0x91/0x4b0
[ 1340.137919]  ? __ia32_sys_shutdown+0x80/0x80
[ 1340.138378]  ? __lock_acquire+0x1657/0x5b00
[ 1340.139441]  ___sys_recvmsg+0xd5/0x200
[ 1340.139866]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1340.140926] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1340.141061]  ? _raw_spin_unlock_irq+0x27/0x30
[ 1340.143937]  ? lock_acquire+0x197/0x470
[ 1340.144357]  ? find_held_lock+0x2c/0x110
[ 1340.145335]  ? __might_fault+0xd3/0x180
[ 1340.145767]  ? lock_downgrade+0x6d0/0x6d0
[ 1340.146794]  ? io_schedule_timeout+0x140/0x140
[ 1340.147286]  do_recvmmsg+0x24c/0x6d0
[ 1340.148222]  ? ___sys_recvmsg+0x200/0x200
[ 1340.148653]  ? lock_downgrade+0x6d0/0x6d0
[ 1340.149648]  ? ksys_write+0x12d/0x260
[ 1340.150071]  ? wait_for_completion_io+0x270/0x270
[ 1340.151258]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1340.151743]  ? vfs_write+0x354/0xb10
[ 1340.152656]  __x64_sys_recvmmsg+0x20f/0x260
[ 1340.153110]  ? ksys_write+0x1a9/0x260
[ 1340.154046]  ? __do_sys_socketcall+0x600/0x600
[ 1340.154531]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1340.155826]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1340.156377]  do_syscall_64+0x33/0x40
[ 1340.157289]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1340.157828] RIP: 0033:0x7f96c2c53b19
[ 1340.158750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1340.160595] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1340.162419] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1340.163149] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1340.164920] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1340.165645] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1340.167455] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
[ 1340.177961] FAULT_INJECTION: forcing a failure.
[ 1340.177961] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1340.177976] CPU: 0 PID: 7799 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1340.177984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1340.177988] Call Trace:
[ 1340.178003]  dump_stack+0x107/0x167
[ 1340.178018]  should_fail.cold+0x5/0xa
[ 1340.178038]  _copy_from_user+0x2e/0x1b0
[ 1340.178056]  __copy_msghdr_from_user+0x91/0x4b0
[ 1340.178072]  ? __ia32_sys_shutdown+0x80/0x80
03:36:27 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0xe54d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
socketpair(0xb, 0x3, 0x7aeb, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
fallocate(r1, 0x5a, 0x9, 0xecb0)

[ 1340.178086]  ? __lock_acquire+0x1657/0x5b00
[ 1340.178118]  ___sys_recvmsg+0xd5/0x200
[ 1340.178138]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1340.178151]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1340.178164]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1340.178177]  ? trace_hardirqs_on+0x5b/0x180
[ 1340.178197]  ? lock_acquire+0x197/0x470
[ 1340.178210]  ? find_held_lock+0x2c/0x110
[ 1340.178225]  ? __might_fault+0xd3/0x180
[ 1340.178236]  ? lock_downgrade+0x6d0/0x6d0
[ 1340.178250]  ? io_schedule_timeout+0x140/0x140
[ 1340.178271]  do_recvmmsg+0x24c/0x6d0
[ 1340.178287]  ? ___sys_recvmsg+0x200/0x200
[ 1340.178304]  ? lock_downgrade+0x6d0/0x6d0
[ 1340.178324]  ? ksys_write+0x12d/0x260
[ 1340.178346]  ? wait_for_completion_io+0x270/0x270
03:36:27 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0xff, 0x81, 0x50, 0x0, 0x2, 0x3, 0x3, 0x173, 0x40, 0x2b1, 0x1, 0x6, 0x38, 0x1, 0x1, 0x7fc0}, [{0x1, 0xffff8001, 0x9, 0x8, 0x9, 0xffff, 0xa7, 0x6}], "508bf6ddb639f57ca1ba87791b52040627f05f8ef8371b08db7e2b192464bc0f3dbb756508aafe40d71b34c45acb44306147b820cbb5eaf2eb8d00dafcc2588cf36cf173785f615a8b02b4724b6dfc3beeea9186ace87d8c1c47f641be5e7b6395c8401517168d8780593861ed45d78511b8e48a3acc856f55504f4944ff6743ae0612c5b178dab60541725af69823298bbcb4f79095831b57fa2156f4cf99a46bc6986a0a247b64ca7de001", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x624)

03:36:27 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x4000000)

03:36:27 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 34)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

[ 1340.178359]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1340.178369]  ? vfs_write+0x354/0xb10
[ 1340.178384]  __x64_sys_recvmmsg+0x20f/0x260
[ 1340.178395]  ? ksys_write+0x1a9/0x260
[ 1340.178408]  ? __do_sys_socketcall+0x600/0x600
[ 1340.178422]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1340.178433]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1340.178446]  do_syscall_64+0x33/0x40
[ 1340.178457]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1340.178465] RIP: 0033:0x7f06d872db19
[ 1340.178480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1340.178488] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1340.178502] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1340.178508] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1340.178515] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
03:36:27 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 35)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

[ 1340.178521] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1340.178528] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
03:36:27 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x5)

[ 1340.298911] FAULT_INJECTION: forcing a failure.
[ 1340.298911] name fail_usercopy, interval 1, probability 0, space 0, times 0
03:36:27 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pwrite64(0xffffffffffffffff, &(0x7f0000000000)="0a88a995618d949b1d4ecba1edc21c5442a75871579c0ec18d408f38eb33eaaede0935030e68a22ec97b24338fa5e345095b04f9d0d9433e319754e1230afc828ed52d487f648419b626bfd3d23b4166b5cc0005eadb464b9f9d950f26a88716d2acb7e18ade79a9dea53e83f17cf6", 0x6f, 0x8)
r3 = syz_open_dev$vcsu(&(0x7f0000000440), 0x8001, 0x4901)
io_uring_enter(r3, 0x3119, 0x75f4, 0x1, &(0x7f0000000480), 0x8)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x1000002, 0x4002010, r0, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x1)
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r6, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r7 = dup3(r2, r6, 0x80000)
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r8, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r9 = syz_open_dev$vcsa(&(0x7f0000000280), 0x10000, 0x800)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r6, 0xc07d, {0x0, r8}, 0x4, 0xb, 0x0, {0x0, 0x0, r9}}, 0xa50c)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r7, 0xf507, 0x0)
preadv(r6, &(0x7f0000000240)=[{&(0x7f0000000100)=""/225, 0xe1}, {&(0x7f0000000340)=""/155, 0x9b}], 0x2, 0x3, 0x0)

03:36:27 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 43)

[ 1340.298930] CPU: 0 PID: 7812 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1340.298938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1340.298943] Call Trace:
[ 1340.298964]  dump_stack+0x107/0x167
[ 1340.298980]  should_fail.cold+0x5/0xa
[ 1340.299003]  _copy_from_user+0x2e/0x1b0
[ 1340.299026]  __copy_msghdr_from_user+0x91/0x4b0
[ 1340.299042]  ? __ia32_sys_shutdown+0x80/0x80
[ 1340.299059]  ? __lock_acquire+0x1657/0x5b00
[ 1340.299091]  ___sys_recvmsg+0xd5/0x200
[ 1340.299108]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1340.299125]  ? _raw_spin_unlock_irq+0x27/0x30
[ 1340.299145]  ? lock_acquire+0x197/0x470
[ 1340.299159]  ? find_held_lock+0x2c/0x110
[ 1340.299181]  ? __might_fault+0xd3/0x180
[ 1340.299196]  ? lock_downgrade+0x6d0/0x6d0
[ 1340.299214]  ? io_schedule_timeout+0x140/0x140
[ 1340.299242]  do_recvmmsg+0x24c/0x6d0
[ 1340.299264]  ? ___sys_recvmsg+0x200/0x200
[ 1340.299279]  ? lock_downgrade+0x6d0/0x6d0
[ 1340.299307]  ? ksys_write+0x12d/0x260
[ 1340.299336]  ? wait_for_completion_io+0x270/0x270
[ 1340.299357]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1340.299368]  ? vfs_write+0x354/0xb10
[ 1340.299388]  __x64_sys_recvmmsg+0x20f/0x260
[ 1340.299402]  ? ksys_write+0x1a9/0x260
[ 1340.299416]  ? __do_sys_socketcall+0x600/0x600
[ 1340.299435]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1340.299450]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1340.299466]  do_syscall_64+0x33/0x40
[ 1340.299480]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1340.299489] RIP: 0033:0x7f06d872db19
[ 1340.299505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1340.299513] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1340.299530] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1340.299538] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1340.299547] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1340.299557] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1340.299566] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1340.465884] FAULT_INJECTION: forcing a failure.
[ 1340.465884] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1340.465906] CPU: 0 PID: 7825 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1340.465916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1340.465922] Call Trace:
[ 1340.465944]  dump_stack+0x107/0x167
[ 1340.465962]  should_fail.cold+0x5/0xa
[ 1340.465985]  _copy_from_user+0x2e/0x1b0
[ 1340.466008]  __copy_msghdr_from_user+0x91/0x4b0
[ 1340.466025]  ? __ia32_sys_shutdown+0x80/0x80
[ 1340.466041]  ? __lock_acquire+0x1657/0x5b00
[ 1340.466073]  ___sys_recvmsg+0xd5/0x200
[ 1340.466090]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1340.466106]  ? _raw_spin_unlock_irq+0x27/0x30
[ 1340.466126]  ? lock_acquire+0x197/0x470
[ 1340.466139]  ? find_held_lock+0x2c/0x110
[ 1340.466161]  ? __might_fault+0xd3/0x180
[ 1340.466176]  ? lock_downgrade+0x6d0/0x6d0
[ 1340.466194]  ? io_schedule_timeout+0x140/0x140
[ 1340.466222]  do_recvmmsg+0x24c/0x6d0
[ 1340.466243]  ? ___sys_recvmsg+0x200/0x200
[ 1340.466258]  ? lock_downgrade+0x6d0/0x6d0
[ 1340.466280]  ? ksys_write+0x12d/0x260
[ 1340.466313]  ? wait_for_completion_io+0x270/0x270
[ 1340.466330]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1340.466343]  ? vfs_write+0x354/0xb10
[ 1340.466363]  __x64_sys_recvmmsg+0x20f/0x260
[ 1340.466377]  ? ksys_write+0x1a9/0x260
[ 1340.466391]  ? __do_sys_socketcall+0x600/0x600
[ 1340.466409]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1340.466423]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1340.466440]  do_syscall_64+0x33/0x40
[ 1340.466452]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1340.466461] RIP: 0033:0x7f06d872db19
[ 1340.466476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1340.466485] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1340.466501] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1340.466510] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1340.466520] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1340.466528] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1340.466538] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1340.491652] FAULT_INJECTION: forcing a failure.
[ 1340.491652] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1340.491666] CPU: 0 PID: 7830 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1340.491674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1340.491679] Call Trace:
[ 1340.491694]  dump_stack+0x107/0x167
[ 1340.491710]  should_fail.cold+0x5/0xa
[ 1340.491730]  _copy_from_user+0x2e/0x1b0
[ 1340.491750]  __copy_msghdr_from_user+0x91/0x4b0
[ 1340.491766]  ? __ia32_sys_shutdown+0x80/0x80
[ 1340.491780]  ? __lock_acquire+0x1657/0x5b00
[ 1340.491816]  ___sys_recvmsg+0xd5/0x200
[ 1340.491833]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1340.491849]  ? lock_acquire+0x374/0x470
[ 1340.491869]  ? lock_acquire+0x197/0x470
[ 1340.491883]  ? find_held_lock+0x2c/0x110
[ 1340.491902]  ? __might_fault+0xd3/0x180
[ 1340.491917]  ? lock_downgrade+0x6d0/0x6d0
[ 1340.491950]  do_recvmmsg+0x24c/0x6d0
[ 1340.491971]  ? ___sys_recvmsg+0x200/0x200
[ 1340.491986]  ? lock_downgrade+0x6d0/0x6d0
[ 1340.492007]  ? ksys_write+0x12d/0x260
[ 1340.492035]  ? wait_for_completion_io+0x270/0x270
[ 1340.492052]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1340.492066]  ? vfs_write+0x354/0xb10
[ 1340.492088]  __x64_sys_recvmmsg+0x20f/0x260
[ 1340.492102]  ? ksys_write+0x1a9/0x260
[ 1340.492117]  ? __do_sys_socketcall+0x600/0x600
[ 1340.492134]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1340.492149]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1340.492166]  do_syscall_64+0x33/0x40
[ 1340.492180]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1340.492189] RIP: 0033:0x7f96c2c53b19
[ 1340.492203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1340.492211] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1340.492227] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1340.492236] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1340.492244] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1340.492253] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1340.492262] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:36:41 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x500000000000000)

03:36:41 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:36:41 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 44)

03:36:41 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = getpgrp(0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0x4, 0xc1, 0x18, 0x0, 0x7fff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x401}, 0x2c, 0x9, 0x1, 0x9, 0x0, 0x4e820f10, 0x0, 0x0, 0x7fffffff, 0x0, 0x9}, r1, 0x9, r0, 0x3)
getdents64(r0, &(0x7f00000000c0)=""/138, 0x8a)

03:36:41 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 36)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:36:41 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:36:41 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:36:41 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x6000000)

[ 1354.660717] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1354.678856] FAULT_INJECTION: forcing a failure.
[ 1354.678856] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1354.680235] CPU: 1 PID: 7851 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1354.680829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1354.681538] Call Trace:
[ 1354.681783]  dump_stack+0x107/0x167
[ 1354.682128]  should_fail.cold+0x5/0xa
[ 1354.682475]  _copy_from_user+0x2e/0x1b0
[ 1354.682835]  __copy_msghdr_from_user+0x91/0x4b0
[ 1354.683248]  ? __ia32_sys_shutdown+0x80/0x80
[ 1354.683640]  ? __lock_acquire+0x1657/0x5b00
[ 1354.683927] FAULT_INJECTION: forcing a failure.
[ 1354.683927] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1354.684031]  ___sys_recvmsg+0xd5/0x200
[ 1354.685294]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1354.685714]  ? __fget_files+0x2cf/0x520
[ 1354.686054]  ? lock_acquire+0x197/0x470
[ 1354.686381]  ? find_held_lock+0x2c/0x110
[ 1354.686734]  ? __might_fault+0xd3/0x180
[ 1354.687055]  ? lock_downgrade+0x6d0/0x6d0
[ 1354.687414]  do_recvmmsg+0x24c/0x6d0
[ 1354.687738]  ? ___sys_recvmsg+0x200/0x200
[ 1354.688073]  ? lock_downgrade+0x6d0/0x6d0
[ 1354.688425]  ? ksys_write+0x12d/0x260
[ 1354.688762]  ? wait_for_completion_io+0x270/0x270
[ 1354.689150]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1354.689541]  ? vfs_write+0x354/0xb10
[ 1354.689851]  __x64_sys_recvmmsg+0x20f/0x260
[ 1354.690222]  ? ksys_write+0x1a9/0x260
[ 1354.690528]  ? __do_sys_socketcall+0x600/0x600
[ 1354.690894]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1354.691308]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1354.691718]  do_syscall_64+0x33/0x40
[ 1354.692015]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1354.692422] RIP: 0033:0x7f96c2c53b19
[ 1354.692719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1354.694201] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1354.694825] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1354.695391] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1354.695966] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1354.696546] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1354.697107] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
[ 1354.697712] CPU: 0 PID: 7853 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1354.698363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1354.699098] Call Trace:
[ 1354.699346]  dump_stack+0x107/0x167
[ 1354.699684]  should_fail.cold+0x5/0xa
[ 1354.700042]  _copy_from_user+0x2e/0x1b0
[ 1354.700428]  __copy_msghdr_from_user+0x91/0x4b0
[ 1354.700857]  ? __ia32_sys_shutdown+0x80/0x80
[ 1354.701264]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1354.701754]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1354.702269]  ? trace_hardirqs_on+0x5b/0x180
[ 1354.702685]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1354.703185]  ___sys_recvmsg+0xd5/0x200
[ 1354.703547]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1354.704007]  ? _raw_spin_unlock_irq+0x27/0x30
[ 1354.704424]  ? finish_task_switch+0x126/0x5d0
[ 1354.704835]  ? finish_task_switch+0xef/0x5d0
[ 1354.705244]  ? __switch_to+0x572/0xf70
[ 1354.705607]  ? __switch_to_asm+0x3a/0x60
[ 1354.706001]  ? __switch_to_asm+0x34/0x60
[ 1354.706020]  ? __schedule+0x82c/0x1ea0
[ 1354.706044]  ? io_schedule_timeout+0x140/0x140
[ 1354.706074]  do_recvmmsg+0x24c/0x6d0
[ 1354.706096]  ? ___sys_recvmsg+0x200/0x200
[ 1354.706111]  ? lock_downgrade+0x6d0/0x6d0
[ 1354.706132]  ? ksys_write+0x12d/0x260
[ 1354.706160]  ? wait_for_completion_io+0x270/0x270
[ 1354.706177]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1354.706190]  ? vfs_write+0x354/0xb10
[ 1354.706210]  __x64_sys_recvmmsg+0x20f/0x260
[ 1354.706224]  ? ksys_write+0x1a9/0x260
[ 1354.706240]  ? __do_sys_socketcall+0x600/0x600
03:36:41 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x18000000)

[ 1354.706258]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1354.706272]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1354.706290]  do_syscall_64+0x33/0x40
[ 1354.706303]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1354.706311] RIP: 0033:0x7f06d872db19
[ 1354.706326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
03:36:41 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4063, 0xfdf, 0x0)

03:36:41 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
io_uring_enter(r0, 0x6e92, 0x1a29, 0x1, &(0x7f0000000040)={[0x8001]}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x6, 0x20, 0x8, 0x3, 0x0, 0x0, 0x8022, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x4}, 0x41002, 0x8f, 0x42b, 0xa, 0x5, 0x8, 0x800, 0x0, 0x4e, 0x0, 0x2}, 0x0, 0x1, r2, 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0))

[ 1354.706334] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1354.706349] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1354.706358] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1354.706367] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1354.706376] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1354.706385] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
03:36:41 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 37)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:36:41 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 45)

[ 1354.919722] FAULT_INJECTION: forcing a failure.
[ 1354.919722] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1354.922621] CPU: 1 PID: 7873 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1354.923885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1354.925428] Call Trace:
[ 1354.925961]  dump_stack+0x107/0x167
[ 1354.926297]  should_fail.cold+0x5/0xa
[ 1354.926643]  _copy_from_user+0x2e/0x1b0
[ 1354.927009]  __copy_msghdr_from_user+0x91/0x4b0
[ 1354.927420]  ? __ia32_sys_shutdown+0x80/0x80
[ 1354.927813]  ? __lock_acquire+0x1657/0x5b00
[ 1354.928212]  ___sys_recvmsg+0xd5/0x200
[ 1354.928560]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1354.928988]  ? _raw_spin_unlock_irq+0x27/0x30
[ 1354.929393]  ? lock_acquire+0x197/0x470
[ 1354.929747]  ? find_held_lock+0x2c/0x110
[ 1354.930481]  ? __might_fault+0xd3/0x180
[ 1354.931210]  ? lock_downgrade+0x6d0/0x6d0
[ 1354.931998]  ? io_schedule_timeout+0x140/0x140
[ 1354.932226] FAULT_INJECTION: forcing a failure.
[ 1354.932226] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1354.932780]  do_recvmmsg+0x24c/0x6d0
[ 1354.932803]  ? ___sys_recvmsg+0x200/0x200
[ 1354.932817]  ? lock_downgrade+0x6d0/0x6d0
[ 1354.932838]  ? ksys_write+0x12d/0x260
[ 1354.932864]  ? wait_for_completion_io+0x270/0x270
[ 1354.932881]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1354.932893]  ? vfs_write+0x354/0xb10
[ 1354.932912]  __x64_sys_recvmmsg+0x20f/0x260
[ 1354.932930]  ? ksys_write+0x1a9/0x260
[ 1354.938282]  ? __do_sys_socketcall+0x600/0x600
[ 1354.938830]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1354.939250]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1354.939687]  do_syscall_64+0x33/0x40
[ 1354.939987]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1354.940403] RIP: 0033:0x7f06d872db19
[ 1354.940719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1354.942650] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1354.943918] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1354.945101] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1354.946426] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1354.947631] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1354.948815] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1354.950103] CPU: 0 PID: 7875 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1354.951382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1354.952910] Call Trace:
[ 1354.953398]  dump_stack+0x107/0x167
[ 1354.954020]  should_fail.cold+0x5/0xa
[ 1354.954381]  _copy_from_user+0x2e/0x1b0
[ 1354.954760]  __copy_msghdr_from_user+0x91/0x4b0
[ 1354.955189]  ? __ia32_sys_shutdown+0x80/0x80
[ 1354.955598]  ? __lock_acquire+0x1657/0x5b00
[ 1354.956018]  ___sys_recvmsg+0xd5/0x200
[ 1354.956384]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1354.956836]  ? __fget_files+0x2cf/0x520
[ 1354.957224]  ? lock_acquire+0x197/0x470
[ 1354.957594]  ? find_held_lock+0x2c/0x110
[ 1354.957990]  ? __might_fault+0xd3/0x180
[ 1354.958365]  ? lock_downgrade+0x6d0/0x6d0
[ 1354.958770]  do_recvmmsg+0x24c/0x6d0
[ 1354.959130]  ? ___sys_recvmsg+0x200/0x200
[ 1354.959513]  ? lock_downgrade+0x6d0/0x6d0
[ 1354.959903]  ? ksys_write+0x12d/0x260
[ 1354.960277]  ? wait_for_completion_io+0x270/0x270
[ 1354.960726]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1354.961158]  ? vfs_write+0x354/0xb10
[ 1354.961521]  __x64_sys_recvmmsg+0x20f/0x260
[ 1354.961936]  ? ksys_write+0x1a9/0x260
[ 1354.962313]  ? __do_sys_socketcall+0x600/0x600
[ 1354.962739]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1354.963218]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1354.963703]  do_syscall_64+0x33/0x40
[ 1354.964047]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1354.964534] RIP: 0033:0x7f96c2c53b19
[ 1354.964875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1354.967203] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1354.968633] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1354.970034] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1354.971406] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1354.972776] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1354.974228] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:36:55 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x1800000000000000)

03:36:55 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:36:55 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:36:55 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 38)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:36:55 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0xf6ffffff)

03:36:55 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r5}}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r6, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x4100, 0x2, 0x7}, 0x18)
readv(r7, &(0x7f0000000780), 0xa)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2)
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r8 = syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_io_uring_submit(0x0, r4, &(0x7f0000000840)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={<r9=>r1, 0x6, 0x3, 0x5})
r10 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r10, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r11 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000a80), 0x2, 0x0)
sendfile(r10, r11, &(0x7f0000000ac0)=0x100, 0x2)
ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x66, 0x800, 0x4, 0x9}})
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0xffff0001, 0x0, &(0x7f0000000000)=[r8]}, 0x1)

03:36:55 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 46)

03:36:55 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1369.086656] FAULT_INJECTION: forcing a failure.
[ 1369.086656] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1369.087880] CPU: 0 PID: 7894 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1369.088492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1369.089235] Call Trace:
[ 1369.089486]  dump_stack+0x107/0x167
[ 1369.089825]  should_fail.cold+0x5/0xa
[ 1369.106273]  _copy_from_user+0x2e/0x1b0
[ 1369.106654]  __copy_msghdr_from_user+0x91/0x4b0
[ 1369.107092]  ? __ia32_sys_shutdown+0x80/0x80
[ 1369.107502]  ? __lock_acquire+0x1657/0x5b00
[ 1369.107924]  ___sys_recvmsg+0xd5/0x200
[ 1369.108292]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1369.108747]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1369.109252]  ? lock_acquire+0x197/0x470
[ 1369.109619]  ? find_held_lock+0x2c/0x110
[ 1369.110004]  ? __might_fault+0xd3/0x180
[ 1369.110393]  ? lock_downgrade+0x6d0/0x6d0
[ 1369.110781]  ? io_schedule_timeout+0x140/0x140
[ 1369.111215]  do_recvmmsg+0x24c/0x6d0
[ 1369.111558]  ? ___sys_recvmsg+0x200/0x200
[ 1369.111941]  ? lock_downgrade+0x6d0/0x6d0
[ 1369.112339]  ? ksys_write+0x12d/0x260
[ 1369.112712]  ? wait_for_completion_io+0x270/0x270
[ 1369.113153]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1369.113579]  ? vfs_write+0x354/0xb10
[ 1369.113936]  __x64_sys_recvmmsg+0x20f/0x260
[ 1369.114352]  ? ksys_write+0x1a9/0x260
[ 1369.114707]  ? __do_sys_socketcall+0x600/0x600
[ 1369.115127]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1369.115608]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1369.116078]  do_syscall_64+0x33/0x40
[ 1369.116424]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1369.116894] RIP: 0033:0x7f06d872db19
[ 1369.117241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1369.117772] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1369.118803] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1369.118821] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1369.118830] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1369.118839] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1369.118849] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1369.118858] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1369.145965] FAULT_INJECTION: forcing a failure.
[ 1369.145965] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1369.147574] CPU: 0 PID: 7902 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1369.148204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1369.148948] Call Trace:
[ 1369.149215]  dump_stack+0x107/0x167
[ 1369.149556]  should_fail.cold+0x5/0xa
[ 1369.149917]  _copy_from_user+0x2e/0x1b0
[ 1369.150304]  __copy_msghdr_from_user+0x91/0x4b0
[ 1369.150721]  ? __ia32_sys_shutdown+0x80/0x80
[ 1369.151119]  ? __lock_acquire+0x1657/0x5b00
[ 1369.151532]  ___sys_recvmsg+0xd5/0x200
[ 1369.151896]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1369.152354]  ? __fget_files+0x2cf/0x520
[ 1369.152727]  ? lock_acquire+0x197/0x470
[ 1369.153094]  ? find_held_lock+0x2c/0x110
[ 1369.153496]  ? __might_fault+0xd3/0x180
[ 1369.153863]  ? lock_downgrade+0x6d0/0x6d0
[ 1369.162271]  do_recvmmsg+0x24c/0x6d0
[ 1369.162289]  ? ___sys_recvmsg+0x200/0x200
[ 1369.162302]  ? lock_downgrade+0x6d0/0x6d0
[ 1369.162320]  ? ksys_write+0x12d/0x260
03:36:56 executing program 6:
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x8, 0x9, 0x81, 0x5a24}, {0x1, 0xa1, 0x0, 0x5}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{0x0, 0x9, 0x0, 0x1ff}, {0x0, 0x6, 0x8, 0x5}, {0x7, 0x8a, 0x31, 0xffffffff}, {0xfff, 0xad, 0x0, 0xfffffffb}, {0x3ff, 0x3, 0x20, 0x10001}, {0x72b, 0x45, 0x3, 0x1000}, {0xfff8, 0x5, 0x5, 0xe4}, {0xe4, 0x80, 0x20, 0x3}, {0x1480, 0x0, 0x6, 0x1ff}]})
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r4 = pidfd_getfd(r2, r3, 0x0)
ioctl$FITHAW(r4, 0xc0045878)
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0xac)

[ 1369.162343]  ? wait_for_completion_io+0x270/0x270
[ 1369.162358]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1369.162368]  ? vfs_write+0x354/0xb10
[ 1369.162383]  __x64_sys_recvmmsg+0x20f/0x260
[ 1369.162395]  ? ksys_write+0x1a9/0x260
[ 1369.162407]  ? __do_sys_socketcall+0x600/0x600
[ 1369.162421]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
03:36:56 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 39)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:36:56 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 47)

[ 1369.162433]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1369.162446]  do_syscall_64+0x33/0x40
[ 1369.162457]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1369.162465] RIP: 0033:0x7f96c2c53b19
[ 1369.162477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1369.162484] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1369.162497] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1369.162504] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1369.162511] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
03:36:56 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0xfeffffff)

[ 1369.162518] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1369.162525] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:36:56 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
syz_io_uring_setup(0x4312, &(0x7f0000000140)={0x0, 0xaff6, 0x4, 0x1, 0x211}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, @perf_config_ext={0x2, 0x1000000000000000}, 0x208, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0x8000000000a, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)={0x0, <r2=>0x0})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0, <r3=>0x0})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6, 0x3, 0x22, 0x9, 0x0, 0x101, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6e6b, 0x4, @perf_bp={&(0x7f0000000240), 0xe}, 0x10, 0x2, 0x80000001, 0x3, 0xdff, 0x4, 0x6, 0x0, 0xff, 0x0, 0x2}, r3, 0x3, 0xffffffffffffffff, 0x9)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r4, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x1f, 0x3d, 0x3, 0x7, 0x0, 0x6, 0x40, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x14}, 0x111c, 0x9, 0x80000000, 0x6, 0x20, 0x9, 0x1000, 0x0, 0x800}, r2, 0x0, r4, 0x2)
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0xee8)

03:36:56 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x40, 0x40, 0x1f, 0x2a, 0x0, 0x100000001, 0x80, 0xf, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000001, 0x3}, 0x284, 0xc9ec, 0x7f, 0x2, 0x6, 0x3, 0x3f, 0x0, 0x7, 0x0, 0x10001}, r0, 0x7, 0xffffffffffffffff, 0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

03:36:56 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 48)

03:36:56 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 40)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

[ 1369.235927] FAULT_INJECTION: forcing a failure.
[ 1369.235927] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1369.235955] CPU: 0 PID: 7909 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1369.235962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1369.235966] Call Trace:
[ 1369.235983]  dump_stack+0x107/0x167
[ 1369.235996]  should_fail.cold+0x5/0xa
[ 1369.236013]  _copy_from_user+0x2e/0x1b0
[ 1369.236030]  __copy_msghdr_from_user+0x91/0x4b0
[ 1369.236043]  ? __ia32_sys_shutdown+0x80/0x80
[ 1369.236056]  ? __lock_acquire+0x1657/0x5b00
[ 1369.236080]  ___sys_recvmsg+0xd5/0x200
[ 1369.236093]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1369.236109]  ? __fget_files+0x2cf/0x520
[ 1369.236126]  ? lock_acquire+0x197/0x470
[ 1369.236137]  ? find_held_lock+0x2c/0x110
[ 1369.236153]  ? __might_fault+0xd3/0x180
[ 1369.236165]  ? lock_downgrade+0x6d0/0x6d0
[ 1369.236190]  do_recvmmsg+0x24c/0x6d0
[ 1369.236207]  ? ___sys_recvmsg+0x200/0x200
[ 1369.236219]  ? lock_downgrade+0x6d0/0x6d0
[ 1369.236236]  ? ksys_write+0x12d/0x260
[ 1369.236258]  ? wait_for_completion_io+0x270/0x270
[ 1369.236272]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1369.236283]  ? vfs_write+0x354/0xb10
[ 1369.236298]  __x64_sys_recvmmsg+0x20f/0x260
[ 1369.236310]  ? ksys_write+0x1a9/0x260
[ 1369.236322]  ? __do_sys_socketcall+0x600/0x600
[ 1369.236337]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1369.236348]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1369.236361]  do_syscall_64+0x33/0x40
[ 1369.236373]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1369.236381] RIP: 0033:0x7f96c2c53b19
[ 1369.236392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1369.236398] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1369.236411] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1369.236418] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1369.236424] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1369.236431] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1369.236438] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
[ 1369.255006] FAULT_INJECTION: forcing a failure.
[ 1369.255006] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1369.255019] CPU: 0 PID: 7912 Comm: syz-executor.4 Not tainted 5.10.226 #1
[ 1369.255026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1369.255030] Call Trace:
[ 1369.255046]  dump_stack+0x107/0x167
[ 1369.255058]  should_fail.cold+0x5/0xa
[ 1369.255076]  _copy_from_user+0x2e/0x1b0
[ 1369.255093]  __copy_msghdr_from_user+0x91/0x4b0
[ 1369.255106]  ? __ia32_sys_shutdown+0x80/0x80
[ 1369.255119]  ? __lock_acquire+0x1657/0x5b00
[ 1369.255143]  ___sys_recvmsg+0xd5/0x200
[ 1369.255156]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1369.255169]  ? __fget_files+0x2cf/0x520
[ 1369.255186]  ? lock_acquire+0x197/0x470
[ 1369.255196]  ? find_held_lock+0x2c/0x110
[ 1369.255216]  ? __might_fault+0xd3/0x180
[ 1369.255228]  ? lock_downgrade+0x6d0/0x6d0
[ 1369.255254]  do_recvmmsg+0x24c/0x6d0
[ 1369.255270]  ? ___sys_recvmsg+0x200/0x200
[ 1369.255282]  ? lock_downgrade+0x6d0/0x6d0
[ 1369.255299]  ? ksys_write+0x12d/0x260
[ 1369.255322]  ? wait_for_completion_io+0x270/0x270
[ 1369.255336]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1369.255346]  ? vfs_write+0x354/0xb10
[ 1369.255361]  __x64_sys_recvmmsg+0x20f/0x260
[ 1369.255373]  ? ksys_write+0x1a9/0x260
[ 1369.255385]  ? __do_sys_socketcall+0x600/0x600
[ 1369.255400]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1369.255411]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1369.255425]  do_syscall_64+0x33/0x40
[ 1369.255436]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1369.255444] RIP: 0033:0x7f06d872db19
[ 1369.255455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1369.255462] RSP: 002b:00007f06d5ca3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1369.255475] RAX: ffffffffffffffda RBX: 00007f06d8840f60 RCX: 00007f06d872db19
[ 1369.255482] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1369.255489] RBP: 00007f06d5ca31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1369.255495] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1369.255502] R13: 00007ffc7bd8560f R14: 00007f06d5ca3300 R15: 0000000000022000
[ 1369.372235] FAULT_INJECTION: forcing a failure.
[ 1369.372235] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1369.372252] CPU: 1 PID: 7925 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1369.372260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1369.372265] Call Trace:
[ 1369.372284]  dump_stack+0x107/0x167
[ 1369.372306]  should_fail.cold+0x5/0xa
[ 1369.372327]  _copy_from_user+0x2e/0x1b0
[ 1369.372348]  __copy_msghdr_from_user+0x91/0x4b0
[ 1369.372364]  ? __ia32_sys_shutdown+0x80/0x80
[ 1369.372381]  ? __lock_acquire+0x1657/0x5b00
[ 1369.372411]  ___sys_recvmsg+0xd5/0x200
[ 1369.372427]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1369.372443]  ? __fget_files+0x2cf/0x520
[ 1369.372463]  ? lock_acquire+0x197/0x470
[ 1369.372477]  ? find_held_lock+0x2c/0x110
[ 1369.372497]  ? __might_fault+0xd3/0x180
[ 1369.372511]  ? lock_downgrade+0x6d0/0x6d0
[ 1369.372543]  do_recvmmsg+0x24c/0x6d0
[ 1369.372564]  ? ___sys_recvmsg+0x200/0x200
[ 1369.372578]  ? lock_downgrade+0x6d0/0x6d0
[ 1369.372601]  ? ksys_write+0x12d/0x260
[ 1369.372629]  ? wait_for_completion_io+0x270/0x270
[ 1369.372647]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1369.372659]  ? vfs_write+0x354/0xb10
[ 1369.372678]  __x64_sys_recvmmsg+0x20f/0x260
[ 1369.372692]  ? ksys_write+0x1a9/0x260
[ 1369.372707]  ? __do_sys_socketcall+0x600/0x600
[ 1369.372725]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1369.372739]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1369.372757]  do_syscall_64+0x33/0x40
[ 1369.372771]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1369.372781] RIP: 0033:0x7f96c2c53b19
[ 1369.372796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1369.372804] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1369.372820] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1369.372828] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1369.372837] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1369.372845] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1369.372854] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:37:10 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/l2cap\x00')
fcntl$dupfd(r0, 0x406, r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:37:10 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {r0}}, './file0\x00'})
fspick(r2, &(0x7f0000000040)='./file0\x00', 0x1)

03:37:10 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0xf6ffffff00000000)

03:37:10 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:37:10 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0xfffffff6)

03:37:10 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 49)

03:37:10 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:37:10 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

[ 1383.587608] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1383.596636] FAULT_INJECTION: forcing a failure.
[ 1383.596636] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1383.597703] CPU: 0 PID: 7946 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1383.598414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1383.599856] Call Trace:
[ 1383.600319]  dump_stack+0x107/0x167
[ 1383.600941]  should_fail.cold+0x5/0xa
[ 1383.601607]  _copy_from_user+0x2e/0x1b0
[ 1383.602283]  __copy_msghdr_from_user+0x91/0x4b0
[ 1383.602698]  ? __ia32_sys_shutdown+0x80/0x80
[ 1383.603075]  ? __lock_acquire+0x1657/0x5b00
[ 1383.603465]  ___sys_recvmsg+0xd5/0x200
[ 1383.603804]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1383.604225]  ? lock_acquire+0x197/0x470
[ 1383.604572]  ? find_held_lock+0x2c/0x110
[ 1383.604923]  ? __might_fault+0xd3/0x180
[ 1383.605266]  ? lock_downgrade+0x6d0/0x6d0
[ 1383.605640]  do_recvmmsg+0x24c/0x6d0
[ 1383.605962]  ? ___sys_recvmsg+0x200/0x200
[ 1383.606471]  ? lock_downgrade+0x6d0/0x6d0
[ 1383.607182]  ? ksys_write+0x12d/0x260
[ 1383.607836]  ? wait_for_completion_io+0x270/0x270
[ 1383.608648]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1383.609434]  ? vfs_write+0x354/0xb10
[ 1383.610067]  __x64_sys_recvmmsg+0x20f/0x260
[ 1383.610529]  ? ksys_write+0x1a9/0x260
[ 1383.610866]  ? __do_sys_socketcall+0x600/0x600
[ 1383.611259]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1383.611705]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1383.612154]  do_syscall_64+0x33/0x40
[ 1383.612479]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1383.612913] RIP: 0033:0x7f96c2c53b19
[ 1383.613242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1383.614839] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1383.615494] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1383.616095] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1383.616704] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1383.617312] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1383.617911] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:37:10 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x1}}, './file0\x00'})
lseek(r1, 0xd273, 0x4)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:37:10 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:37:10 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0xfffffffe)

03:37:10 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 50)

03:37:10 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x270}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pwrite64(r1, &(0x7f00000000c0)="357928c922380e8722ca0cbfc1d779789e09ed60d1038114f3b27d3089353c18d70861b2e1f7a80383e2eb1072a7eb8b40d624d948a1117007aaaf9c54cc3cb2e5fc966a3ab3a8b7f91742341cd8240d76b0f4200f5ec54a3f79c0ba54f4c02cd95bec98e2c01849fe0a30d3321255ccd7575afac4a5733fea668bd842f5f8901d15018b98ddf48ba1c97215525e58d5cb97b982322cadc9793e430284e8e9ab56cb34f344780d1bc185597f0b05d00d60abe7785cef0e24257f6bb5fe1065", 0xbf, 0xff)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1383.828906] FAULT_INJECTION: forcing a failure.
[ 1383.828906] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1383.830214] CPU: 0 PID: 7968 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1383.830819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1383.831515] Call Trace:
[ 1383.831761]  dump_stack+0x107/0x167
[ 1383.832074]  should_fail.cold+0x5/0xa
[ 1383.832405]  _copy_from_user+0x2e/0x1b0
[ 1383.832753]  __copy_msghdr_from_user+0x91/0x4b0
[ 1383.833161]  ? __ia32_sys_shutdown+0x80/0x80
[ 1383.833538]  ? __lock_acquire+0x1657/0x5b00
[ 1383.833928]  ___sys_recvmsg+0xd5/0x200
[ 1383.834269]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1383.834692]  ? __fget_files+0x2cf/0x520
[ 1383.835047]  ? lock_acquire+0x197/0x470
[ 1383.835388]  ? find_held_lock+0x2c/0x110
[ 1383.835739]  ? __might_fault+0xd3/0x180
[ 1383.836090]  ? lock_downgrade+0x6d0/0x6d0
[ 1383.836456]  do_recvmmsg+0x24c/0x6d0
[ 1383.836784]  ? ___sys_recvmsg+0x200/0x200
[ 1383.837147]  ? lock_downgrade+0x6d0/0x6d0
[ 1383.837507]  ? ksys_write+0x12d/0x260
[ 1383.837845]  ? wait_for_completion_io+0x270/0x270
[ 1383.838276]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1383.838675]  ? vfs_write+0x354/0xb10
[ 1383.838996]  __x64_sys_recvmmsg+0x20f/0x260
[ 1383.839376]  ? ksys_write+0x1a9/0x260
[ 1383.839705]  ? __do_sys_socketcall+0x600/0x600
[ 1383.840095]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1383.840550]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1383.840988]  do_syscall_64+0x33/0x40
[ 1383.841316]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1383.841749] RIP: 0033:0x7f96c2c53b19
[ 1383.842064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1383.843635] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1383.844281] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1383.844890] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1383.845498] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1383.846098] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1383.846728] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:37:10 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x1000000000000)

03:37:10 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:37:10 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x4, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

[ 1383.894139] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
03:37:10 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:37:10 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 51)

[ 1383.990689] FAULT_INJECTION: forcing a failure.
[ 1383.990689] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1383.991818] CPU: 0 PID: 7985 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1383.992407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1383.993122] Call Trace:
[ 1383.993357]  dump_stack+0x107/0x167
[ 1383.993669]  should_fail.cold+0x5/0xa
[ 1383.994010]  _copy_from_user+0x2e/0x1b0
[ 1383.994381]  __copy_msghdr_from_user+0x91/0x4b0
[ 1383.994782]  ? __ia32_sys_shutdown+0x80/0x80
[ 1383.995168]  ? __lock_acquire+0x1657/0x5b00
[ 1383.995548]  ___sys_recvmsg+0xd5/0x200
[ 1383.995885]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1383.996320]  ? lock_acquire+0x197/0x470
[ 1383.996658]  ? find_held_lock+0x2c/0x110
[ 1383.997023]  ? __might_fault+0xd3/0x180
[ 1383.997369]  ? lock_downgrade+0x6d0/0x6d0
[ 1383.997735]  do_recvmmsg+0x24c/0x6d0
[ 1383.998063]  ? ___sys_recvmsg+0x200/0x200
[ 1383.998446]  ? lock_downgrade+0x6d0/0x6d0
[ 1383.998805]  ? ksys_write+0x12d/0x260
[ 1383.999151]  ? wait_for_completion_io+0x270/0x270
[ 1383.999565]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1383.999958]  ? vfs_write+0x354/0xb10
[ 1384.000289]  __x64_sys_recvmmsg+0x20f/0x260
[ 1384.000657]  ? ksys_write+0x1a9/0x260
[ 1384.000982]  ? __do_sys_socketcall+0x600/0x600
[ 1384.001383]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1384.001826]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1384.002271]  do_syscall_64+0x33/0x40
[ 1384.002606]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1384.003038] RIP: 0033:0x7f96c2c53b19
[ 1384.003366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1384.004909] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1384.005557] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1384.006157] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1384.006782] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1384.007379] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1384.007986] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:37:25 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0xfeffffff00000000)

03:37:25 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x101}}, './file0\x00'})
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000030000f30000e10005000000000000000100f0ff00000000fcffffff00000000040000fffffffc008180000000000000ffffffff000400000000000000000000ea54ffffffff040001000000002500"/96]}, @devid=r3})
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000030000f30000e10005000000000000000100f0ff00000000fcffffff00000000040000fffffffc008180000000000000ffffffff000400000000000000000000ea54ffffffff040001000000002500"/96]}, @devid=r5})
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000000c0)={0xc, 0x2, {0x4, @usage=0x128c, r3, 0x5, 0x9, 0x8, 0x535c, 0x3, 0x0, @struct={0x100, 0x5}, 0xb8, 0x3, [0x6, 0x0, 0x3, 0xf9, 0xfffffffffffffffa, 0x2]}, {0x100000001, @struct={0x1, 0x2}, 0x0, 0x424, 0xf24, 0x401, 0x5717edc5, 0x2, 0x488, @struct={0x1ff, 0xa8}, 0x8, 0x8, [0xfb, 0x4, 0x1, 0x0, 0x80, 0x4]}, {0x3, @usage=0x7, r5, 0x9, 0x21a, 0x7, 0x5, 0x1, 0xb8, @struct={0x3, 0x1000}, 0x91f8, 0x1, [0x0, 0x0, 0xffffffffd11c946e, 0x8, 0x8, 0xf004]}, {0x7f, 0x0, 0xd8}})

03:37:25 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x14000, 0x0)
signalfd4(r1, &(0x7f0000000040)={[0x4ab]}, 0x8, 0x800)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:37:25 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:37:25 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x2000, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:37:25 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 52)

03:37:25 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1398.114644] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
03:37:25 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x8000000000000)

[ 1398.133179] FAULT_INJECTION: forcing a failure.
[ 1398.133179] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1398.134362] CPU: 0 PID: 8006 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1398.134960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1398.135662] Call Trace:
[ 1398.135895]  dump_stack+0x107/0x167
[ 1398.136207]  should_fail.cold+0x5/0xa
[ 1398.136537]  _copy_from_user+0x2e/0x1b0
[ 1398.136884]  __copy_msghdr_from_user+0x91/0x4b0
[ 1398.137279]  ? __ia32_sys_shutdown+0x80/0x80
[ 1398.137654]  ? __lock_acquire+0x1657/0x5b00
[ 1398.138034]  ___sys_recvmsg+0xd5/0x200
[ 1398.138379]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1398.138811]  ? __fget_files+0x2cf/0x520
[ 1398.139155]  ? lock_acquire+0x197/0x470
[ 1398.150575]  ? find_held_lock+0x2c/0x110
[ 1398.150930]  ? __might_fault+0xd3/0x180
[ 1398.151266]  ? lock_downgrade+0x6d0/0x6d0
[ 1398.151628]  do_recvmmsg+0x24c/0x6d0
[ 1398.151948]  ? ___sys_recvmsg+0x200/0x200
[ 1398.152296]  ? lock_downgrade+0x6d0/0x6d0
[ 1398.152651]  ? ksys_write+0x12d/0x260
[ 1398.152986]  ? wait_for_completion_io+0x270/0x270
[ 1398.153396]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1398.153788]  ? vfs_write+0x354/0xb10
[ 1398.154107]  __x64_sys_recvmmsg+0x20f/0x260
[ 1398.154496]  ? ksys_write+0x1a9/0x260
[ 1398.154824]  ? __do_sys_socketcall+0x600/0x600
[ 1398.155213]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1398.155654]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1398.156088]  do_syscall_64+0x33/0x40
[ 1398.156402]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1398.156839] RIP: 0033:0x7f96c2c53b19
[ 1398.157153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1398.158707] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1398.159348] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1398.159947] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1398.160543] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1398.161138] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1398.161740] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:37:25 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/4091, 0xffb, 0x20)

03:37:25 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x4000, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:37:25 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="1b8d43b08a493ff2947a9cb170ba09257a45cc97b949b195944ce0671c67ff923d58b8d77ff850448a97f8f1edef00cb710fe3f9994e7884786fdf279006cb9c0a0179521ab7185be88f11125fd8e8d413d8a36943627d87", 0x58}, {&(0x7f0000000240)="3f548fbc32d518afa9da0620b579fffbddc7af99146e91777a8bdbd9157f0683f60391510de4dd33f90162671a40f181c0a17607dee578d3331436724a2845d76959c70c4d837ef6969fd3bd9a7dce2ea092be69995c4f6dd70267ea5dbbb29d902929668d620a687d198a06e979ffa49cd51b95a5", 0x75}, {&(0x7f0000000340)="6d8bf047", 0x4}], 0x3)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x1, 0x2000, @fd=r0, 0x81, &(0x7f0000000040)=[{&(0x7f0000000000)="d9e4faacf42172f9e32c6cfec2421af83e3ca36199b08b2e0a7fc61e3adc56", 0x1f}, {&(0x7f00000000c0)="2de1594285c113273a408beea1a1e7935fcf7285caf2c556028a013632503c76b677cf6449ff9c0b862d2cd10e3cf70ac74a1d582854a4bd3aae9baeaad6b60625ef75bed568f22548fcb1e2db024fb07cc6bccf5ad71f44b236fb", 0x5b}], 0x2, 0x8, 0x1, {0x0, r3}}, 0x8000)

03:37:25 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x100000000000000)

03:37:25 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 53)

03:37:25 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x7fffffff, 0x1, 0x2, 0x1, 0x33})
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:37:25 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r2 = fsmount(r1, 0x1, 0x84)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000040)=r3, 0x1)
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

[ 1398.311123] FAULT_INJECTION: forcing a failure.
[ 1398.311123] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1398.312589] CPU: 0 PID: 8031 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1398.313172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1398.313874] Call Trace:
[ 1398.314115]  dump_stack+0x107/0x167
[ 1398.314450]  should_fail.cold+0x5/0xa
[ 1398.314789]  _copy_from_user+0x2e/0x1b0
[ 1398.315135]  __copy_msghdr_from_user+0x91/0x4b0
[ 1398.315528]  ? __ia32_sys_shutdown+0x80/0x80
[ 1398.315901]  ? __lock_acquire+0x1657/0x5b00
[ 1398.316278]  ___sys_recvmsg+0xd5/0x200
[ 1398.316609]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1398.317033]  ? lock_acquire+0x197/0x470
[ 1398.317369]  ? find_held_lock+0x2c/0x110
[ 1398.317720]  ? __might_fault+0xd3/0x180
[ 1398.318056]  ? lock_downgrade+0x6d0/0x6d0
[ 1398.318435]  do_recvmmsg+0x24c/0x6d0
[ 1398.318765]  ? ___sys_recvmsg+0x200/0x200
[ 1398.319117]  ? lock_downgrade+0x6d0/0x6d0
[ 1398.319477]  ? ksys_write+0x12d/0x260
[ 1398.319815]  ? wait_for_completion_io+0x270/0x270
[ 1398.320227]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1398.320621]  ? vfs_write+0x354/0xb10
[ 1398.320943]  __x64_sys_recvmmsg+0x20f/0x260
[ 1398.321310]  ? ksys_write+0x1a9/0x260
[ 1398.321635]  ? __do_sys_socketcall+0x600/0x600
[ 1398.322027]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1398.322487]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1398.322927]  do_syscall_64+0x33/0x40
[ 1398.323244]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1398.323678] RIP: 0033:0x7f96c2c53b19
[ 1398.323996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1398.325539] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1398.326185] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1398.326803] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1398.327403] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1398.328004] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1398.328605] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:37:25 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:37:39 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x200000000000000)

03:37:39 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 54)

[ 1412.250141] FAULT_INJECTION: forcing a failure.
[ 1412.250141] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1412.252858] CPU: 0 PID: 8052 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1412.254349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1412.256196] Call Trace:
[ 1412.256787]  dump_stack+0x107/0x167
[ 1412.257571]  should_fail.cold+0x5/0xa
[ 1412.258417]  _copy_from_user+0x2e/0x1b0
[ 1412.259309]  __copy_msghdr_from_user+0x91/0x4b0
[ 1412.260336]  ? __ia32_sys_shutdown+0x80/0x80
[ 1412.261299]  ? __lock_acquire+0x1657/0x5b00
[ 1412.262297]  ___sys_recvmsg+0xd5/0x200
[ 1412.263169]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1412.264258]  ? __fget_files+0x2cf/0x520
[ 1412.265164]  ? lock_acquire+0x197/0x470
[ 1412.266014]  ? find_held_lock+0x2c/0x110
[ 1412.267026]  ? __might_fault+0xd3/0x180
[ 1412.267913]  ? lock_downgrade+0x6d0/0x6d0
[ 1412.268867]  do_recvmmsg+0x24c/0x6d0
[ 1412.269686]  ? ___sys_recvmsg+0x200/0x200
03:37:39 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x40000, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:37:39 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000008, 0x20010, r0, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r0, 0x10000000)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r4, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x0, @fd=r4, 0x10000, &(0x7f0000000000), 0x0, 0x12}, 0x1)

03:37:39 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x10001, 0x1}, 0x12949, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')

[ 1412.270678]  ? lock_downgrade+0x6d0/0x6d0
[ 1412.271599]  ? ksys_write+0x12d/0x260
[ 1412.272428]  ? wait_for_completion_io+0x270/0x270
[ 1412.273485]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1412.274505]  ? vfs_write+0x354/0xb10
[ 1412.275342]  __x64_sys_recvmmsg+0x20f/0x260
[ 1412.276291]  ? ksys_write+0x1a9/0x260
[ 1412.277130]  ? __do_sys_socketcall+0x600/0x600
[ 1412.278134]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1412.279352]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1412.280489]  do_syscall_64+0x33/0x40
[ 1412.281312]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
03:37:39 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0xffffffff00000000)

03:37:39 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:37:39 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x0, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1412.282437] RIP: 0033:0x7f96c2c53b19
[ 1412.283351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1412.287388] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1412.289053] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1412.290632] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1412.292183] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1412.293723] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1412.295261] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:37:39 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x400000000000000)

[ 1412.314163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8062 comm=syz-executor.2
[ 1412.325637] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
03:37:39 executing program 5:
flistxattr(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0xc)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/xfrm_stat\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:37:39 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x200000, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:37:39 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x600000000000000)

03:37:39 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r2, 0x1)
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:37:39 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 55)

03:37:39 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r2, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6)
getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1412.550706] FAULT_INJECTION: forcing a failure.
[ 1412.550706] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1412.554016] CPU: 0 PID: 8087 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1412.555523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1412.557327] Call Trace:
[ 1412.557904]  dump_stack+0x107/0x167
[ 1412.558706]  should_fail.cold+0x5/0xa
[ 1412.559533]  _copy_from_user+0x2e/0x1b0
[ 1412.560406]  __copy_msghdr_from_user+0x91/0x4b0
[ 1412.561368]  ? __ia32_sys_shutdown+0x80/0x80
[ 1412.562151]  ? __lock_acquire+0x1657/0x5b00
[ 1412.562605]  ___sys_recvmsg+0xd5/0x200
[ 1412.562997]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1412.563494]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1412.564015]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1412.564466]  ? trace_hardirqs_on+0x5b/0x180
[ 1412.564901]  ? lock_acquire+0x197/0x470
[ 1412.565299]  ? find_held_lock+0x2c/0x110
[ 1412.565714]  ? __might_fault+0xd3/0x180
[ 1412.566118]  ? lock_downgrade+0x6d0/0x6d0
[ 1412.569010]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1412.569631]  do_recvmmsg+0x24c/0x6d0
[ 1412.570013]  ? ___sys_recvmsg+0x200/0x200
[ 1412.570877]  ? lock_downgrade+0x6d0/0x6d0
[ 1412.571872]  ? ksys_write+0x12d/0x260
[ 1412.572804]  ? wait_for_completion_io+0x270/0x270
[ 1412.573953]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1412.575069]  ? vfs_write+0x354/0xb10
[ 1412.575957]  __x64_sys_recvmmsg+0x20f/0x260
[ 1412.576985]  ? ksys_write+0x1a9/0x260
[ 1412.577898]  ? __do_sys_socketcall+0x600/0x600
[ 1412.578992]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1412.580246]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1412.581475]  do_syscall_64+0x33/0x40
[ 1412.582363]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1412.583278] RIP: 0033:0x7f96c2c53b19
[ 1412.583659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1412.585487] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1412.586245] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1412.587128] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1412.587839] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1412.588911] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1412.589656] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:37:39 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x3665c4, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:37:39 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x0, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1412.642265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8099 comm=syz-executor.2
03:37:53 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x1800000000000000)

03:37:53 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x7fff}], 0x0, &(0x7f00000000c0)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0)
ioctl$FITRIM(r1, 0x80047210, &(0x7f0000000140))
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x0)

03:37:53 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan1\x00'})
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan3\x00', <r4=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x48040)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r7, 0x3}, 0x14}}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000840)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000200)={'wpan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r8, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB="6d6ed3af"], 0x24}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="b45a0c8ff8b6208e850bbb41442d7e2addec6a076f8e051c17571531ba75d7f31d7d7c3d38232ff27c4e21280a30512a5c81af8d982f2a9f943dbf3913a43bcbf87b93a840bed9a287577d3d8ca609fb17f06e6de848601b61918992ed51b991716efa1c49fa46af654b4068cc67a1e34ff3ad86ae1b5225969d1feff7fb473587d5afbc5a1a8d776f4641", @ANYRES16=r1, @ANYBLOB="000225bd7000fbdbdf251f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060001000080020000000c00060002000000000000000c00060001000000010000000c000600020000000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="0c000600000000000000000008000300", @ANYRES32=r8, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r10, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:37:53 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 56)

03:37:53 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x4000000, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:37:53 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r2 = epoll_create(0x3)
r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x1, 0x400000)
dup3(r2, r3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)=ANY=[@ANYBLOB="0100008339cccf95ff8486fca121b581bc074d63bff92a36e9f25428a009506e2f450ac15b173f6e661e7425f211dd991943b4778cf2aebeee08c9298a26cbfee9a6abad66921fa4f12347b5332b2ce30dda849300483ee4a9cc883e7b165edd9cca06ffd09fd9db87dce1b0a8dc2eb66c241f88392e2391fd513d0679709f147a4a2383f1a113dce71565e9d8cd13ed8a00ab9a76d90d6c860d792a5187", @ANYRES32=<r4=>r0, @ANYBLOB="fcffffff0000000000"])
ioctl$KIOCSOUND(r4, 0x4b2f, 0x9)
r5 = pidfd_getfd(r4, r0, 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000000c0)={0x0, <r7=>0x0})
r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r10 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$sock_int(r10, 0x1, 0x4, &(0x7f0000000000)=0x1a9, 0x4)
pread64(r9, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000002100)=ANY=[@ANYBLOB="c01400002d0000042dbd7000fbdbdf251100000098026580ec4bedafefd1092f771c911ed96a8a6be1dda4f52d42ad4e587e454f8f8ebee9a40f1940d9297938c9f58977759dcdffdcbfea7137b2a04d57380cc3c4c7f3d650b0a23b2e927285f1a6c95404fadcbd13ae17ef4f4335e8d0d851fc5ded8ff2856152b1d1f0ee2cff2dbc7f546341ed3e00aaaec9b31b4e74d79fd7fa4427db25dca1eda4b1bbe141e54d4089238a818b6599132c627394683e049d01bb6779b823e0e4c0adf6096cfc321b45bd4c5402ca71fabca28ec1475d2af0e331b4bc6ad4f4ab18a904a3ad93266f13ece601882bd95cb10ac1a4b98c0000007b8c95290e770a00927c3929462536d6303599355ff3c14c613169873969137d545fdaf6b90c7df4caff514b07cd96a8f9c978f188c5729ac172070c9e0333af5e60b64dc60b35b8c7da752858b536b9d536a1313642594284c71be0efee8b1802b87311fb8863724e11eb7c5e15bd0a3bf8515e708e1c1eda4349cc18dc2e7cbfef6c2e49bc3b93bce0c6f06152565e0e73ecb402e5b6e4a12fe1ba64409847322283240a262eba2e2d7a1b69e5b3162d4891881133fe09c8c3ac1f56a5b92d6cdf7bdffaf2cde2a3e002da5fbb5d1e1e735b9efdc5f440781ab70d398635d25e636613d175318dea23cf23c25e79f2a1d13fce8623bc80ce3550a43ed8e083c89e115de070dc9170bcb778d02cefc9337aaba0a7fbf500fed61d8f7aba0f4fbb79e90b84f001beecdabbc6d32eee4bc128215415ab031def9485fa94475dadb35ed08ce422b1c83ff272ae301f08f96df0b3c5580da1f84135975d5731a9f374ed89d40749703d9587b2ea650863cb97f98d29fd376a0e048f146a6f6eef8e6887a8462526700e0a70290e47eb74994bca51a585d60aa22c80d8473ce23d7a5a53080031000000000000", @ANYRES32=r7, @ANYBLOB="08002500ac14141f051d3a991d8a16534eecff1632ca075e3f33aad627980e7dcbe8b9aeca687a243725a23e2773ec0e27fe15f6a524a80db69ef7175e7ebce28413e7d8218368a3f94f44a635ea31c55f58ef5de890746d4c4bf64670bb83da06a190f4edccef573c37acd8d565a5cb86850f739cb2ea493470520c16082283ca8b1670732d72b2a68e66bb09a561cdf1b74f8289074c93f0e1505b2398bc6f92def027a181733394718dfd8098438815cb9c0a1dfd7356f1be868ed0fc35dfd32e84abad1eb08a5f5eb21a395d84c4e6f2d7a1842c06ee4750c29d8bc1ed70b9ada9b55bda61c50d6830622ae2c8d2e7c03441d7a74247f595702104b020eb592660f3341165d6cc9b0e3d5d59eb01fd0620eaac9828337cc8e0ff6f8793e4851a34c9456dd128cbd8852d33b59bc0665402d5549c5f2f5b00675f4130d76315beaf9f7409af54dabcf0a03c1975965e3019f288551eaa91eb402e76677dbf89f37c3bcb6a2c2179abd09b35ef53b7d2d7e85bdf61107142152afa81bfe2268dd180e65f580a22e87b6700130edb0c0caa9d15183d74a743a3ad30ee1be9b4d96fe6d53ca6fe38b18183fd20efead56552f4c60c3761e201937046f1907a6e31c4b0c0a326e192e2811def8ca90739a00380473b052d6deaaafdf03d6f448317aed3351e0a284c0cfb087a8dfb04ce01e548a1adce8f239714dde9b22a5569be31b4ed582de0146f36d81b0b2672959d23d175f4642ba4c625bf54fb387d91ded7427f45345c2d19d617ac68270fc4608f1de6425a8a4fa9e9bd08003603a79c0b2635bc038f0ea5b249853291928aa1443bdb85d771098aa085ff88407ff4a9d860a850688924c8cc845db88cbacbab880aaf05d2c96b542481f834446d1f9f8b86b2c45a854796e454516d6dcd0a24a2c7260a0766c1c1df93c57ecff15f20f383be9881e16df6874ae21b20e0490cc8cdcf65b0144b83a8c7f4b9a3c9f176f547e193fb8e9e1aad6b45ab975c00f440374d728e701603358d33f7ae2cd2c4b674f375aeb8d4fb506507969e3c353a66305c3d6b9e192e5c562c12496b97adf10ce9232002249425125e81f5b36b345b3bd1eacc83d2d2f6c4a818410645c322cf7e94a4ee8b027840f9b27ffd6483b579c6ac4c23a47edb73a26e5597c972094478c1a41f98b8da4ce8ebc809eb67d04cfeddff4b84a416d34d36537decb0023870ecebad3da498dee35874427dfacac30c40789b05eca9ccf4e54c7140e5df514f1cd7fb9543da52b4aecf04d374a161da4f2389e048fe43958245d1e3c8d4413c2fba5b407eb180cfdff4654f8f39e60c14b72c735837b6c04998df693c8904983a91d18ef65344fce30d5b9cc85f512643a36cd0b445a7ec058ebde9d2742796a57db158916a36a042d2bb387d61cc8d31e955fb77a9805422805216a4213b6d033ca34f9bb15a771cfd1ed0eaa2b81821840303b7056b03effb64e42fe41bdff8cc5e6653efe65051207aa649446a0a83c112d83500697d68f602141257eb97d0d598309f8755009e732499afbaabf24750c7b6ad96c3fe134032c71c1cbda52bbe13bbbb7c32df73a8e91b1081782cd4188f736364edd91bd60620543c4a09409da6b5db0356341cf511d1cf03c594aaa726a47f01e352ebb176a0df9bd71ddede322e929184762714cf732803b0c613a0c3e6e104b108105fe80f28efe136749ddbf53fdd956e4d04638af24738096b04fc26b2784c7840512cfa274f121580c8eb03b50896155ad298e28b9a9b329d0b3f73382430b5703332db2c0020650e13564b83c18c9b7402c95fde72f0a11d178726f862a5131be5ee95c631834b14af231eb0234a179a4bfc592566328e6e68e2629be123deff7ef33f5dbe37dfb83c950e299b07ff1ba52c3c7b43b428026eeec78cf6b4674a090ad18abca4ce1349755cdbbff445f4c6ab662357eda871af90e5b17f254b2079eeac3ddf000cd1c3a392eca35e9f58193a8ad6cd03f655644125904fa5c48ab3be83db147b8639c940df7fcbe9ce1bf49cde702c99b41c2a63d74466debacaa401807561749cb2c1de687ebfe70a7d52dce3daecfb22af10a2c79e0cd17abbbe444969439754e066994001052dfa474525a19c892a613909a93301f99e195a2cb660b7cdd6caecf94cbd24b8f410a9d583c115120d341c3b86af823981d534536c06e8e20a2b32efa67e7a3c5f89207681b7f51757c7ef8080d763581050a55835cfce4cfcd80c20c073ccd18265b0bab770a12a4c69c80d370cb7a9ef29806ebbd15db7b0b765a5be8978e76dd06568daf47343d5c553164c2c6147c2e34059abda4b3e37e575d015e4d598d0776b9b2038f0a8e984cee39cd9925520c7965b2d4de1c265d4ccee94e0ace54f4437ae4d6d3e8607c2d70180ed7542cafd0e4dbcb8fa2ed1c5732fe51e5477465263b3c01102ed8d48b5413441cd6c9903e08373311f24f53cbf56c57ecbf440ee6fcc90134c2fd841fc070b1941e45718abbee5053c73a608406c383bc4856fc52d2a9fde646793ea6bb0df2dc2d6c1046f92e4acb1f64981d1f830c68c17a8cfda98dd5e4d20ec762f2f1658f6c6b5a0db4d71a906072dd78fda8336dffa6d6a233d3bc169697f9ae44b93f998fd86f299e396e371c18f5b7c1f59bbce4345632c49cd9a434e58cecfecccb7ec1efb88b553fea025f78ee9757635fd50ac5e5d2f3db2d1417dcca54e5732b1c6f876d0f55fda7ef62887a2c063f2c57499553c6cc397a99095ea6843bab521d6604d994e4280d82ae3551a0b4c5d5cad6987bec3bab4df10e8d743740315979e79c266cc515ffdf003fa5f0c59d420e42b0cf21c1a0d4afe221b4aa1007b55cd70b8cba22e506b28c8b6110b3ce68be52bb2730d489c5631d528c332a3437da2a3403a6a2faa153fd80446ab49185eedaae03e574c75be98ad19f89274c0ced35e92638d1ee247a2e475cdddc96f175d23c0fce501ee0d32306966e1380d852f7d13c797d99ef28e40336b933009b7b28c0d30c81da4abf57ef5ac9603cedbf44f197ab79850b57d4e798bbd756b46f44ca71bff370bf3b87dbf7e69f64d985560fc04b5640c801e3e56d8c50ecbfe83495e278bacd07ca8429250b0f870a96e63c3d5aa2894f560414d500e01442e084330b2022836f41bffa8a8315879bfa3704cc8176f95001e47ce4c138ae8ea2f6ff02d02ed8950a5da88c843a832667605f3a24d4a67ee0c64f7e73935e0273b1db5ef79ef9c8ef22f8b8e128b2a5bcdaf28c1c1c9019685039a9bf218c298f4e8f5a3ed2a40ad02cd20ba88df8ae6cb86aec0c2cb7d95e38eead84e58f28bc2134c02301d322e777a2671d5e9e2b1fbb53c6cbbcb062a80d939a9d21974d20b9f4341f136b7025a222a9e1c735dcb8d73917dc3acc956a23e00c7a4c6ca5bf39d1ef31295f69dd56ac5a8bad4ce620da9ed836970e011fae5554f58ed2c2c93c2cb1f42f02675e99dd93a24580864fb093cf70a218f413d379d0e7009b33eedb4c7ef1f77c3d844b90f1c3ddab9314c03cce60600c95ceca9e81e1f6655c96c02cd7c05ca40d67eeaec1ca4463bafe3a53fe68ddd6b80792d7d482c356da6ffcb416066e5f4f884f7cc3aa2ee56b68889b60331fac7c671484997da70e8d7c5556eec7b75a9117e5c470f9f08af6012b64fc2f54d2831b0fd2c2d135c006f11d779cbdbcf157bb8fed98bd9caaec0fc7bdfee3180895af72d8b31aebc74c8dcae2949b457223800a99c6c4d169616754bd9ae709c4bf7da5f68d5e735d24b756eb2e9c9396b6103bb37923c64959db98501ac12f4dc98824b38a27229eb2c86cda6d284577d1342634c368766735caaa68a62f9e0e3b5b61c096c6a2d10baf0093a0414afcd85c033e434123ee4a88e062e7e876f2d4026bd44cd91a821ad7df41fcb1d11f481daab2752156cffaa2a680782e0124a5e15d4c3b22b7044bff841ccca925d5914c30b7d2d419ddedc0ac2a1ec88fadb5539d147da3ce61d5ffab83bb92c68eee2c51af07bef542f8b48121d865b1176c7594da95a9a87f3decf02e451af7f9dce0b38c56fd545c27774047ac61543be22dfafe512c0b9f2e9ddb16a58decd0f7c8983bb9ebcd8174278056fea13b5eea73b9b448f840fae8aff6befc6d8b0494ec4fb19f1b5721b9dd1232f75b446ce4ef0ed9386eb2eef58b1068831ca44235413a8bd0d8b55dae7e1c239619e8a82feed7b0d1f4ffc387efbeee87c99b1e23dd7e0bb25e0c8f89e2e8286fdb1de056fc4c0fa88fadd9ad845adfa41137e0d03abeb66ffa15f0a2e566a77893cfe22ef672ffa80404299926df5884972078733fcee0ee80a33d440c93539d6ec229e964c611aed36f4dbcc91d1b2c0644bd31f0e49ed84b4f5186963c79f41baf5c5db8cae390fe1441e9b8e158e23509ce8f4b245694da1d537d6840fe9712f1b0017fb8981f2a543ebc242b664e0ac093c4219acea880117707a7294b59c53a59481c4d31a960ea4b0dd97e6f1eb60bdc76c0483aae3973370c0404e2de51301e2fa4bf1282c4db6e12c754aee0a44cac2874cc9796c5099eeebd390f5b9b2539e1b829ed96bc9001db7960a0ceeb8c0c282a789e75a36e613aecad49c5819e4a8bc9d40b6a35ab3136e0ce16b4f361c3f092afb5336ec907b545e46590c35f0178f4ee38ed8288d8b90fcfd3dfbe0b9126452b46582e6b39e4339f858812955bc3e4f055b78151aeec54a03394e86b9a75fca30952c2c1b9c6ad3bf50392f928cfadc53167f2dd6a3955e8292bc53ae779f86b4004f7ce1ef490495976f359afafdc876f894bee595301850d97bce882fc32279b6c28f8320f685e4a3eddb875f76146186266f1e766b33ae4de10542875a9cb44e0aeb3e30f8efb56d4dfcd68420baadde446b8b123fc324a0dd65b1cfee331161fe720f2d5631ef11044e03eca23732dc39264282cc9d3ee9d387c2d0289e3e3c9644e14295bc05f520a4a767fe1dec186b6ae5701219ba9b750963336db7b6316b157550e5923b562095056a30f7be823e65dce82d5ae678245159452a380cf11a2d03756d53365edb8663b8ffe060d4b57f1f3199322174f1320b93941e0b2a3c400eb91d47d001ea2d8b286c20c5b8900ac7f3e217cd0164b83c9537e64352b8df3804fa00d50bcfba759ddfcf8134409115745d3e8ddf0a76bdcef6ecd65e02c892265e655227c69d6d1f7c243d67ecb66b50b1c837a40739afa66dbf01e63b1b8788d932d2f008d6cb1d1409d6c4304e0ad9bf0e7dd8bee9e4ca376623fb7f1aa261964eac95cff865c9ca77b40406415ed2700c96d0bd0e8a45064e21bbdd5197bdf56052da3d781c4494fcb8d44b3bf5bed97caef055dd6b146c81c8cfb09fdaa6b161479fae76eb5d7f5fe0e37f21f7a2c63081469bea588db7f9702bd2d854c8bbbd509f2b78f074c7c91278ba1a4bba0b785f24179c48e56088c7bb0a9b92cefc6ece7a8ed6dbc831d4d4ae84ef547cc5ffb32038076d95536774fca520851b512971da3655d0cce41a741c7a466bc900f73dd1ec89cddaf09434031bf42f59ad55960e086032fb1dfb474f731db65771619ea1ad7f45cce9acb969940753d523711971d499c6a983c0d6811311bf1de65cc58e43b74e6aa3c8092540113e53de55a5ec0e59e4e192ad5eb7b965afd27ae6282864572829eb442d77938a62545754af84ac446d005967d4472afbc702f0a4ae33e07f0076e0494bc2c0896ceeae8fe9fbec2b628cce195f0c3b3bb11a6908006000", @ANYRES32=r9, @ANYBLOB="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"], 0x14c0}, 0x1, 0x0, 0x0, 0x84}, 0x40000)
ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, &(0x7f0000000400)=ANY=[@ANYBLOB="a00000000000000001000000000000000400000070bb00000400000000000000000c0000000000001f00000000000000f9ffffffffffffff000000000000000000000000000000000402000000000000000000000000000000000000000000000100008000000000070000000000000000000000000000000000000000000000030100000000000000000000000000000002000000000000de000000000000003c03000000000000000000000000000000000000000000008000000000000000000000000000000007000000000000000200000000000000ff0300"/242])

03:37:53 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x0, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:37:53 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r2, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6)
getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1426.919589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8121 comm=syz-executor.2
[ 1426.925576] FAULT_INJECTION: forcing a failure.
[ 1426.925576] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1426.927273] CPU: 1 PID: 8117 Comm: syz-executor.3 Not tainted 5.10.226 #1
[ 1426.927942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1426.928782] Call Trace:
[ 1426.929183]  dump_stack+0x107/0x167
[ 1426.929512]  should_fail.cold+0x5/0xa
[ 1426.929901]  _copy_from_user+0x2e/0x1b0
[ 1426.930255]  __copy_msghdr_from_user+0x91/0x4b0
[ 1426.930704]  ? __ia32_sys_shutdown+0x80/0x80
[ 1426.931099]  ? __lock_acquire+0x1657/0x5b00
[ 1426.931480]  ___sys_recvmsg+0xd5/0x200
[ 1426.931891]  ? __copy_msghdr_from_user+0x4b0/0x4b0
[ 1426.932322]  ? lock_acquire+0x197/0x470
[ 1426.932717]  ? find_held_lock+0x2c/0x110
[ 1426.933075]  ? __might_fault+0xd3/0x180
[ 1426.933412]  ? lock_downgrade+0x6d0/0x6d0
[ 1426.933814]  ? io_schedule_timeout+0x140/0x140
[ 1426.934211]  do_recvmmsg+0x24c/0x6d0
[ 1426.934533]  ? ___sys_recvmsg+0x200/0x200
[ 1426.934958]  ? lock_downgrade+0x6d0/0x6d0
[ 1426.935319]  ? ksys_write+0x12d/0x260
[ 1426.935713]  ? wait_for_completion_io+0x270/0x270
[ 1426.936138]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1426.936529]  ? vfs_write+0x354/0xb10
[ 1426.936896]  __x64_sys_recvmmsg+0x20f/0x260
[ 1426.937263]  ? ksys_write+0x1a9/0x260
[ 1426.937586]  ? __do_sys_socketcall+0x600/0x600
[ 1426.938018]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1426.938461]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1426.938964]  do_syscall_64+0x33/0x40
[ 1426.939283]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1426.939784] RIP: 0033:0x7f96c2c53b19
[ 1426.940101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1426.941711] RSP: 002b:00007f96c01c9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1426.942353] RAX: ffffffffffffffda RBX: 00007f96c2d66f60 RCX: 00007f96c2c53b19
[ 1426.943033] RDX: 000000000000035f RSI: 0000000020001a00 RDI: 0000000000000004
[ 1426.943630] RBP: 00007f96c01c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1426.944291] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002
[ 1426.945054] R13: 00007ffd68b0182f R14: 00007f96c01c9300 R15: 0000000000022000
03:37:53 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0xf6ffffff00000000)

03:37:54 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x40000000, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:37:54 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000002100)={0x23b4, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x11c0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "652f859c9595c46271e6b6aff4022eb61c798d7c48ba7e9e"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "aec71a3713c1dac1e39d060114bf7c9aa8b043ed69a072d1414333c8"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "a559a82fe9c12bb44771281522132510a5679abe6c73a42a187d"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "ed59e12c901d3d11be05860ab8495615d025c683abfe94b4479d40ad22e253"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a98e7d321d231dbd9e90d40624e59ad69fedbeb2ae24459abf1785bb132b1fb19e420618"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "36e21344003ac0b8c9d7bef00bae14a55e1f5d7cd246f94ca726aa89cccb06df4c"}}]}, @TIPC_NLA_NODE={0x1110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x23, 0x3, "7e27fa7a91269ba06f73aed6e46c4b2784944b9f9369fb8514bf143d938b86"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "94648e6df7618844a6a94ffcf2ba1022795f2db04940b2e23b88b7f19a64d7ab0fd86516"}}, @TIPC_NLA_NODE_ID={0x92, 0x3, "094efb2db412b4e68b807c0c6c5b782e5139ceed3f7b297c2c08c0da0959024464063eb765c764c7a38e71fe9f95c15e895bcecf63d6b859fe8029eaea1802f290a1c0808d9c5f63d6a9c4e52e400b7a9895d1263b63dbd489f3523a04141f0691c94c2b37cda195b30c43b76d23d3dc60e800def6cb195b62b4cad7369fdf0b3882323bd15510117e835f0fa71a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x309}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x23b4}, 0x1, 0x0, 0x0, 0x4004004}, 0x48080)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00')
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:37:54 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) (fail_nth: 57)

03:37:54 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x0, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:37:54 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)={0x0, <r2=>0x0})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0x0, 0xc0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x9, 0x80, 0x20, 0x3f, 0x0, 0x7, 0x4240, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x6, 0x4, 0x1, 0x3, 0x8, 0x2, 0x6, 0x0, 0x3f, 0x0, 0x7}, r2, 0x10, r3, 0x2)

03:37:54 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0xfeffffff00000000)

03:37:54 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0xc4653600, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:37:54 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)

03:38:08 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1411, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000001000000180c0000", @ANYRES32=<r1=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x81)
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/246)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x0)

03:38:08 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x0, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:38:08 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r2, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6)
getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:38:08 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r0, 0x80, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @random="6fa7264139ca", 'wlan0\x00'}}, 0x0, 0x0, 0x1}, 0x8)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:38:08 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0xffffff7f, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:38:08 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0xffffffff00000000)

03:38:08 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0)

03:38:08 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x800, 0x54)
faccessat2(r1, &(0x7f0000000180)='./file0\x00', 0x100, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
close(r3)
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x1)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x0)

03:38:08 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:38:08 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x2, 0x0}}], 0x35f, 0x10062, 0x0)

03:38:08 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
syz_io_uring_setup(0x4136, &(0x7f0000000000)={0x0, 0xe07f, 0x2, 0x0, 0xf8, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

03:38:08 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x22980, 0x30)
mknodat$loop(r1, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='memory.events\x00', 0x0, 0x0)
syz_io_uring_setup(0x7565, &(0x7f0000000280)={0x0, 0x6b35, 0x4, 0x1, 0x20036c, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
open$dir(&(0x7f0000000200)='./file0\x00', 0x2, 0x100)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r1, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)
signalfd4(r0, &(0x7f00000000c0)={[0x81]}, 0x8, 0x80800)

03:38:08 executing program 6:
listen(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r1=>0x0)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={r1, 0xee01, 0xee00}, 0xc)
listen(r0, 0x2)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}, 0x1c)
pread64(r2, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:38:08 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0xffffffff, 0x0}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:38:08 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x13, 0x9f, 0x0, 0x4c, 0x0, 0x6, 0x832, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff7, 0x1, @perf_config_ext={0x7fffffff, 0x3}, 0x88, 0x5, 0x1, 0x9, 0xff, 0xfffffffd, 0x2, 0x0, 0x8, 0x0, 0x3}, 0x0, 0x7, 0xffffffffffffffff, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:38:23 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x4, 0x0}}], 0x35f, 0x10062, 0x0)

03:38:23 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0x0)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x49)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)=@ethtool_eeprom={0xb}})
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x0)

03:38:23 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x4}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:38:23 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x80)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000006c0)=0x7)
vmsplice(r1, &(0x7f0000000500)=[{&(0x7f0000000340)="bb12d76f7300c602ea2d9d5cc5c6ce93d1ebd7d56748fbc84c232ecbe2b67e10577e55fe40dc512aae278285448c9f30d2eae23d28", 0x35}, {&(0x7f0000000380)="db47a9172c6d75058833e78739a949b8eb757803c1ce16e189be41d8e26ed063125dfbf784b4fd80844528239e0037cf9b209ae3ad56b6f8c30bed5f0caa6f18c83fb9269a5263c8738bfec4191a0086c6f4416406ee1de11a57ffb7ae0637b3598a035f4db72af767e5e971e7355b990268ba9b6b9f4c1fef1c48069c73c10834e1e0537db562e10e713b1caa9823eacc6a005a77db58844fe53edbab4b81cf2c551b", 0xa3}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000000440)="5493e11d7a346b3b653121157f874365438e02b03c7fd570d6a28e62be12b799cf1d22bd8082b8f504aec7ad5580abe7c0e2dd0cb3ceba0a0943d349fe02c1038554804546d5b5b85bdc282a4b4b18814ce5e122be531f4f", 0x58}, {&(0x7f00000004c0)="97e8710d6bbce36cbf0862ec", 0xc}], 0x5, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[r2], 0x1)
pread64(r1, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000700)='memory.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000740)=[{r0, 0x1340}, {r4, 0x2}, {0xffffffffffffffff, 0xa4a1}, {r0, 0xa000}], 0x4, &(0x7f0000000780), &(0x7f00000007c0)={[0x1]}, 0x8)
readv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/7, 0x7}, {&(0x7f0000000880)=""/182, 0xb6}], 0x4)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='autogroup\x00')
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x603, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000240)={0x0, <r7=>0x0})
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r8, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x1, 0x40, 0x0, 0x6, 0x0, 0x3f, 0x100, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x1010, 0x3, 0x7, 0x4, 0xf5ae566, 0x8, 0x5, 0x0, 0x80000001, 0x0, 0xfffffffffffffff9}, r7, 0xffffffffffffffff, r8, 0x0)
mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x61, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_fscache}, {@noextend}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_gt={'euid>', 0xee01}}]}})
io_uring_enter(r6, 0x4e34, 0xc94c, 0x1, &(0x7f0000000100)={[0xffffffff]}, 0x8)

03:38:23 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1081, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mkdir(&(0x7f0000000140)='./file0\x00', 0x1)
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:38:23 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:38:23 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x0, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

[ 1456.101193] audit: type=1400 audit(1728963503.049:53): avc:  denied  { tracepoint } for  pid=8236 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
03:38:23 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cpuset\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f0000002100)=""/4085, 0xff5, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x7ff, 0x0)
pkey_alloc(0x0, 0x0)
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="980000002000210c0010000000000000020000006c009680080022000a01013cbc6ca0f888bb3730e2fda717c5c05458903e41808300d85f70062fdb3a4ac361978aebf4f98129b521ac995853622f6931b5a3bc250ecd3e8cadf086a4042a461095362e1a7f5dcd1781eb255cc953405e0ba35a380c00ff00c8990000000000001800ff800a0015002c5c282d97e084dc1a002d00", @ANYRES32=0x0, @ANYBLOB="e932cb4e7f7d0aa31b404f0002d1ead1ff0f00006ea3e6676a1545981eb387cc2992b8315dcb5f54ac51edab905c0c6b033f02bbc52327cd11822185d5"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2)

[ 1456.119055] ------------[ cut here ]------------
[ 1456.119805] WARNING: CPU: 0 PID: 8245 at kernel/cgroup/cgroup.c:1395 cset_cgroup_from_root+0x1a8/0x2a0
[ 1456.120647] Modules linked in:
[ 1456.120936] CPU: 0 PID: 8245 Comm: syz-executor.6 Not tainted 5.10.226 #1
[ 1456.121591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1456.122318] RIP: 0010:cset_cgroup_from_root+0x1a8/0x2a0
[ 1456.122828] Code: 50 08 00 be ff ff ff ff 48 c7 c7 08 3a 02 85 e8 6e 9e ad 02 31 ff 41 89 c4 89 c6 e8 d2 49 08 00 45 85 e4 75 07 e8 78 50 08 00 <0f> 0b e8 71 50 08 00 48 89 ea 83 e5 07 48 b8 00 00 00 00 00 fc ff
[ 1456.124448] RSP: 0018:ffff8880493cfb98 EFLAGS: 00010016
[ 1456.124960] RAX: 0000000000000de8 RBX: ffff88800f8ea800 RCX: ffffc9000640d000
[ 1456.125620] RDX: 0000000000040000 RSI: ffffffff81384ec8 RDI: 0000000000000005
[ 1456.126234] RBP: ffffffff85676efc R08: 0000000000000000 R09: 0000000000000003
[ 1456.126912] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[ 1456.127577] R13: ffff88800d584000 R14: ffff88801cc2b000 R15: 0000000000000000
[ 1456.128189] FS:  00007f6062861700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 1456.128930] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1456.129433] CR2: 00007f6062860ff8 CR3: 000000000fec0000 CR4: 0000000000350ef0
[ 1456.138766] Call Trace:
[ 1456.139036]  ? __warn+0xe2/0x1f0
[ 1456.139378]  ? cset_cgroup_from_root+0x1a8/0x2a0
[ 1456.139910]  ? report_bug+0x1c1/0x210
[ 1456.140301]  ? handle_bug+0x41/0x90
[ 1456.140699]  ? exc_invalid_op+0x14/0x50
[ 1456.141128]  ? asm_exc_invalid_op+0x12/0x20
[ 1456.141649]  ? cset_cgroup_from_root+0x1a8/0x2a0
[ 1456.142122]  ? cset_cgroup_from_root+0x1a8/0x2a0
[ 1456.142666]  ? cset_cgroup_from_root+0x1a8/0x2a0
[ 1456.143144]  cgroup_path_ns_locked+0x6c/0x110
[ 1456.143643]  proc_cpuset_show+0x19a/0x510
[ 1456.144053]  proc_single_show+0x121/0x1f0
[ 1456.144464]  seq_read_iter+0x510/0x12b0
[ 1456.144929]  seq_read+0x3dd/0x5b0
[ 1456.145273]  ? seq_read_iter+0x12b0/0x12b0
[ 1456.145764]  ? fsnotify_perm.part.0+0x22d/0x620
[ 1456.146231]  ? security_file_permission+0xb1/0xe0
[ 1456.146761]  ? seq_read_iter+0x12b0/0x12b0
[ 1456.147191]  vfs_read+0x228/0x620
[ 1456.148036]  __x64_sys_pread64+0x201/0x260
[ 1456.149023]  ? ksys_pread64+0x1b0/0x1b0
[ 1456.149933]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1456.151145]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1456.152378]  do_syscall_64+0x33/0x40
[ 1456.153276]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1456.154434] RIP: 0033:0x7f60652ebb19
[ 1456.155313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1456.159601] RSP: 002b:00007f6062861188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[ 1456.163472] RAX: ffffffffffffffda RBX: 00007f60653fef60 RCX: 00007f60652ebb19
[ 1456.165121] RDX: 0000000000000ff5 RSI: 0000000020001100 RDI: 0000000000000004
[ 1456.166787] RBP: 00007f6065345f6d R08: 0000000000000000 R09: 0000000000000000
[ 1456.168374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1456.170004] R13: 00007ffd7eddc3bf R14: 00007f6062861300 R15: 0000000000022000
[ 1456.171693] irq event stamp: 242
[ 1456.172425] hardirqs last  enabled at (241): [<ffffffff83e79118>] _raw_spin_unlock_irqrestore+0x38/0x40
[ 1456.174556] hardirqs last disabled at (242): [<ffffffff83e78ece>] _raw_spin_lock_irq+0x3e/0x40
[ 1456.176544] softirqs last  enabled at (136): [<ffffffff84001092>] asm_call_irq_on_stack+0x12/0x20
[ 1456.178533] softirqs last disabled at (131): [<ffffffff84001092>] asm_call_irq_on_stack+0x12/0x20
[ 1456.180625] ---[ end trace f81824e972f8ed9e ]---
03:38:23 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x2000}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:38:23 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = fsmount(0xffffffffffffffff, 0x0, 0x2)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0xa4, 0x2, 0x1f, 0x0, 0xc5, 0xc6420, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000140), 0x6}, 0x200, 0x6, 0x80000001, 0x7, 0x9, 0x8, 0x6, 0x0, 0x2, 0x0, 0x9}, 0xffffffffffffffff, 0xf, r1, 0x8)
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000280)='./file0/file0\x00', 0x100080, 0x80)
getdents(r3, &(0x7f0000000340)=""/206, 0xce)
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:38:23 executing program 5:
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='pagemap\x00')
pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0x0)

03:38:23 executing program 7:
prctl$PR_GET_THP_DISABLE(0x2a)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000b8cb56014a0852f5d62f70e888a27825220fd66148d815f58bdef0af638e24a15e36d62f00b18e2eefbf5442b1aa034980241aa0e837e08d32a960901eadf10b06bf115f8b", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="01000000000000002e2f66696c653000"])
write$cgroup_freezer_state(r0, &(0x7f0000000180)='FROZEN\x00', 0x7)
r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r1, &(0x7f0000000300)='./file0\x00', 0x80, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x6, 0x0, 0x2}}, 0x14}}, 0x0)
openat(r1, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x0)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

03:38:23 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x4000}}], 0x35f, 0x10062, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

03:38:23 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:38:23 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r2 = getuid()
setresuid(0x0, r2, 0xee00)
perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x3, 0x85, 0x3, 0x4, 0x0, 0x3, 0x4, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x8}, 0x4000, 0x7288, 0x100, 0x1, 0x6, 0x8, 0x101, 0x0, 0x4, 0x0, 0x331}, 0x0, 0x10, r0, 0x0)
r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat$loop(r1, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x6b38, 0x4, 0x0, 0x36c, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x81})
openat(r1, &(0x7f0000000880)='./file0\x00', 0x20002, 0x0)

03:38:23 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@empty, 0x50})
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000480)=0x74000000, 0x4)
sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x2000, 0x0}}], 0x35f, 0x10062, 0x0)

[ 1456.424544] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
03:38:23 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r3, 0x6)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6)
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
unshare(0x48020200)

03:38:23 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
r1 = getuid()
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xffffffffffffffff, r3, 0x0)
mount$cgroup2(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000180)={[{}, {}], [{@fowner_lt={'fowner<', r1}}, {@uid_eq={'uid', 0x3d, r2}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@dont_appraise}, {@subj_role={'subj_role', 0x3d, 'tmpfs\x00'}}, {@smackfshat}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xa3]3'}}, {@smackfshat={'smackfshat', 0x3d, ',+*((('}}]})
openat(r0, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x0)


VM DIAGNOSIS:
03:38:23  Registers:
info registers vcpu 0
RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822da261 RDI=ffffffff879ef140 RBP=ffffffff879ef100 RSP=ffff8880493cf5a8
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001
R12=0000000000000063 R13=0000000000000063 R14=ffffffff879ef100 R15=dffffc0000000000
RIP=ffffffff822da2b8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f6062861700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6062860ff8 CR3=000000000fec0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000007 RBX=ffffffff85676efc RCX=ffffffff81273328 RDX=0000000000000000
RSI=0000000000000008 RDI=ffff888016e53dc4 RBP=1ffff1100d9e13cb RSP=ffff88806cf09e40
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffff88806cf2ea58 R13=ffff88806cf2ea8c R14=ffff888016e53480 R15=0000000000000003
RIP=ffffffff812733d1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fe99adf8700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d224000 CR3=000000001d76e000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000