0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080), 0x1}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001540)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000001580)={0x6, {{0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, {{0xa, 0x4e22, 0x2c44, @private2, 0x1f}}}, 0x108) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x5, 0x7, 0x159, &(0x7f0000001100)="adeb75aa189488d66ae59726b54c11eaa797730cdeb5538d45a7c8a9a23eb5523985a1c01c425e20470bd267e6ee3f71dad70626e473265e0166eb5c15fe5014d8a8ab9a52446037c243fbcc28af3b774b1b27b5e86258d158795f588efa17f2dad42f4f0d26fb092f134ab7daa083f76f715dd506e5c3e257969558f4cedebe1946cfaddfd1964db828a9195cc6d1a2984051139137f9ea85c52dc10c02c76a351ff447112745672141eeae0103b0a806829e2eeb2ce8df7764f72078399e97ad5c18eff619178679fc4bb30fcf28bbb78331c88d3d7cbb7d36b29cac8b6d9a4e857bd24dc0def73feb7d898fe02bf35e22e2def645865256d6fb455f9d6bf52322bd56ad89b9e703b8fe6af29deab5171aa767c872f8c7b6ecc90160797a7a4617d06df6dcc66fccc768d93f1f2b49b87667c6708dbb48c9854a03dfd19ac8f0acf80aae674236cfa73e5299cbc49a3caf1167ebe730dcb7685a14ee02e71b2ce1a8bfcba7607db6c9495a42fab345f6b8dd426b541df4889b87974f458ecbc909278274c8fcfc0d8225a3e7ffaac45c752e18121651900a9397469da570f385c238db50c983a01f178f04e4aede752ec98d5fe0be01e04518cd16041ef1981f9826edc94989ebbef5f15215a08643c7dc637502d7e832db04fd59867ac06f5d04645de8d564e84185a6161a363db5be5464012edfc6da9b92318b031534aa01276b268c49edc0b07a1854b91f819226119cdca609daf39bc837280b61b2f5391058838562a3e1c7753d421ada18e833d845f567604889d2bd479e947eb608dd72d2e82a03966d173a00ed06f025e7a98ceb28d4f126a810a014e05a4a427285b15929fb74bd9ac24f8f1060ffec8fb39fed86741f35a5247e73eb98f84dedca9779fa85c97465ff5b026d858fb668a2d02f0cf69a26fd62f8df3aa23814826d070f815d734d13d30660c0f5d81cbb0ead77203ea99bdc1a7e6f1efffba0b94a5d189a85dcc831f490cfa8b7881560097d6d2dd38d2be181534de621f35f9f89978a43469925a05a851d5a1f571d59b0af17f694e2c0e9ad6f46b318e2a173d5b39c75287447e81c8941328eb3bd3b2c9f55565275286424a79b918d58b72fee3e0093f6be9053efe67b47f7341d69796ad9e6c0021d21177911eacd8774666eaeab93b5465887754f47d67ec072152bc050c82eb155ed431380608a71e6490966e399b18dd92a600e0a067d44ff5a8c2d18229bf43b74878b51f08adb7933a6830de4633a8e016d8d58b30ac4420664315ee98840113eea495ee23e2057a6149adade7438d1f6a5a04b780666d250317e6ffb698d4f057c2e1a4ec2ddf4489cb76d42c89e2651a663d9b219b340977228a084eea3d150cc7b271fed4553df693100e2f6cf893964a6f735e5cbb7bb15b8af9c5998293034f2cbbbff8f4ba2"}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000001e00)={{r4}, "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"}) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x540a, 0x3) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x3) sendfile(r5, r6, &(0x7f0000001500)=0x9, 0x7ff) 09:54:52 executing program 2: preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) signalfd4(r2, &(0x7f0000000080)={[0x20]}, 0x8, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001100)=ANY=[@ANYBLOB="01000002010000001807702eb975c99d00000085443602bac2e9", @ANYRES32=r2, @ANYBLOB="81000000000000002e2f66696c653000fde3ab852f0f0194aa1e8f75bd445bbdb13c6c0a26f3fedced4e3dfd6848de5cf9318ca1d0e1539aef04968b08263cdd4e70d141154b09b113f736bf70e20a6cee2b08a089d98c65b17d3ea71b60fc868c3eaa162d1ab1c37791136ee192404a9fe35ae40b64cc8d35133045adaf90c43ab847985c41a0da7f60cc60663703aa55f49fbbee1f7212e55f"]) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r4, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f00000001c0)) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000300)={0x3, 0x3, 0x9, 0xc3f}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)) r5 = open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x1001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x4c20, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r3, &(0x7f0000000340)='./file0\x00', 0x802, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000011c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x20, 0xfffffff9, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) 09:54:52 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 7) 09:54:52 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3c000000) 09:54:52 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x30, 0x3, 0x0, 0x0) 09:54:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2, 0xfffffff0}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:54:52 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) signalfd4(r0, &(0x7f00000013c0)={[0x8]}, 0x8, 0x800) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000011c0)) r2 = syz_open_dev$mouse(&(0x7f0000001080), 0x0, 0xe23165d7e03cc1f4) pread64(r2, &(0x7f0000001100)=""/182, 0xb6, 0x20) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x12, r0, 0x5843f000) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x0, 0x2}) [ 2569.409155] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2569.409181] CPU: 0 PID: 12148 Comm: syz-executor.2 Not tainted 5.10.223 #1 [ 2569.409188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2569.409193] Call Trace: [ 2569.409217] dump_stack+0x107/0x167 [ 2569.409238] sysfs_warn_dup.cold+0x1c/0x29 [ 2569.409255] sysfs_do_create_link_sd+0x122/0x140 [ 2569.409269] sysfs_create_link+0x5f/0xc0 [ 2569.409285] device_add+0x703/0x1c50 [ 2569.409302] ? devlink_add_symlinks+0x970/0x970 [ 2569.409319] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2569.409338] wiphy_register+0x1da6/0x2850 09:54:52 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 8) 09:54:52 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) [ 2569.409360] ? wiphy_unregister+0xb90/0xb90 [ 2569.409387] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2569.409406] ieee80211_register_hw+0x23c5/0x38b0 sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003900)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x7, @private1, 0x633}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000200)="3b2df6aceff114fa5e9c08985350ca0a8c6683361a46d025418b02845c5fcdcb601732597b837f8765553b", 0x2b}, {&(0x7f0000000240)="19128f6bcdeea8aaf76dfea6710468e6b3d881ecdd177d5b", 0x18}, {&(0x7f00000002c0)="51bcd4a250a0b8d03cbd90fffbad097a792f86951fd634c017952e5d4a66fd1f69d0d0eb45e608d7c906d39df470c4da997f3a195912a9c0da5b71be4d5ba6be18e7aa1c13c0147502f866348cd2cbbcd9caaae1ffd46c681606dd3b34b067ad3256eec194274b8a9323d8ff65dffa83d9f510a0131279e62a319a14ca8a2f01", 0x80}, {&(0x7f0000000340)="94be31d8d9e411aec4cc41be196938a2aa0aec509a6694f5fa873c2cf17cfc60c3994566c0b6d0", 0x27}, {&(0x7f0000000380)="00f764770d1b4ebdb9fb315eaeb6921889d9af44a9d794fa3627615d00a3fafe539c61fd965bf768d51d0216ee47e730f32177999313e2c64c69213eb873529acdbd5ee307324f86361dac720944a8a88e15557f28094617032a315b2009f7370904571de7413f3203621d6953b9f9c6", 0x70}, {&(0x7f0000000400)="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", 0x1000}], 0x6}}, {{&(0x7f0000001480)={0xa, 0x4e21, 0x7c9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xfffff44b}, 0x1c, &(0x7f00000025c0)=[{&(0x7f00000014c0)="622e6a7dcba8d4e6f878ed1d4f09ee7242aeaeb2d07d99f49d5ac891ed1374b7adcf4a9d40dbf98564000efc06f76e7696f2cec9836bda6f96c1b125fc6b129c3b223c08590fe1263ce2831a36e04c878dde17ab541dfb66eb78df8102f15a5f37f793850dce2bf2261b9e409a0998ed991079691edcf7df8668afc9807c30e9fa72db7531ffdf49eb1cf8694638beb905e2972046ba133dc884297ac4494e0390bd0ebc7f1693b8dd5331230a5d1eb01324a607f96d0cd664d270f776709f35f64dc393a1573b0d7ac7424ac78a46", 0xcf}, {&(0x7f00000015c0)="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", 0x1000}], 0x2}}, {{&(0x7f0000002600)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}, 0x200}, 0x1c, &(0x7f0000002700)=[{&(0x7f0000002640)="0277acecaf72acac5930e38819ff60670bb0d1829dbc51c98f92db6d33bae301cb634a6419a4280d00ec92adb0fffb", 0x2f}, {&(0x7f0000002680)="2c875522be5ac1cb8786f4e24ec677c430a1645c32323a58421152a41ac614c0ff703b8e174655bda92afc16565b5a1aa3d80dfabad040dc6da8413238f811620765af7b8c0bcd4e9e274f721c893ea2f7ee0eb64827c1b705fd0d4357beaa5e73b04179e9cc8189", 0x68}], 0x2, &(0x7f0000002740)=ANY=[@ANYBLOB="78000000000000002900000039000000080000000000000100000000000000000000ffff0a010102fe80000000000000000000000000001100000000000000000000000000000000fc010000000000000000000000000000fc000000000000000000000000800000000000000000000029000000360000002e02000000000000040101040109040100000100c20400000005000100000000140000000000000029000000430000000800000000000000"], 0xc0}}, {{&(0x7f0000002800)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x6}, 0x1c, &(0x7f00000038c0)=[{&(0x7f0000002840)="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", 0x1000}, {&(0x7f0000003840)="67528bac430112b4549bddc3e27b078cb562969da7efc98d52a476b376a7c94f2410d3be27b6fa6a79bdeafdec7ef37473b99e01c45cdadeb6bdb9bc1ff4f6f8acc9", 0x42}], 0x2}}], 0x4, 0x20004000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2569.409433] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2569.409445] ? net_generic+0xdb/0x2b0 [ 2569.409464] ? lockdep_init_map_type+0x2c7/0x780 [ 2569.409482] ? memset+0x20/0x50 [ 2569.409496] ? __hrtimer_init+0x12c/0x270 [ 2569.409513] mac80211_hwsim_new_radio+0x1ce0/0x4250 [ 2569.409588] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2569.409601] ? hwsim_new_radio_nl+0x967/0x1080 [ 2569.409616] ? memcpy+0x39/0x60 [ 2569.409631] hwsim_new_radio_nl+0x991/0x1080 [ 2569.409647] ? mac80211_hwsim_new_radio+0x4250/0x4250 09:54:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2, 0xfffffffc}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2569.409674] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2569.409686] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2569.409703] genl_family_rcv_msg_doit+0x22d/0x330 [ 2569.409718] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2569.409731] ? cap_capable+0x1cd/0x230 [ 2569.409754] ? ns_capable+0xe2/0x110 [ 2569.409780] genl_rcv_msg+0x33c/0x5a0 09:54:53 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xeffdffff) [ 2569.409796] ? genl_get_cmd+0x480/0x480 [ 2569.409812] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 2569.409829] ? lock_release+0x680/0x680 [ 2569.409839] ? netlink_deliver_tap+0xf4/0xcc0 [ 2569.409854] netlink_rcv_skb+0x14b/0x430 [ 2569.409866] ? genl_get_cmd+0x480/0x480 [ 2569.409879] ? netlink_ack+0xab0/0xab0 [ 2569.409897] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2569.409910] ? is_vmalloc_addr+0x7b/0xb0 [ 2569.409924] genl_rcv+0x24/0x40 [ 2569.409934] netlink_unicast+0x549/0x7f0 [ 2569.409951] ? netlink_attachskb+0x870/0x870 [ 2569.409972] netlink_sendmsg+0x90f/0xdf0 [ 2569.409989] ? netlink_unicast+0x7f0/0x7f0 [ 2569.410022] ? netlink_unicast+0x7f0/0x7f0 [ 2569.410036] __sock_sendmsg+0x154/0x190 [ 2569.410049] ____sys_sendmsg+0x70d/0x870 [ 2569.410064] ? sock_write_iter+0x3d0/0x3d0 [ 2569.410075] ? do_recvmmsg+0x6d0/0x6d0 [ 2569.410093] ? SOFTIRQ_verbose+0x10/0x10 [ 2569.410123] ___sys_sendmsg+0xf3/0x170 [ 2569.410142] ? sendmsg_copy_msghdr+0x160/0x160 [ 2569.410163] ? __fget_files+0x2cf/0x520 [ 2569.410188] ? lock_downgrade+0x6d0/0x6d0 [ 2569.410210] ? clockevents_program_event+0x14b/0x360 [ 2569.410232] ? __fget_files+0x2f8/0x520 [ 2569.410257] ? __fget_light+0xea/0x290 [ 2569.410280] __sys_sendmsg+0xe5/0x1b0 [ 2569.410295] ? __sys_sendmsg_sock+0x40/0x40 [ 2569.410337] do_syscall_64+0x33/0x40 [ 2569.410351] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2569.410361] RIP: 0033:0x7fbc1e2ccb19 [ 2569.410375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2569.410382] RSP: 002b:00007fbc1b842188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2569.410397] RAX: ffffffffffffffda RBX: 00007fbc1e3dff60 RCX: 00007fbc1e2ccb19 [ 2569.410405] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 2569.410413] RBP: 00007fbc1e326f6d R08: 0000000000000000 R09: 0000000000000000 [ 2569.410420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2569.410429] R13: 00007fff2fcffa3f R14: 00007fbc1b842300 R15: 0000000000022000 [ 2569.428042] FAULT_INJECTION: forcing a failure. [ 2569.428042] name failslab, interval 1, probability 0, space 0, times 0 [ 2569.428070] CPU: 1 PID: 12151 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2569.428078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2569.428083] Call Trace: [ 2569.428102] dump_stack+0x107/0x167 [ 2569.428226] should_fail.cold+0x5/0xa [ 2569.428271] ? create_object.isra.0+0x3a/0xa20 [ 2569.428321] should_failslab+0x5/0x20 [ 2569.428401] kmem_cache_alloc+0x5b/0x310 [ 2569.428441] ? mark_held_locks+0x9e/0xe0 [ 2569.428484] create_object.isra.0+0x3a/0xa20 [ 2569.428525] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2569.428570] kmem_cache_alloc_bulk+0x168/0x320 [ 2569.428613] io_submit_sqes+0x6fe6/0x8610 [ 2569.428646] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2569.428716] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2569.428752] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2569.428793] ? lock_downgrade+0x6d0/0x6d0 [ 2569.428826] ? find_held_lock+0x2c/0x110 [ 2569.428867] ? io_submit_sqes+0x8610/0x8610 [ 2569.428914] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2569.428956] ? wait_for_completion_io+0x270/0x270 [ 2569.428994] ? rcu_read_lock_any_held+0x75/0xa0 [ 2569.429028] ? vfs_write+0x354/0xb10 [ 2569.429064] ? fput_many+0x2f/0x1a0 [ 2569.429098] ? ksys_write+0x1a9/0x260 [ 2569.429135] ? __ia32_sys_read+0xb0/0xb0 [ 2569.429221] do_syscall_64+0x33/0x40 [ 2569.429256] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2569.429292] RIP: 0033:0x7fd311e28b19 [ 2569.429315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2569.429328] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2569.429364] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2569.429388] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2569.429402] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2569.429415] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2569.429428] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 [ 2569.628140] FAULT_INJECTION: forcing a failure. [ 2569.628140] name failslab, interval 1, probability 0, space 0, times 0 [ 2569.628167] CPU: 0 PID: 12165 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2569.628177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2569.628182] Call Trace: [ 2569.628204] dump_stack+0x107/0x167 [ 2569.628226] should_fail.cold+0x5/0xa [ 2569.628249] ? create_object.isra.0+0x3a/0xa20 [ 2569.628268] should_failslab+0x5/0x20 [ 2569.628291] kmem_cache_alloc+0x5b/0x310 09:54:53 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x36, 0x3, 0x0, 0x0) [ 2569.680437] ? mark_held_locks+0x9e/0xe0 [ 2569.680458] create_object.isra.0+0x3a/0xa20 [ 2569.680474] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2569.680494] kmem_cache_alloc_bulk+0x168/0x320 [ 2569.680556] io_submit_sqes+0x6fe6/0x8610 [ 2569.680574] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2569.680610] ? __do_sys_io_uring_enter+0x6b5/0x18c0 09:54:53 executing program 2: preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) signalfd4(r2, &(0x7f0000000080)={[0x20]}, 0x8, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001100)=ANY=[@ANYBLOB="01000002010000001807702eb975c99d00000085443602bac2e9", @ANYRES32=r2, @ANYBLOB="81000000000000002e2f66696c653000fde3ab852f0f0194aa1e8f75bd445bbdb13c6c0a26f3fedced4e3dfd6848de5cf9318ca1d0e1539aef04968b08263cdd4e70d141154b09b113f736bf70e20a6cee2b08a089d98c65b17d3ea71b60fc868c3eaa162d1ab1c37791136ee192404a9fe35ae40b64cc8d35133045adaf90c43ab847985c41a0da7f60cc60663703aa55f49fbbee1f7212e55f"]) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r4, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f00000001c0)) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000300)={0x3, 0x3, 0x9, 0xc3f}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)) r5 = open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x1001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x4c20, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r3, &(0x7f0000000340)='./file0\x00', 0x802, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000011c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x20, 0xfffffff9, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) [ 2569.680623] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2569.680641] ? lock_downgrade+0x6d0/0x6d0 [ 2569.680653] ? find_held_lock+0x2c/0x110 [ 2569.680673] ? io_submit_sqes+0x8610/0x8610 [ 2569.680697] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2569.680715] ? wait_for_completion_io+0x270/0x270 [ 2569.680733] ? rcu_read_lock_any_held+0x75/0xa0 [ 2569.680745] ? vfs_write+0x354/0xb10 [ 2569.680760] ? fput_many+0x2f/0x1a0 09:54:53 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x20004000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2569.680775] ? ksys_write+0x1a9/0x260 [ 2569.680789] ? __ia32_sys_read+0xb0/0xb0 [ 2569.680814] do_syscall_64+0x33/0x40 [ 2569.680827] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2569.680838] RIP: 0033:0x7fd311e28b19 [ 2569.680855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2569.680863] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2569.680879] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2569.680888] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2569.680897] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2569.680906] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2569.680915] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 [ 2569.864416] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2569.866614] CPU: 1 PID: 12178 Comm: syz-executor.2 Not tainted 5.10.223 #1 [ 2569.867681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2569.868390] Call Trace: [ 2569.868625] dump_stack+0x107/0x167 [ 2569.868945] sysfs_warn_dup.cold+0x1c/0x29 [ 2569.869311] sysfs_do_create_link_sd+0x122/0x140 [ 2569.869717] sysfs_create_link+0x5f/0xc0 [ 2569.870078] device_add+0x703/0x1c50 [ 2569.870402] ? devlink_add_symlinks+0x970/0x970 [ 2569.870802] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2569.871257] wiphy_register+0x1da6/0x2850 [ 2569.871654] ? wiphy_unregister+0xb90/0xb90 [ 2569.872036] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2569.872501] ieee80211_register_hw+0x23c5/0x38b0 [ 2569.872917] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2569.873325] ? net_generic+0xdb/0x2b0 [ 2569.873658] ? lockdep_init_map_type+0x2c7/0x780 [ 2569.874064] ? memset+0x20/0x50 [ 2569.874350] ? __hrtimer_init+0x12c/0x270 [ 2569.874706] mac80211_hwsim_new_radio+0x1ce0/0x4250 [ 2569.875144] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2569.875555] ? hwsim_new_radio_nl+0x967/0x1080 [ 2569.875949] ? memcpy+0x39/0x60 [ 2569.876235] hwsim_new_radio_nl+0x991/0x1080 [ 2569.876611] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 2569.877061] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2569.877618] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2569.878172] genl_family_rcv_msg_doit+0x22d/0x330 [ 2569.878584] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2569.879148] ? cap_capable+0x1cd/0x230 [ 2569.879509] ? ns_capable+0xe2/0x110 [ 2569.879839] genl_rcv_msg+0x33c/0x5a0 [ 2569.880167] ? genl_get_cmd+0x480/0x480 [ 2569.880507] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 2569.880948] ? lock_release+0x680/0x680 [ 2569.881287] ? netlink_deliver_tap+0xf4/0xcc0 [ 2569.881670] netlink_rcv_skb+0x14b/0x430 [ 2569.882014] ? genl_get_cmd+0x480/0x480 [ 2569.882354] ? netlink_ack+0xab0/0xab0 [ 2569.882693] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2569.883081] ? is_vmalloc_addr+0x7b/0xb0 [ 2569.883429] genl_rcv+0x24/0x40 [ 2569.883733] netlink_unicast+0x549/0x7f0 [ 2569.884083] ? netlink_attachskb+0x870/0x870 [ 2569.884469] netlink_sendmsg+0x90f/0xdf0 [ 2569.884833] ? netlink_unicast+0x7f0/0x7f0 [ 2569.885202] ? netlink_unicast+0x7f0/0x7f0 [ 2569.885565] __sock_sendmsg+0x154/0x190 [ 2569.885904] ____sys_sendmsg+0x70d/0x870 [ 2569.886255] ? sock_write_iter+0x3d0/0x3d0 [ 2569.886614] ? do_recvmmsg+0x6d0/0x6d0 [ 2569.886949] ? SOFTIRQ_verbose+0x10/0x10 [ 2569.887306] ___sys_sendmsg+0xf3/0x170 [ 2569.887815] ? sendmsg_copy_msghdr+0x160/0x160 [ 2569.888827] ? __fget_files+0x2cf/0x520 [ 2569.889705] ? lock_downgrade+0x6d0/0x6d0 [ 2569.890625] ? futex_exit_release+0x220/0x220 [ 2569.891620] ? clockevents_program_event+0x14b/0x360 [ 2569.892740] ? __fget_files+0x2f8/0x520 [ 2569.893622] ? __fget_light+0xea/0x290 [ 2569.894483] __sys_sendmsg+0xe5/0x1b0 [ 2569.895319] ? __sys_sendmsg_sock+0x40/0x40 [ 2569.896275] ? trace_hardirqs_on+0x5b/0x180 [ 2569.897239] do_syscall_64+0x33/0x40 [ 2569.898058] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2569.899182] RIP: 0033:0x7fbc1e2ccb19 [ 2569.900008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2569.904067] RSP: 002b:00007fbc1b842188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2569.919832] RAX: ffffffffffffffda RBX: 00007fbc1e3dff60 RCX: 00007fbc1e2ccb19 [ 2569.920432] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 2569.921036] RBP: 00007fbc1e326f6d R08: 0000000000000000 R09: 0000000000000000 [ 2569.921638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2569.922238] R13: 00007fff2fcffa3f R14: 00007fbc1b842300 R15: 0000000000022000 09:55:08 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xf5ffffff) 09:55:08 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000001100)={0x0, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x2, 0x4e21, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000000)='ip6gre0\x00', 0x40, 0x1, 0x8}) 09:55:08 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 9) 09:55:08 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xc5e7}, 0x0, 0x0, 0x400, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x5, 0x200, 0x5, 0x1, 0x3}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001e00)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x9, 0x5d, 0x4, 0x401, 0x3, 0x3, 0x6, 0x2e6, 0x40, 0x2d, 0xfffffffb, 0x5, 0x38, 0x1, 0x7ff, 0x5, 0x6}, [{0x6474e551, 0x7, 0x40, 0x3, 0xffff, 0x0, 0x4}, {0x7, 0xff, 0x80000001, 0x7, 0xe8, 0x7, 0x0, 0x2}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1ab0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000280), &(0x7f00000002c0)=0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}, 0x1c) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) r3 = fork() ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) sendmsg$nl_generic(r2, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x1c8, 0x2a, 0x2, 0x70bd29, 0x25dfdbfe, {0xb}, [@generic="e4c9e30388d8cf27aee5819b603b78e6bb734669f3ebb4ff38fe93e94c95c318577dee9135422397e68545175b18e8349e2fc8c389033a7a9e753122fe5e0ab7eb658f59cb628a332583fc300c25edd0e3f557b4bec92185082f941dff8e363aba9064434ff0ad63bf42c08a65d4c7e9c034ec579f2c9f2baaae760fc431dfb905db550c029b50aba1d98abd432e4b54c4d15aea9e8c73fa93d86a5d8e0495089efe3c244fe9f8b6c4a80049eb89da153ac44c5000", @nested={0x10, 0xb, 0x0, 0x1, [@typed={0x6, 0x11, 0x0, 0x0, @str='\xff\xff'}, @typed={0x4, 0x36}]}, @nested={0xe0, 0x80, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x96, 0x0, 0x0, @fd=r4}, @generic="9e9a9ea408d409d300b5ccf261d7fd005a9d364fde1184fa36e187d60911bdb9cb3631c2eb5a3df622278537b8dbd1aaf05b5fa5215ca859638b723d4c678e132affea23e0b30b82dfe645869f9f4fe12b5609fb06c32c7cf2e4c7bca4", @generic="2210f4e347fdf74bfe648fd27e1ddedce44232830bb7e56bbddd13e24d803e4ded0a3656a06b760022a47e9ba798a0617f7747ec3daa9c3a506544d725c23c8543aec40a66a9a22d5c3cad143dd1844e70420fbde244b1381029792e53f82f1162d23921ea2e29", @typed={0x8, 0x96, 0x0, 0x0, @u32=0x2}]}, @typed={0xc, 0x22, 0x0, 0x0, @u64=0x7ff}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000045}, 0x24000010) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) fcntl$getflags(0xffffffffffffffff, 0x401) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x20, 0x5, 0xa, 0x0, 0x4, 0x84000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={&(0x7f0000000200), 0x7}, 0x10c, 0x83, 0xb14, 0x8, 0x142, 0x100, 0x2, 0x0, 0x2, 0x0, 0xff}, 0xffffffffffffffff, 0x6, r0, 0x3) 09:55:08 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x81, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001e00)=""/4126, 0x101e, 0x1) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x20, 0xe7, 0x5, 0x1, 0x0, 0xff, 0x500, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000000), 0x9}, 0x8000, 0x9, 0x8, 0x7, 0x2, 0x5, 0x5f, 0x0, 0x400, 0x0, 0x87}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) dup2(r1, r1) 09:55:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2, 0xffffffff}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:55:08 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c, 0x3, 0x0, 0x0) 09:55:08 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x20004000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:55:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:55:08 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x294202, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001080)={'syztnl0\x00', &(0x7f0000001100)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x8d, 0x6, 0x70, @empty, @dev={0xfe, 0x80, '\x00', 0xd}, 0x10, 0x8000, 0x2, 0xd6}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001200)={'ip6_vti0\x00', &(0x7f0000001180)={'syztnl0\x00', r1, 0x4, 0x2, 0x7f, 0x2, 0x21, @mcast1, @remote, 0x20, 0x40, 0x5, 0x6}}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001240)={'wlan0\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:55:08 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x20004000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2585.465874] FAULT_INJECTION: forcing a failure. [ 2585.465874] name failslab, interval 1, probability 0, space 0, times 0 [ 2585.467088] CPU: 1 PID: 12194 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2585.467792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2585.468630] Call Trace: [ 2585.468919] dump_stack+0x107/0x167 [ 2585.469303] should_fail.cold+0x5/0xa [ 2585.469771] ? create_object.isra.0+0x3a/0xa20 [ 2585.470926] should_failslab+0x5/0x20 [ 2585.476015] kmem_cache_alloc+0x5b/0x310 [ 2585.477006] ? mark_held_locks+0x9e/0xe0 [ 2585.477998] create_object.isra.0+0x3a/0xa20 [ 2585.479065] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2585.480280] kmem_cache_alloc_bulk+0x168/0x320 [ 2585.481357] io_submit_sqes+0x6fe6/0x8610 [ 2585.482366] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2585.483561] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2585.484730] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2585.485838] ? lock_downgrade+0x6d0/0x6d0 [ 2585.486809] ? find_held_lock+0x2c/0x110 [ 2585.487680] ? io_submit_sqes+0x8610/0x8610 [ 2585.488055] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2585.488465] ? wait_for_completion_io+0x270/0x270 [ 2585.488926] ? rcu_read_lock_any_held+0x75/0xa0 [ 2585.489321] ? vfs_write+0x354/0xb10 [ 2585.489690] ? fput_many+0x2f/0x1a0 [ 2585.490001] ? ksys_write+0x1a9/0x260 [ 2585.490323] ? __ia32_sys_read+0xb0/0xb0 [ 2585.490742] do_syscall_64+0x33/0x40 [ 2585.491058] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2585.491488] RIP: 0033:0x7fd311e28b19 [ 2585.491894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2585.493554] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2585.494205] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2585.494848] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2585.495445] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2585.496146] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2585.496847] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:55:08 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) signalfd4(r1, &(0x7f0000000000)={[0x6]}, 0x8, 0x0) 09:55:25 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 10) 09:55:25 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x7, @private1, 0x633}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000200)="3b2df6aceff114fa5e9c08985350ca0a8c6683361a46d025418b02845c5fcdcb601732597b837f8765553b", 0x2b}, {&(0x7f0000000240)="19128f6bcdeea8aaf76dfea6710468e6b3d881ecdd177d5b", 0x18}, {&(0x7f00000002c0)="51bcd4a250a0b8d03cbd90fffbad097a792f86951fd634c017952e5d4a66fd1f69d0d0eb45e608d7c906d39df470c4da997f3a195912a9c0da5b71be4d5ba6be18e7aa1c13c0147502f866348cd2cbbcd9caaae1ffd46c681606dd3b34b067ad3256eec194274b8a9323d8ff65dffa83d9f510a0131279e62a319a14ca8a2f01", 0x80}, {&(0x7f0000000340)="94be31d8d9e411aec4cc41be196938a2aa0aec509a6694f5fa873c2cf17cfc60c3994566c0b6d0", 0x27}, {&(0x7f0000000380)="00f764770d1b4ebdb9fb315eaeb6921889d9af44a9d794fa3627615d00a3fafe539c61fd965bf768d51d0216ee47e730f32177999313e2c64c69213eb873529acdbd5ee307324f86361dac720944a8a88e15557f28094617032a315b2009f7370904571de7413f3203621d6953b9f9c6", 0x70}, {&(0x7f0000000400)="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", 0x1000}], 0x6}}, {{&(0x7f0000001480)={0xa, 0x4e21, 0x7c9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xfffff44b}, 0x1c, &(0x7f00000025c0)=[{&(0x7f00000014c0)="622e6a7dcba8d4e6f878ed1d4f09ee7242aeaeb2d07d99f49d5ac891ed1374b7adcf4a9d40dbf98564000efc06f76e7696f2cec9836bda6f96c1b125fc6b129c3b223c08590fe1263ce2831a36e04c878dde17ab541dfb66eb78df8102f15a5f37f793850dce2bf2261b9e409a0998ed991079691edcf7df8668afc9807c30e9fa72db7531ffdf49eb1cf8694638beb905e2972046ba133dc884297ac4494e0390bd0ebc7f1693b8dd5331230a5d1eb01324a607f96d0cd664d270f776709f35f64dc393a1573b0d7ac7424ac78a46", 0xcf}, {&(0x7f00000015c0)="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", 0x1000}], 0x2}}, {{&(0x7f0000002600)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}, 0x200}, 0x1c, &(0x7f0000002700)=[{&(0x7f0000002640)="0277acecaf72acac5930e38819ff60670bb0d1829dbc51c98f92db6d33bae301cb634a6419a4280d00ec92adb0fffb", 0x2f}, {&(0x7f0000002680)="2c875522be5ac1cb8786f4e24ec677c430a1645c32323a58421152a41ac614c0ff703b8e174655bda92afc16565b5a1aa3d80dfabad040dc6da8413238f811620765af7b8c0bcd4e9e274f721c893ea2f7ee0eb64827c1b705fd0d4357beaa5e73b04179e9cc8189", 0x68}], 0x2, &(0x7f0000002740)=ANY=[@ANYBLOB="78000000000000002900000039000000080000000000000100000000000000000000ffff0a010102fe80000000000000000000000000001100000000000000000000000000000000fc010000000000000000000000000000fc000000000000000000000000800000000000000000000029000000360000002e02000000000000040101040109040100000100c20400000005000100000000140000000000000029000000430000000800000000000000"], 0xc0}}], 0x3, 0x20004000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:55:25 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xfffffdef) 09:55:25 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) dup3(r0, r1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:55:25 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') pread64(r1, &(0x7f0000000140)=""/4096, 0x1000, 0x0) 09:55:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2, 0x0, 0x2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:55:25 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x1}) r3 = perf_event_open(&(0x7f0000001100)={0x0, 0x80, 0x32, 0x2, 0x7, 0x4, 0x0, 0x2, 0x8004, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc1, 0xfff}, 0xa00, 0x67, 0x7, 0x5, 0x1ff, 0x8cf3, 0x7fff, 0x0, 0x100, 0x0, 0x7df}, 0x0, 0x1, r0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)=0x2) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x540a, 0x3) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000001080)=0x1) 09:55:25 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x600, 0x3, 0x0, 0x0) [ 2601.906841] FAULT_INJECTION: forcing a failure. [ 2601.906841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2601.907978] CPU: 1 PID: 12333 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2601.908573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2601.909285] Call Trace: [ 2601.909537] dump_stack+0x107/0x167 [ 2601.909872] should_fail.cold+0x5/0xa [ 2601.910223] _copy_from_user+0x2e/0x1b0 [ 2601.910586] iovec_from_user+0x141/0x400 [ 2601.910953] __import_iovec+0x67/0x590 [ 2601.911306] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2601.911797] io_import_iovec+0x581/0x1120 [ 2601.912178] ? io_complete_rw+0x230/0x230 [ 2601.912547] ? lock_downgrade+0x6d0/0x6d0 [ 2601.912931] ? unwind_next_frame+0x13ef/0x1a90 [ 2601.913342] io_read+0xe14/0x11e0 [ 2601.913667] ? kiocb_done+0xc90/0xc90 [ 2601.913991] ? mark_lock+0xf5/0x2df0 [ 2601.914317] ? lock_chain_count+0x20/0x20 [ 2601.914673] ? lock_chain_count+0x20/0x20 [ 2601.915025] ? stack_trace_save+0x8c/0xc0 [ 2601.915380] ? stack_trace_consume_entry+0x160/0x160 [ 2601.915839] ? lock_acquire+0x197/0x470 [ 2601.916182] ? __lock_acquire+0xbb1/0x5b00 [ 2601.916542] io_issue_sqe+0x2e8a/0x77b0 [ 2601.916886] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2601.917327] ? SOFTIRQ_verbose+0x10/0x10 [ 2601.917667] ? lock_chain_count+0x20/0x20 [ 2601.918024] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2601.918463] ? io_connect+0x610/0x610 [ 2601.918789] ? lock_acquire+0x197/0x470 [ 2601.919124] ? find_held_lock+0x2c/0x110 [ 2601.919475] ? __fget_files+0x2cf/0x520 [ 2601.919832] ? lock_downgrade+0x6d0/0x6d0 [ 2601.920187] __io_queue_sqe+0x90/0x9d0 [ 2601.920523] ? io_issue_sqe+0x77b0/0x77b0 [ 2601.920876] ? __fget_files+0x2f8/0x520 [ 2601.921216] ? io_prep_rw+0x7f5/0x1050 [ 2601.921554] io_submit_sqes+0x44aa/0x8610 [ 2601.921926] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2601.922347] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2601.922756] ? lock_downgrade+0x6d0/0x6d0 [ 2601.923106] ? find_held_lock+0x2c/0x110 [ 2601.923457] ? io_submit_sqes+0x8610/0x8610 [ 2601.923849] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2601.924271] ? wait_for_completion_io+0x270/0x270 [ 2601.924679] ? rcu_read_lock_any_held+0x75/0xa0 [ 2601.925071] ? vfs_write+0x354/0xb10 [ 2601.925388] ? fput_many+0x2f/0x1a0 [ 2601.925698] ? ksys_write+0x1a9/0x260 [ 2601.926030] ? __ia32_sys_read+0xb0/0xb0 [ 2601.926390] do_syscall_64+0x33/0x40 [ 2601.926705] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2601.927139] RIP: 0033:0x7fd311e28b19 [ 2601.927455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2601.931172] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2601.932488] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2601.934374] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2601.935478] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2601.939776] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2601.944371] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:55:25 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xfffffff5) 09:55:25 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r1}}, 0x5) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000040)={0x1, r7}) openat(0xffffffffffffffff, &(0x7f0000001140)='./file0\x00', 0x201, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r8, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r10, 0x540a, 0x3) syz_io_uring_submit(0x0, r5, &(0x7f0000001100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x4, 0x6, 0x1, {0x0, r9, r10}}, 0xd6d6) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r11, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a644", 0x2}], 0x1}}, 0x0) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000001080)={0x0, 0x8}, 0x8) 09:55:25 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc00, 0x3, 0x0, 0x0) 09:55:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2, 0x0, 0x3}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:55:25 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x7, @private1, 0x633}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000200)="3b2df6aceff114fa5e9c08985350ca0a8c6683361a46d025418b02845c5fcdcb601732597b837f8765553b", 0x2b}, {&(0x7f0000000240)="19128f6bcdeea8aaf76dfea6710468e6b3d881ecdd177d5b", 0x18}, {&(0x7f00000002c0)="51bcd4a250a0b8d03cbd90fffbad097a792f86951fd634c017952e5d4a66fd1f69d0d0eb45e608d7c906d39df470c4da997f3a195912a9c0da5b71be4d5ba6be18e7aa1c13c0147502f866348cd2cbbcd9caaae1ffd46c681606dd3b34b067ad3256eec194274b8a9323d8ff65dffa83d9f510a0131279e62a319a14ca8a2f01", 0x80}, {&(0x7f0000000340)="94be31d8d9e411aec4cc41be196938a2aa0aec509a6694f5fa873c2cf17cfc60c3994566c0b6d0", 0x27}, {&(0x7f0000000380)="00f764770d1b4ebdb9fb315eaeb6921889d9af44a9d794fa3627615d00a3fafe539c61fd965bf768d51d0216ee47e730f32177999313e2c64c69213eb873529acdbd5ee307324f86361dac720944a8a88e15557f28094617032a315b2009f7370904571de7413f3203621d6953b9f9c6", 0x70}, {&(0x7f0000000400)="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", 0x1000}], 0x6}}, {{&(0x7f0000001480)={0xa, 0x4e21, 0x7c9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xfffff44b}, 0x1c, &(0x7f00000025c0)=[{&(0x7f00000014c0)="622e6a7dcba8d4e6f878ed1d4f09ee7242aeaeb2d07d99f49d5ac891ed1374b7adcf4a9d40dbf98564000efc06f76e7696f2cec9836bda6f96c1b125fc6b129c3b223c08590fe1263ce2831a36e04c878dde17ab541dfb66eb78df8102f15a5f37f793850dce2bf2261b9e409a0998ed991079691edcf7df8668afc9807c30e9fa72db7531ffdf49eb1cf8694638beb905e2972046ba133dc884297ac4494e0390bd0ebc7f1693b8dd5331230a5d1eb01324a607f96d0cd664d270f776709f35f64dc393a1573b0d7ac7424ac78a46", 0xcf}, {&(0x7f00000015c0)="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", 0x1000}], 0x2}}, {{&(0x7f0000002600)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}, 0x200}, 0x1c, &(0x7f0000002700)=[{&(0x7f0000002640)="0277acecaf72acac5930e38819ff60670bb0d1829dbc51c98f92db6d33bae301cb634a6419a4280d00ec92adb0fffb", 0x2f}, {&(0x7f0000002680)="2c875522be5ac1cb8786f4e24ec677c430a1645c32323a58421152a41ac614c0ff703b8e174655bda92afc16565b5a1aa3d80dfabad040dc6da8413238f811620765af7b8c0bcd4e9e274f721c893ea2f7ee0eb64827c1b705fd0d4357beaa5e73b04179e9cc8189", 0x68}], 0x2, &(0x7f0000002740)=ANY=[@ANYBLOB="78000000000000002900000039000000080000000000000100000000000000000000ffff0a010102fe80000000000000000000000000001100000000000000000000000000000000fc010000000000000000000000000000fc000000000000000000000000800000000000000000000029000000360000002e02000000000000040101040109040100000100c20400000005000100000000140000000000000029000000430000000800000000000000"], 0xc0}}], 0x3, 0x20004000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:55:42 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x7, @private1, 0x633}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000200)="3b2df6aceff114fa5e9c08985350ca0a8c6683361a46d025418b02845c5fcdcb601732597b837f8765553b", 0x2b}, {&(0x7f0000000240)="19128f6bcdeea8aaf76dfea6710468e6b3d881ecdd177d5b", 0x18}, {&(0x7f00000002c0)="51bcd4a250a0b8d03cbd90fffbad097a792f86951fd634c017952e5d4a66fd1f69d0d0eb45e608d7c906d39df470c4da997f3a195912a9c0da5b71be4d5ba6be18e7aa1c13c0147502f866348cd2cbbcd9caaae1ffd46c681606dd3b34b067ad3256eec194274b8a9323d8ff65dffa83d9f510a0131279e62a319a14ca8a2f01", 0x80}, {&(0x7f0000000340)="94be31d8d9e411aec4cc41be196938a2aa0aec509a6694f5fa873c2cf17cfc60c3994566c0b6d0", 0x27}, {&(0x7f0000000380)="00f764770d1b4ebdb9fb315eaeb6921889d9af44a9d794fa3627615d00a3fafe539c61fd965bf768d51d0216ee47e730f32177999313e2c64c69213eb873529acdbd5ee307324f86361dac720944a8a88e15557f28094617032a315b2009f7370904571de7413f3203621d6953b9f9c6", 0x70}, {&(0x7f0000000400)="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", 0x1000}], 0x6}}, {{&(0x7f0000001480)={0xa, 0x4e21, 0x7c9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xfffff44b}, 0x1c, &(0x7f00000025c0)=[{&(0x7f00000014c0)="622e6a7dcba8d4e6f878ed1d4f09ee7242aeaeb2d07d99f49d5ac891ed1374b7adcf4a9d40dbf98564000efc06f76e7696f2cec9836bda6f96c1b125fc6b129c3b223c08590fe1263ce2831a36e04c878dde17ab541dfb66eb78df8102f15a5f37f793850dce2bf2261b9e409a0998ed991079691edcf7df8668afc9807c30e9fa72db7531ffdf49eb1cf8694638beb905e2972046ba133dc884297ac4494e0390bd0ebc7f1693b8dd5331230a5d1eb01324a607f96d0cd664d270f776709f35f64dc393a1573b0d7ac7424ac78a46", 0xcf}, {&(0x7f00000015c0)="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", 0x1000}], 0x2}}], 0x2, 0x20004000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:55:42 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1200, 0x3, 0x0, 0x0) 09:55:42 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:55:42 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x7, 0x0, 0x4, 0xff, 0x5}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x34, 0x0, &(0x7f00000005c0)) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020100ff010000000000000002000200845875eb180711363acfc5", @ANYRES32=r3, @ANYBLOB="040005000000000010000600000000002000050000000000"], 0x2c, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001080)={'wlan1\x00'}) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:55:42 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 11) 09:55:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2, 0x0, 0x4}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:55:42 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x10000000000) 09:55:42 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x44c00) r1 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) connect$unix(r2, &(0x7f0000000600)=@file={0x0, './file1\x00'}, 0x6e) mkdirat(r1, &(0x7f00000000c0)='./file1\x00', 0x14) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="7472616e733d66642c7a12729c57b8145515b56d7266646e6f3d8bc5d37ef35341b7e018d3175703e24a7052219600e9e4111c2aec01a5ea74a1838fb27808293aa5b23209b3edc854ece593ad2612ae32", @ANYRESHEX, @ANYBLOB=',wsdno=', @ANYRESHEX, @ANYBLOB="2c63616368653d6d6d61702c63616368653d6c6f6f73652c66736e616d653d63616368653d6d6d61702c6673636f6e746578743d73797361646d5f752c6f626a5f726f6c653dee3b6f626a5f747970653d63616368653d6c6f6f73652c00"]) syz_io_uring_setup(0x440b, &(0x7f0000000340)={0x0, 0xc17c, 0x10, 0x2, 0x16b, 0x0, r2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', &(0x7f0000000440)={0x140, 0x70, 0x18}, 0x18) fsmount(0xffffffffffffffff, 0x1, 0x41) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x4) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000200)={0x2, 0x2, 0x10}) r6 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="c73448c87e1180e7ed3d112db7215d34017e1d57f5d4df66248e57778e86650b321fc98dbe3f8fdb52cda387494c07788442b893", @ANYRES16=r7, @ANYBLOB="280427bd7000fcdbdf2501000000000000002941deffff130018000000096574683a67656e6576653100"], 0x30}, 0x1, 0x0, 0x0, 0x4008044}, 0x94) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000240)='nomand\x00', 0x0, 0x0) 09:55:42 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:55:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2, 0x0, 0x5}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2619.125497] FAULT_INJECTION: forcing a failure. [ 2619.125497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2619.126751] CPU: 1 PID: 12384 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2619.127338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2619.135631] Call Trace: [ 2619.135960] dump_stack+0x107/0x167 [ 2619.136375] should_fail.cold+0x5/0xa [ 2619.136778] _copy_to_iter+0x264/0x12d0 [ 2619.137166] ? chacha_block_generic+0x13e/0x200 [ 2619.137614] ? chacha_permute+0x6f0/0x6f0 [ 2619.138054] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2619.138590] get_random_bytes_user+0x173/0x3b0 [ 2619.139080] ? get_random_u32+0x670/0x670 [ 2619.139535] ? wait_for_random_bytes+0x91/0xe0 [ 2619.140370] ? security_file_permission+0xb1/0xe0 [ 2619.140903] ? get_random_bytes_user+0x3b0/0x3b0 [ 2619.141428] random_read_iter+0x65/0x140 [ 2619.141845] io_read+0x2dc/0x11e0 [ 2619.142215] ? kiocb_done+0xc90/0xc90 [ 2619.142715] ? mark_lock+0xf5/0x2df0 [ 2619.143102] ? lock_chain_count+0x20/0x20 [ 2619.143519] ? stack_trace_consume_entry+0x160/0x160 [ 2619.144029] ? lock_acquire+0x197/0x470 [ 2619.144445] ? __lock_acquire+0xbb1/0x5b00 [ 2619.144881] io_issue_sqe+0x2e8a/0x77b0 [ 2619.145295] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2619.145799] ? SOFTIRQ_verbose+0x10/0x10 [ 2619.146205] ? lock_chain_count+0x20/0x20 [ 2619.146741] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2619.147262] ? io_connect+0x610/0x610 [ 2619.147656] ? lock_acquire+0x197/0x470 [ 2619.148072] ? find_held_lock+0x2c/0x110 [ 2619.148461] ? __fget_files+0x2cf/0x520 [ 2619.148800] ? lock_downgrade+0x6d0/0x6d0 [ 2619.149154] __io_queue_sqe+0x90/0x9d0 [ 2619.149543] ? io_issue_sqe+0x77b0/0x77b0 [ 2619.149940] ? __fget_files+0x2f8/0x520 [ 2619.150465] ? io_prep_rw+0x7f5/0x1050 [ 2619.150869] io_submit_sqes+0x44aa/0x8610 [ 2619.151316] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2619.151851] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2619.152311] ? lock_downgrade+0x6d0/0x6d0 [ 2619.152706] ? find_held_lock+0x2c/0x110 [ 2619.153086] ? io_submit_sqes+0x8610/0x8610 [ 2619.153512] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2619.153961] ? wait_for_completion_io+0x270/0x270 [ 2619.176051] ? rcu_read_lock_any_held+0x75/0xa0 [ 2619.176482] ? vfs_write+0x354/0xb10 [ 2619.176829] ? fput_many+0x2f/0x1a0 [ 2619.177187] ? ksys_write+0x1a9/0x260 [ 2619.177544] ? __ia32_sys_read+0xb0/0xb0 [ 2619.177946] do_syscall_64+0x33/0x40 [ 2619.178296] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2619.178766] RIP: 0033:0x7fd311e28b19 [ 2619.179130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2619.199283] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2619.199999] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2619.201045] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2619.201782] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2619.202523] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2619.203176] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 [ 2619.208737] 9pnet: Insufficient options for proto=fd 09:55:42 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x80000000000000) 09:55:42 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1800, 0x3, 0x0, 0x0) 09:55:42 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x540a, 0x3) sendfile(r0, r2, &(0x7f0000000000)=0x1, 0x5) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:55:42 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x7, @private1, 0x633}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000200)="3b2df6aceff114fa5e9c08985350ca0a8c6683361a46d025418b02845c5fcdcb601732597b837f8765553b", 0x2b}, {&(0x7f0000000240)="19128f6bcdeea8aaf76dfea6710468e6b3d881ecdd177d5b", 0x18}, {&(0x7f00000002c0)="51bcd4a250a0b8d03cbd90fffbad097a792f86951fd634c017952e5d4a66fd1f69d0d0eb45e608d7c906d39df470c4da997f3a195912a9c0da5b71be4d5ba6be18e7aa1c13c0147502f866348cd2cbbcd9caaae1ffd46c681606dd3b34b067ad3256eec194274b8a9323d8ff65dffa83d9f510a0131279e62a319a14ca8a2f01", 0x80}, {&(0x7f0000000340)="94be31d8d9e411aec4cc41be196938a2aa0aec509a6694f5fa873c2cf17cfc60c3994566c0b6d0", 0x27}, {&(0x7f0000000380)="00f764770d1b4ebdb9fb315eaeb6921889d9af44a9d794fa3627615d00a3fafe539c61fd965bf768d51d0216ee47e730f32177999313e2c64c69213eb873529acdbd5ee307324f86361dac720944a8a88e15557f28094617032a315b2009f7370904571de7413f3203621d6953b9f9c6", 0x70}, {&(0x7f0000000400)="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", 0x1000}], 0x6}}, {{&(0x7f0000001480)={0xa, 0x4e21, 0x7c9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xfffff44b}, 0x1c, &(0x7f00000025c0)=[{&(0x7f00000014c0)="622e6a7dcba8d4e6f878ed1d4f09ee7242aeaeb2d07d99f49d5ac891ed1374b7adcf4a9d40dbf98564000efc06f76e7696f2cec9836bda6f96c1b125fc6b129c3b223c08590fe1263ce2831a36e04c878dde17ab541dfb66eb78df8102f15a5f37f793850dce2bf2261b9e409a0998ed991079691edcf7df8668afc9807c30e9fa72db7531ffdf49eb1cf8694638beb905e2972046ba133dc884297ac4494e0390bd0ebc7f1693b8dd5331230a5d1eb01324a607f96d0cd664d270f776709f35f64dc393a1573b0d7ac7424ac78a46", 0xcf}, {&(0x7f00000015c0)="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", 0x1000}], 0x2}}], 0x2, 0x20004000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:55:42 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 12) [ 2619.623896] FAULT_INJECTION: forcing a failure. [ 2619.623896] name failslab, interval 1, probability 0, space 0, times 0 [ 2619.626833] CPU: 0 PID: 12408 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2619.628682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2619.631586] Call Trace: [ 2619.632206] dump_stack+0x107/0x167 [ 2619.633146] should_fail.cold+0x5/0xa [ 2619.634131] ? create_object.isra.0+0x3a/0xa20 [ 2619.635294] should_failslab+0x5/0x20 [ 2619.636160] kmem_cache_alloc+0x5b/0x310 [ 2619.637064] ? find_held_lock+0x2c/0x110 [ 2619.637946] create_object.isra.0+0x3a/0xa20 [ 2619.638909] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2619.640041] __kmalloc_node+0x1ae/0x420 [ 2619.640908] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2619.642021] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2619.643104] kmem_cache_alloc_bulk+0x182/0x320 [ 2619.644101] io_submit_sqes+0x6fe6/0x8610 [ 2619.645004] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2619.646090] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2619.647175] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2619.648334] ? lock_downgrade+0x6d0/0x6d0 [ 2619.649399] ? find_held_lock+0x2c/0x110 [ 2619.650461] ? io_submit_sqes+0x8610/0x8610 [ 2619.651609] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2619.652914] ? wait_for_completion_io+0x270/0x270 [ 2619.654137] ? rcu_read_lock_any_held+0x75/0xa0 [ 2619.655324] ? vfs_write+0x354/0xb10 [ 2619.656268] ? fput_many+0x2f/0x1a0 [ 2619.657247] ? ksys_write+0x1a9/0x260 [ 2619.658221] ? __ia32_sys_read+0xb0/0xb0 [ 2619.659278] do_syscall_64+0x33/0x40 [ 2619.660263] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2619.661573] RIP: 0033:0x7fd311e28b19 [ 2619.662554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2619.666688] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2619.668478] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2619.670213] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2619.671971] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2619.672657] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2619.673336] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:56:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)) write$binfmt_elf64(r1, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], 0xaf5) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x8, 0xdff, 0x5, 0xe1}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x540a, 0x3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x540a, 0x3) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x6e, 0x1, 0x3, 0xd8, 0x6}) 09:56:00 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x7, @private1, 0x633}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000200)="3b2df6aceff114fa5e9c08985350ca0a8c6683361a46d025418b02845c5fcdcb601732597b837f8765553b", 0x2b}, {&(0x7f0000000240)="19128f6bcdeea8aaf76dfea6710468e6b3d881ecdd177d5b", 0x18}, {&(0x7f00000002c0)="51bcd4a250a0b8d03cbd90fffbad097a792f86951fd634c017952e5d4a66fd1f69d0d0eb45e608d7c906d39df470c4da997f3a195912a9c0da5b71be4d5ba6be18e7aa1c13c0147502f866348cd2cbbcd9caaae1ffd46c681606dd3b34b067ad3256eec194274b8a9323d8ff65dffa83d9f510a0131279e62a319a14ca8a2f01", 0x80}, {&(0x7f0000000340)="94be31d8d9e411aec4cc41be196938a2aa0aec509a6694f5fa873c2cf17cfc60c3994566c0b6d0", 0x27}, {&(0x7f0000000380)="00f764770d1b4ebdb9fb315eaeb6921889d9af44a9d794fa3627615d00a3fafe539c61fd965bf768d51d0216ee47e730f32177999313e2c64c69213eb873529acdbd5ee307324f86361dac720944a8a88e15557f28094617032a315b2009f7370904571de7413f3203621d6953b9f9c6", 0x70}, {&(0x7f0000000400)="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", 0x1000}], 0x6}}], 0x1, 0x20004000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:56:00 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 13) 09:56:00 executing program 7: perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0x2, 0x4, 0x8, 0x61, 0x0, 0xffffffff, 0x80888, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xd5, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x20, 0x60a3dd38, 0x5, 0x9, 0x5, 0x7, 0xfa, 0x0, 0x8d, 0x0, 0x10001}, 0xffffffffffffffff, 0xb, r0, 0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000001080)) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:56:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2, 0x0, 0x6}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:56:00 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x600000000000000) 09:56:00 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e00, 0x3, 0x0, 0x0) 09:56:00 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8, 0x9}) signalfd(r0, &(0x7f0000001080)={[0x800000000000]}, 0x8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x55}, 0x10) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:56:00 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001080), 0xa0881, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000001100)={0x9, 0x5, 0xfb4, 0x0, 0xb2, 0x5}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x4, 0x0, 0x0, 0xffffffff, 0x2}) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x81, 0x20, 0x0, 0x1, 0x0, 0x0, 0x10002, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x6, 0x1}, 0x110, 0x4, 0x4, 0x3, 0x9, 0x7, 0xe0, 0x0, 0x5e, 0x0, 0xd860}, 0x0, 0xb, r0, 0xa) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001340)='setgroups\x00') openat2(r2, &(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)={0x400000, 0x52, 0x8}, 0x18) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000001280)={&(0x7f0000001140), 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0xc0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x41}}}}, [@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4041}, 0x4000) [ 2637.385754] FAULT_INJECTION: forcing a failure. [ 2637.385754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2637.387358] CPU: 1 PID: 12426 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2637.388071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2637.388893] Call Trace: [ 2637.389165] dump_stack+0x107/0x167 [ 2637.389537] should_fail.cold+0x5/0xa [ 2637.389918] _copy_to_iter+0x264/0x12d0 [ 2637.390324] ? chacha_block_generic+0x13e/0x200 [ 2637.390789] ? chacha_permute+0x6f0/0x6f0 [ 2637.391191] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2637.391710] get_random_bytes_user+0x173/0x3b0 [ 2637.392173] ? get_random_u32+0x670/0x670 [ 2637.392588] ? wait_for_random_bytes+0x91/0xe0 [ 2637.393053] ? security_file_permission+0xb1/0xe0 [ 2637.393542] ? get_random_bytes_user+0x3b0/0x3b0 [ 2637.394669] random_read_iter+0x65/0x140 [ 2637.395183] io_read+0x2dc/0x11e0 [ 2637.396045] ? kiocb_done+0xc90/0xc90 [ 2637.396950] ? mark_lock+0xf5/0x2df0 [ 2637.397850] ? lock_chain_count+0x20/0x20 [ 2637.398832] ? stack_trace_consume_entry+0x160/0x160 [ 2637.400062] ? lock_acquire+0x197/0x470 [ 2637.401004] ? __lock_acquire+0xbb1/0x5b00 [ 2637.402021] io_issue_sqe+0x2e8a/0x77b0 [ 2637.402961] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2637.404220] ? SOFTIRQ_verbose+0x10/0x10 [ 2637.405165] ? lock_chain_count+0x20/0x20 [ 2637.406151] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2637.407382] ? io_connect+0x610/0x610 [ 2637.408303] ? lock_acquire+0x197/0x470 09:56:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2, 0x0, 0x7}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2637.409232] ? find_held_lock+0x2c/0x110 [ 2637.410259] ? __fget_files+0x2cf/0x520 [ 2637.410769] ? lock_downgrade+0x6d0/0x6d0 [ 2637.411298] __io_queue_sqe+0x90/0x9d0 [ 2637.411801] ? io_issue_sqe+0x77b0/0x77b0 [ 2637.412330] ? __fget_files+0x2f8/0x520 [ 2637.413351] ? io_prep_rw+0x7f5/0x1050 [ 2637.414291] io_submit_sqes+0x44aa/0x8610 [ 2637.415280] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2637.416487] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2637.417618] ? lock_downgrade+0x6d0/0x6d0 [ 2637.418602] ? find_held_lock+0x2c/0x110 [ 2637.419557] ? io_submit_sqes+0x8610/0x8610 [ 2637.420603] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2637.421745] ? wait_for_completion_io+0x270/0x270 09:56:00 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0xde, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) pidfd_getfd(r2, r0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 2637.422905] ? rcu_read_lock_any_held+0x75/0xa0 [ 2637.424070] ? vfs_write+0x354/0xb10 [ 2637.425017] ? fput_many+0x2f/0x1a0 [ 2637.425897] ? ksys_write+0x1a9/0x260 [ 2637.426799] ? __ia32_sys_read+0xb0/0xb0 [ 2637.427782] do_syscall_64+0x33/0x40 [ 2637.428662] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2637.429900] RIP: 0033:0x7fd311e28b19 [ 2637.430774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2637.435176] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2637.437002] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2637.438710] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2637.440415] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2637.442122] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2637.443807] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:56:00 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x3, 0x0, 0x0) 09:56:00 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 14) 09:56:00 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xc00000000000000) 09:56:01 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0xe}}, 0x1c, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}, 0x20040000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a644", 0x2}], 0x1}}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r5, 0x0, &(0x7f0000000580)="d4e9d56247582df615d9cfc21fac7042bbe1af224979ed9fead5fb4652e813cf855417efcce03cdbfaf5928a05613bb6b3300354e0cbb998ff16dc65358f57264a97e0b48b9587abb0d3c9f4c119f9d65965ea1eac4d5cbea84a048d98cd7f52239b0fa1fd6a475c2022ef3e3fcf8de00282137fae6ae3a553eaf72f3212aee6a7c304a39608af2c61c7162bd9cf473503b837c517c78e9c587b42e491edaf5a74b29bfd600490455ce8d0e8ff2f4afc10dd0b1d6c026ba75fdabbf6068ec0decb563842a53ff1356445bdd88a299a6207b8b42b456f57acf50ee4152a1408299b2800af2d65e451af00b505196d9a91d23281d21ea28de7073749a4b5e84ad1944a5bcede1d940cb515c49d239cbf19dbec5e9e06fd73dca64c7fabba94ccd74979899186a8325e1539fe555442cd7bb9c5b938da4d47bdea806d6a9afded007efe0c99514c53aed4b805da892f132ddd6c6a8f1e2658d76eff98afd0551c34181c99dc352573b276d1a35928403ad570eeb152e03b50deb05f261afae1e77edabb32fd5fc6348f01cdeaee31d61cdbe9074df99535dd6f004e517e88c9b9564388b92f09b5ca86b648284a545dca5b58f1a03f30b69c506db8cf68b658b319898edae80f1a0680bb53686223223f27db1a7bb8c143235f6fd6722b15612a00d8b9a66443e0cdb5c5ceeb1b30ee9e6f4adb9f689036aeba578f6c8911e6498b086adf1e4736a559268c6e3767d57f3eadb87df14cdbbf958fc56d8037001f9dff1ad9ce2a0dc5c8e8464fdb8ccc7aaa67f5dba8cd36fd59b1fe5e78c070690d03530e3889a6849681f9063d97a8e7542176852d6c034e1cdfa268223e0b4ae716b3cfb2e84b1c6db13dc1b75c4098d716c73ee35622c55e877118f5423c10bf2a88de7d321c174ad443ea2c7b36979aaedd0f12c8195e34a6de33207d88fc6772cabcd98e1ce18e43ca431298819f13bb2ea7667d657373d0bbd5c117d3afeef668939daa7713bd735df70f374338b59b9c0d8953f2bf596bb2829b75d209e7eae0be11c17170852686014cfb5c972db80f7ebe2cd17d253008b27c09df491321e5d9006c217b0ba328786bb85be3596813874c21b3de0434e28374c627b34a94e6fa22313e1123da4d9df8a9d1632656b4461e3e81babbd7cc5b79f095f616d268a5080db288ac5a670377e65b023b4085262cda178e8bcdca9ebb26e2797c9e7d44644b000f0331a33f8bbefe2526d47451d5b05b28c3b930e87c4c2817e1509f59c48c8881db9785c66c380fb7c984e4c0b8ca7ada01ca42ad842968361699ba77615e1bc833edacb9bc5090b5dad3dc5adaffe6f34f8ddb7a1367b4b5b830550bdc8cf117e9457414fe0251a920dda7ba73d9fb56c31d9a77f2f11fc11371cd996d4f8782c12755a0b47191adf3ef37d953479fe171d478058916b4b3dbb6723f8773f758346e595206d9d33ba204c22509b60971e9c472902ec36c756de743fb9666273399589d44a696064e8f65109fbc66549d80f94d79b35ad3d23be0fd1989ff0c378089c2e78c688f0540f172d0363ebc6cdf3cc6f1155d2fe60aa61fa36d627f70b4183b020591a52027341c6f913f0b969fc99f24778cde9c2541ae437ce375241009090c7548c6d37fd72b4827fb89e233d9f5fe87dca11dbb1d921c495e4f105bfbd07f452d11bd588d1fe8e365ac38a7d555cef8c89b78cc8da28e42261c54a58c4f92d654008bcb806e3961ff514f9e5b5d6a563b1211d3a8bb25ed8ff0462b0607c6f32888ba70f180e06286aebb28a05b761e3c6df81fbdab11676f282d243b178a9d0ab6c86f0a5dd9bdede66a29ef431a69da89c2310a9860d081c9c6e546bb82c871fc22100af5cc4e8925819e4bdb38b9799fee396f2322602ed6dac407fb9a7410f1018a4b5fbb455b7d3267883b3ef06cb1a22725cb723d57bac81007b432aa7041894f1d2d6bc5204184a5969bafc92d45f0b50e2e3fa0cf502e71ec6697cd49ef05f3da87cd82fd9d30fbdc6483fc0b3edca5e77c3456d983363d9add6ce4e2dfdd5d4043bff760ecdbdd26998ca627a78d5cd5d18333e475b06a4b15e08df6eec14c41de773e9e4edf0ed575cbdfff6ce1db6bd933c5ea802ce62422c9a266f3db95b76973ef676af2106db48cf05c5f9f542a68e23e7e4ee1a8d55918c6aef247ccfc1786104e6377bbffb62bf251c06ff8c5153a65ae04d0af9d04421cbb83a99fd9c40b3acbd88de380beae73e7320f93dea4621bd60ce6a9f4ec8fa94b2792dd70487669ff0f48af3c0c84b029c4cdb7fc8be72f3cb4b1a0c1da4218c4a753a7e94bd42946c9a48c8398e2f616e6ae719219c4d1ed54dadc42db4246cf7cd455c5adeba5f56dd128be651af2a11b2be6f0f311cd8e351ebabec3f1eb8b107fce17b8b37312466273038bf2ca14c9e9837de4b02276d1a1f319289f1e4c48cfc1784463c33f7b1479096f8c6d6c921403fb855a5ab4c25ee818e2eb14a6d2ecb807b3002e4fccb406dc23a9a64483aef928d3b2d23f77c5ede1ecf9b90119b72c73134c48ebb6f6b6fda351e16126bfd56e8a5aac2da308040b928c80f2dd8bf067fe7639b7fda32b0c075a7e2fcc56525bfeb29b2b110394eb47b1d7fca1a20014bf06e8c9913586046b0acb174347508882b0e6922d3483c6c7aa8f67f133d715d548d415a7dda1e4db441ca187d95d3f4a1b56f30cafea48056054f239f7b8665f674ef76ef325b77b95bce6beb54379e80e197ccf32d82358d92ae4a2a57645ac396c4ac09ca6f6fcb45d9c2e37a5998af50a2dda566a273635630b9d1807b1e9a9d163fb77388fc9f2cd633cfeddf0b7e432146dec00e0a13dd55c7186ee8ac80758f8e4be3b4d9bdef6538277d3353c09d9b186094ee348078c8522e1ef3ce7ca13bf1a55ec876e9321608f758cfef74730bd9c2141cbde3148cf237300b3e6c9f8fa0cb2de7ad7728becd3b9f7c99ac460bae4e4c74ed6aac1710b620dbbceee19051d22704977370d369bf6cd68f7fd8437aa3a0ae01d31b9be5f0f43670f93ff4909e93439f2b9fc4fd6eaf9ed4f3bf6d8e6567aa527f8ffa04a26b3224b84e62e81f02fa9f678488602ccd55cc97a3d5ade18e7124724e0e3799b268cef510d29c47e6fe5a80902eeb15aa2012ddc7520fb615e8039157804f0d621f06eb33bd3d167d9020a2c4c49ba0eab2075ba96263dd7b913d20fc2493792c48adb5cd9a0e596ab65fa94def0875876e29b95968d169f7cff3e876a07d2518f8ce8af1c2014f90dd9d6131b556fa55fd4ed0941e4600e6e14278cdf6a3051edd062ba86abd1152ab1584b9ddae4266e860e417dbb59f5cac066eb185ed88cc0aacac9132d6eeac0eaf87cef4420048ae16da12e91cb0a045d43313927edc869e1b53fe93b2d6138ae31fe93e07d347ecec2bbc0a2520ef4c7c673abd9dbc651f76389f2f47b12638200a528ccf69c82b1d4e6aff73115db765acd75ea2903e19563b244cf8f641d521c133c242ac924a83cd6e33b5e4845368f3871f422896f784901f21dfe9c453ac556b6ffde4e156b0bc5a64882bcafdf625e1f854073750a88c3b20519638f34a98ef680ff7b0bac98f5d9a9d2beba033f24788096fe9e231b08df572abd9578b39b24993e77eb1981f3ddf6767e21430f391fb96e7657487dbf6c3c5b989d3806f4ef1b680d41a5b595cef498d1f6ccee2da80f60d2b1378e673a62799542659f5c3e9bd6acc1fdb4a47a9936bcce09f2840211260f4072ac806048e6b79272f06492c89c79c76128e5fc855c6f2d17df79ceb7537ee86597bab6cc553189cc39525f7f92d290ecbbc443d7d943603a2dc116332f045851a0eeebcc1aa15e53ae680310e0f76cd892e7e9ef0a99453a84d6d19b336e31333c3c20ed24928238ef8b8848de1b76bfb440dad87478426c32c5f60126917160eff2f42838b265a658abe5215216d03f85c61d901d0175d65989716f1b2607fbfea61f9d2741a3630d42132ada38ffcbff9128dbb8883ecf8e2ca0146f5f685acdbdc6ae5d50812b705b82d9c81a97cc0314e5aa1415ac7047c83e27ae2d971d028e35b48a4337f060cc1d3067d7b44ccc24f55001f59481ed0a6411ec6539aaacd0c48e924496a41d0eda72b785e42d7ced65c15655ccb9ffcfcec21a8a4a2a1baf91cd9a872186627c54b2dec204f6a6147610c11ff2efb751b0380b537d5bb5cff1b2c1992e58b61c063637bae6c5f2ce7fb6d71effa185e78ff1d94ad821177c2317514247763918b64fcfb23cf3effcdf72fc195a48ab9b65630e3012da48a73555ead7fb42115b92ed9ea94345469fea253d1428c073cd950f2433ab33f1c995adf53a5392e995ad9c3840cf44d1e1e17de56d77329b7e3735b34ab149ccf1ae2678fdc20325442c7e6284cb741f7405496b0d2fe48a8fe0c24d3d251f8fb519ff0da34a55fe3d493ea3bad93013db38077245477715d94db42e05fbcf54ac7b200d976e471c11a3a289d77fbb9d89c73b0db387a5dd3cc748e80ecd61ede92ac15af48ed2aeefea37cf5b2fffbfeaa32a9f90540fb30b8bb5858ff9925ee077efa50485914bf6ec86e5cd5131ff3069286f8fa320ddb92e2c46772c92465317666e6a91ef0617b02b6aa1ab010714017f877e5a26f007d00acdb717d4aea5c834a485e5939b0b1bf8369f1cce9e8b7e0e994b112803288ec1f1f6fae334326c04c79c68d62877de7506900b3e1adbb8a0463a74d869bb30e10b6a730b80f1cf061068a567be23c6165029096589a6ca229fba6af5c81b46530fd3e5bb66139c3efbd1b3878f6fb032d91d7cabe5ad453700837aa3df70ad6464aab5d7d632785f4816a854ba280328ed2ed0fa617d8733a84c67fc74bd251202f1324d786338258b8edff70060168f637fdad076d2933ed60664d69bed1799646779328ef49f2e6dd781b5dcd13cf38d3adcc5b7533179e43985729cb008d9ec1e77fd01c3befb6c0633c12eb72be5b22aa5a880ab146ebc3a2491bed5d9cab6b5cbc7b098e29c07a804bca345baaeccd2aebde924b68a5396749de54b44274cb4fad29e903e3fa8c7a4c8450a5ec57bd7bcecb2b3e94323c63eedbeb769b8bfdfb123ba3ef209e38eb1adf01f0a0093475e63076064cc206ab050032387d5466303510cbefcb5fa9bfc7b505a08e4fc52192c5a5139da5324912755247ed56584506e747b5a3a71531664398c0de6a533ef87b9b8b05ecdc04843d3f15db6729e779dec0fa3ff316b4f8c41a13b8897ce6552c17eada432bb726987e12263cd899e6a858fd1a1e2205c6313e52bba533e988c0dc6fc1173b44e968e29856af9880a307132733f105381a2833f5291b16cd91487c8ffccaff4ab11fdf60014f4808c9291aa6c6e624a0dd280a80da926e6b48ab154c2812d5bb8b8c82ffb403ec5640c9e60145b8ed828c094d1d229f49de5fa0207b8adcf4be881827437a53da86a0240ca1957aeb5b545046ee3d3596be0b937bbbd79883db5a1b5c029d7b7ab1b0c08d094085105fe4c5c1e1bbe756331a2dd8acd95000cc400a3df1cfadbf7364d5fc6550176bbfbb99f339a856671c26b492d1ba174e62c7f1f6a6d1850183e707989bfc0c7722807679907ade07c040143b73143ba9b6117a887f44b5c7d89cc655ebca975e54202d93714fb814a348418cbc6d1245cc43bd4c14a8f6508156fbf862645271c0908be91527299c9836badf9661c8b784ff65fa9525583e3b95278bfed8a5b8fecac7114856494cf51", 0x1000, 0x0, 0x1, {0x0, r6}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4080111}, 0xc, &(0x7f00000000c0)={&(0x7f0000003540)=ANY=[@ANYBLOB="001400002900010028bd7000fddbdf251600000003d92fa29367a4a052570a4216c730246b67cd0f6f65bb0cc830e3211d7fb8148f61dd7f2936f697eae6e86f67e86fd577672ade2bcb2850d41a71fe6a9b678e6209985bae21ebfdbadfae7a5af5769ae9007a58906c1bbb8fb3112154671480690338cc80e627baf96c32c7aedc60091787fdd0aff02c1e3e62f775ed7853ef4323aaa02f08006600", @ANYRES32, @ANYBLOB="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"], 0x1400}}, 0x0) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000d9f994144bc4709cabbe486b9ae6bec10325b3030d1639ad59e9d0e351eaae5438d691d246731ade399a88253291511958c5228dfa59e7706ff6a965690431be5be79fc6a3e497a04668", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2637.744188] FAULT_INJECTION: forcing a failure. [ 2637.744188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2637.745981] CPU: 1 PID: 12563 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2637.746717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2637.747575] Call Trace: [ 2637.747892] dump_stack+0x107/0x167 [ 2637.748316] should_fail.cold+0x5/0xa [ 2637.748755] _copy_to_iter+0x264/0x12d0 [ 2637.749222] ? chacha_block_generic+0x13e/0x200 [ 2637.749745] ? chacha_permute+0x6f0/0x6f0 [ 2637.750217] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2637.751382] get_random_bytes_user+0x173/0x3b0 [ 2637.751896] ? get_random_u32+0x670/0x670 [ 2637.752877] ? wait_for_random_bytes+0x91/0xe0 [ 2637.753917] ? security_file_permission+0xb1/0xe0 [ 2637.755005] ? get_random_bytes_user+0x3b0/0x3b0 [ 2637.756047] random_read_iter+0x65/0x140 [ 2637.756950] io_read+0x2dc/0x11e0 [ 2637.757711] ? __is_insn_slot_addr+0x14c/0x290 [ 2637.758727] ? kiocb_done+0xc90/0xc90 [ 2637.759557] ? mark_lock+0xf5/0x2df0 [ 2637.760398] ? register_lock_class+0xbb/0x17b0 [ 2637.761389] ? arch_stack_walk+0x99/0xf0 [ 2637.762289] ? lock_chain_count+0x20/0x20 [ 2637.763185] ? is_dynamic_key+0x1e0/0x1e0 [ 2637.764123] ? __lock_acquire+0x1657/0x5b00 [ 2637.765064] ? __lock_acquire+0xbb1/0x5b00 [ 2637.766002] io_issue_sqe+0x2e8a/0x77b0 [ 2637.766876] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2637.768044] ? SOFTIRQ_verbose+0x10/0x10 [ 2637.768929] ? lock_chain_count+0x20/0x20 [ 2637.769848] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2637.770982] ? io_connect+0x610/0x610 [ 2637.771828] ? lock_acquire+0x197/0x470 [ 2637.772700] ? find_held_lock+0x2c/0x110 [ 2637.773601] ? __fget_files+0x2cf/0x520 [ 2637.774463] ? lock_downgrade+0x6d0/0x6d0 [ 2637.775379] __io_queue_sqe+0x90/0x9d0 [ 2637.776238] ? io_issue_sqe+0x77b0/0x77b0 [ 2637.777154] ? __fget_files+0x2f8/0x520 [ 2637.778017] ? io_prep_rw+0x7f5/0x1050 [ 2637.778887] io_submit_sqes+0x44aa/0x8610 [ 2637.779819] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2637.780932] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2637.781980] ? lock_downgrade+0x6d0/0x6d0 [ 2637.782898] ? find_held_lock+0x2c/0x110 [ 2637.783778] ? io_submit_sqes+0x8610/0x8610 [ 2637.784743] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2637.785795] ? wait_for_completion_io+0x270/0x270 [ 2637.786870] ? rcu_read_lock_any_held+0x75/0xa0 [ 2637.787891] ? vfs_write+0x354/0xb10 [ 2637.788727] ? fput_many+0x2f/0x1a0 [ 2637.789515] ? ksys_write+0x1a9/0x260 [ 2637.790356] ? __ia32_sys_read+0xb0/0xb0 [ 2637.791240] do_syscall_64+0x33/0x40 [ 2637.792075] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2637.793192] RIP: 0033:0x7fd311e28b19 [ 2637.794015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2637.798069] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2637.799731] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2637.801286] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2637.802848] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2637.804406] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2637.805654] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:56:16 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900), 0x0, 0x20004000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:56:16 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 15) 09:56:16 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1200000000000000) 09:56:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2, 0x0, 0x8}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:56:16 executing program 2: syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000340)={0x1ff, 0x10, '\x00', 0x0, &(0x7f0000000300)=[0x0, 0x0]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x810, r3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000040)={0x1, r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x1feb, 0x10e2, 0x2, &(0x7f0000000100)={[0x7]}, 0x8) r6 = creat(&(0x7f0000000380)='./file0\x00', 0x0) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000000000000000000f05722c8a75693632e76d0cde9879303fbb25e7eca1c4aa77c1fabeb5f4bf937c18e4a4200e4b9098e32c8a049db2fdae81fcd49731598390b906f8e0e3be7bfc6ff28af68deb0fa031faab0b5ffa87008b4377322c509249a0c6c8320abb500d7431c5549ca7836be112abd2f3154eddd02e27dfb6637afead075ed444e41666b4a62fbf4c64643df7671ee54505e2e22ac50365f44f8e7d87970d8cc8df8cf718ad8d1a78ba37342db6ab59af18e7877e82b49544357c2072ff815e6a3a7cf1215acec20bde6b7ff326946d5"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000003c0)) 09:56:16 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$incfs(r0, &(0x7f0000001180)='.log\x00', 0x101000, 0x39) sendfile(r1, r0, &(0x7f0000000000)=0xbaba, 0x2) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', &(0x7f0000001100)={0x8000, 0x8, 0x4}, 0x18) fcntl$lock(r2, 0x23, &(0x7f0000001140)={0x0, 0x0, 0xffffffffffffffff, 0x6}) 09:56:16 executing program 4: perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0x70, 0x0, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = getpgid(0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) perf_event_open(&(0x7f0000001180)={0x1, 0x80, 0x9, 0x81, 0xc0, 0x8a, 0x0, 0x2, 0x51484, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000001080)}, 0x400, 0x3, 0xfe000000, 0x1, 0x400, 0x6, 0x0, 0x0, 0xc1, 0x0, 0x8}, r1, 0xe, r2, 0xd) r4 = fork() perf_event_open(&(0x7f0000001340)={0x5, 0x80, 0x9, 0x3f, 0x81, 0x80, 0x0, 0xce0, 0x2, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000001300), 0x8}, 0x1, 0x81, 0x7f, 0x7, 0x28001d11, 0x200, 0x1, 0x0, 0x7, 0x0, 0x80}, r4, 0xffffffffffffffff, r3, 0x9) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) write$binfmt_script(r2, &(0x7f0000001200)={'#! ', './file0', [{0x20, '/proc/diskstats\x00'}, {0x20, '/proc/diskstats\x00'}, {0x20, '/proc/diskstats\x00'}, {0x20, '\xec^-^%}{\''}], 0xa, "b75aee5d84b4b451446b81cc37fbf786d4f8528f1a4dc0644532700c497011d98fcdb6e6c84139aa1299f24ed8f275bd8f68cd6520b952d013fed8450df53633749bd16431d7f69618142f026d6747b0d1c8df92cffec168f10de671d2f56701c5a6fa13f07f91dc65d1965cc5cce46eab82aa70077d5ea00b511215e3179b6c1ba625c3"}, 0xcb) 09:56:16 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2400, 0x3, 0x0, 0x0) 09:56:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2, 0x0, 0x9}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2653.074642] FAULT_INJECTION: forcing a failure. [ 2653.074642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2653.075795] CPU: 0 PID: 12671 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2653.076541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2653.077304] Call Trace: [ 2653.077557] dump_stack+0x107/0x167 [ 2653.077901] should_fail.cold+0x5/0xa [ 2653.078264] _copy_to_iter+0x264/0x12d0 [ 2653.078638] ? chacha_block_generic+0x13e/0x200 [ 2653.079068] ? chacha_permute+0x6f0/0x6f0 [ 2653.079456] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2653.079922] get_random_bytes_user+0x173/0x3b0 [ 2653.080363] ? get_random_u32+0x670/0x670 [ 2653.080754] ? wait_for_random_bytes+0x91/0xe0 [ 2653.081188] ? security_file_permission+0xb1/0xe0 [ 2653.081634] ? get_random_bytes_user+0x3b0/0x3b0 [ 2653.082076] random_read_iter+0x65/0x140 [ 2653.082459] io_read+0x2dc/0x11e0 [ 2653.082793] ? kiocb_done+0xc90/0xc90 [ 2653.083151] ? mark_lock+0xf5/0x2df0 [ 2653.083504] ? lock_chain_count+0x20/0x20 [ 2653.083899] ? stack_trace_consume_entry+0x160/0x160 [ 2653.084389] ? lock_acquire+0x197/0x470 [ 2653.084766] ? __lock_acquire+0xbb1/0x5b00 [ 2653.085162] io_issue_sqe+0x2e8a/0x77b0 [ 2653.085540] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2653.086024] ? SOFTIRQ_verbose+0x10/0x10 [ 2653.086402] ? lock_chain_count+0x20/0x20 [ 2653.086791] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2653.087274] ? io_connect+0x610/0x610 [ 2653.087634] ? lock_acquire+0x197/0x470 [ 2653.088003] ? find_held_lock+0x2c/0x110 [ 2653.088398] ? __fget_files+0x2cf/0x520 [ 2653.088772] ? lock_downgrade+0x6d0/0x6d0 [ 2653.089166] __io_queue_sqe+0x90/0x9d0 [ 2653.089534] ? io_issue_sqe+0x77b0/0x77b0 [ 2653.089917] ? __fget_files+0x2f8/0x520 [ 2653.090292] ? io_prep_rw+0x7f5/0x1050 [ 2653.090659] io_submit_sqes+0x44aa/0x8610 [ 2653.091068] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2653.091531] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2653.091983] ? lock_downgrade+0x6d0/0x6d0 [ 2653.092383] ? find_held_lock+0x2c/0x110 [ 2653.092765] ? io_submit_sqes+0x8610/0x8610 [ 2653.093175] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2653.093626] ? wait_for_completion_io+0x270/0x270 [ 2653.094076] ? rcu_read_lock_any_held+0x75/0xa0 [ 2653.094508] ? vfs_write+0x354/0xb10 [ 2653.094854] ? fput_many+0x2f/0x1a0 [ 2653.095194] ? ksys_write+0x1a9/0x260 [ 2653.095551] ? __ia32_sys_read+0xb0/0xb0 [ 2653.095937] do_syscall_64+0x33/0x40 [ 2653.096312] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2653.096788] RIP: 0033:0x7fd311e28b19 [ 2653.097135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2653.098825] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2653.099532] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2653.100201] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2653.100858] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2653.101516] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2653.102173] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:56:16 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1800000000000000) 09:56:16 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900), 0x0, 0x20004000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:56:16 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001e00)=""/4126, 0x101e, 0x0) 09:56:16 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 16) 09:56:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2, 0x0, 0xa}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:56:16 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a00, 0x3, 0x0, 0x0) 09:56:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x3, 0x0, 0xfffc}, 0x0, 0x200, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:56:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2, 0x0, 0xb}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:56:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x7ed6, &(0x7f0000000380), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x71, &(0x7f0000000180), &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x540a, 0x3) close_range(r4, r0, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) [ 2653.440507] FAULT_INJECTION: forcing a failure. [ 2653.440507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2653.441639] CPU: 1 PID: 12799 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2653.442224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2653.442925] Call Trace: [ 2653.443158] dump_stack+0x107/0x167 [ 2653.443471] should_fail.cold+0x5/0xa [ 2653.443810] _copy_to_iter+0x264/0x12d0 [ 2653.444165] ? chacha_block_generic+0x13e/0x200 [ 2653.444563] ? chacha_permute+0x6f0/0x6f0 [ 2653.444925] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2653.445354] get_random_bytes_user+0x173/0x3b0 [ 2653.445753] ? get_random_u32+0x670/0x670 [ 2653.446114] ? wait_for_random_bytes+0x91/0xe0 [ 2653.446514] ? security_file_permission+0xb1/0xe0 [ 2653.446934] ? get_random_bytes_user+0x3b0/0x3b0 [ 2653.447334] random_read_iter+0x65/0x140 [ 2653.447686] io_read+0x2dc/0x11e0 [ 2653.448004] ? kiocb_done+0xc90/0xc90 [ 2653.448352] ? mark_lock+0xf5/0x2df0 [ 2653.448680] ? lock_chain_count+0x20/0x20 [ 2653.449055] ? stack_trace_consume_entry+0x160/0x160 [ 2653.449498] ? lock_acquire+0x197/0x470 [ 2653.449843] ? __lock_acquire+0xbb1/0x5b00 [ 2653.450217] io_issue_sqe+0x2e8a/0x77b0 [ 2653.450565] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2653.451008] ? SOFTIRQ_verbose+0x10/0x10 [ 2653.451367] ? lock_chain_count+0x20/0x20 [ 2653.451724] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2653.452189] ? io_connect+0x610/0x610 [ 2653.452522] ? lock_acquire+0x197/0x470 [ 2653.452863] ? find_held_lock+0x2c/0x110 [ 2653.453228] ? __fget_files+0x2cf/0x520 [ 2653.453568] ? lock_downgrade+0x6d0/0x6d0 [ 2653.453925] __io_queue_sqe+0x90/0x9d0 [ 2653.454273] ? io_issue_sqe+0x77b0/0x77b0 [ 2653.454624] ? __fget_files+0x2f8/0x520 [ 2653.454969] ? io_prep_rw+0x7f5/0x1050 [ 2653.455319] io_submit_sqes+0x44aa/0x8610 [ 2653.455703] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2653.456140] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2653.456572] ? lock_downgrade+0x6d0/0x6d0 [ 2653.456927] ? find_held_lock+0x2c/0x110 [ 2653.457280] ? io_submit_sqes+0x8610/0x8610 [ 2653.457668] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2653.458084] ? wait_for_completion_io+0x270/0x270 [ 2653.458511] ? rcu_read_lock_any_held+0x75/0xa0 [ 2653.458906] ? vfs_write+0x354/0xb10 [ 2653.459227] ? fput_many+0x2f/0x1a0 [ 2653.459550] ? ksys_write+0x1a9/0x260 [ 2653.459876] ? __ia32_sys_read+0xb0/0xb0 [ 2653.460248] do_syscall_64+0x33/0x40 [ 2653.460585] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2653.461024] RIP: 0033:0x7fd311e28b19 [ 2653.461343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2653.462903] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2653.463551] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2653.464174] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2653.464792] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2653.465400] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2653.466014] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:56:16 executing program 7: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000001080)=0xe, 0x0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb875, 0x0, @perf_bp={&(0x7f0000001100), 0x8}}, 0x0, 0x10000000, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:56:33 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 17) 09:56:33 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1e00000000000000) 09:56:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="7c8efcc40aac5f77f972fe9297f08da87e77c6bfb6c99beeecaa40d34a5c74ba95018894426a20a8d3946f9d142f4b4f3d9475cec95c0bdec0f6d63e40cfd1b4e506172ee86bd7d6e049025c476a30bbd1716f1e8995ee7a6cebc67e5f7d23a68c6f8ee4904c3835cad303174971aaa72446f982ffba7d0163cfe7238e5ecfea05afca5f2b555e368eedf2492178a1921d0c1fc935dca7e1818977d191330aa4d689bf1dd7dca81fb740adfc997cfe086017f386ce7f7a40f3d3d242682e4b4ac6c36c7c9d736144318036d02c8f62b13a667c778940363ce43eaee0c24356133704984fcb4c216348978a69f67fcd8591c0aa", 0xf3, 0x8010, 0x1, {0x0, r0}}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r0}}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000001180)=@llc={0x1a, 0x307, 0x40, 0x1, 0x40, 0x63, @local}, 0x0, 0x0, 0x1, {0x0, r0}}, 0x9) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a644", 0x2}], 0x1}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @dev}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001080)={@dev={0xfe, 0x80, '\x00', 0x31}, 0x6, r2}) perf_event_open(&(0x7f0000001100)={0x4, 0x80, 0x3f, 0x5, 0x0, 0xcd, 0x0, 0x1, 0x400, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x9, 0xc6b1}, 0x0, 0x80000001, 0xffff, 0x3, 0x6, 0x400, 0x4, 0x0, 0xfffffeb6, 0x0, 0x800}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:56:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2=0xe0000003}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00e8ff00"], 0x90}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) r2 = syz_io_uring_setup(0x25, &(0x7f0000000080), &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ffffffff000080000000000000000000"]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0b0c00000000000000003f0000000800030007855fc9648f3c888e9643b90e0f332c3e2757819ecfabf72bac86ea40007bd7d6cd539c89024abb90f59a4be7c028704eb059d8cb5f9268056f72cec3a27da864", @ANYRES32=r8, @ANYBLOB="14005e8008000500000000000800060000000000"], 0x30}}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000480)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r5}, 0x401) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x240, 0x186) 09:56:33 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900), 0x0, 0x20004000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:56:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2, 0x0, 0xf}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:56:33 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) perf_event_open(&(0x7f0000001100)={0x0, 0x80, 0x1, 0xa7, 0x4, 0x3, 0x0, 0x4, 0x20, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp, 0x805, 0xda11, 0x1, 0x6, 0xffffffffffffffe0, 0x4, 0x9, 0x0, 0xfffffffd, 0x0, 0x3}, 0xffffffffffffffff, 0xb, r1, 0x2) 09:56:33 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3000, 0x3, 0x0, 0x0) 09:56:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmstat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:56:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2, 0x0, 0x10}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2670.081981] FAULT_INJECTION: forcing a failure. [ 2670.081981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2670.085389] CPU: 0 PID: 12827 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2670.087257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2670.098804] Call Trace: [ 2670.099911] dump_stack+0x107/0x167 [ 2670.101503] should_fail.cold+0x5/0xa [ 2670.102549] _copy_to_iter+0x264/0x12d0 [ 2670.103634] ? chacha_block_generic+0x13e/0x200 [ 2670.104926] ? chacha_permute+0x6f0/0x6f0 [ 2670.106052] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2670.107449] get_random_bytes_user+0x173/0x3b0 [ 2670.108736] ? get_random_u32+0x670/0x670 [ 2670.109858] ? wait_for_random_bytes+0x91/0xe0 [ 2670.111099] ? security_file_permission+0xb1/0xe0 [ 2670.112478] ? get_random_bytes_user+0x3b0/0x3b0 [ 2670.113780] random_read_iter+0x65/0x140 [ 2670.114894] io_read+0x2dc/0x11e0 [ 2670.115864] ? kiocb_done+0xc90/0xc90 [ 2670.116904] ? mark_lock+0xf5/0x2df0 [ 2670.117971] ? lock_chain_count+0x20/0x20 [ 2670.119108] ? stack_trace_consume_entry+0x160/0x160 [ 2670.120556] ? lock_acquire+0x197/0x470 [ 2670.121682] ? __lock_acquire+0xbb1/0x5b00 [ 2670.122827] io_issue_sqe+0x2e8a/0x77b0 [ 2670.123922] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2670.125384] ? SOFTIRQ_verbose+0x10/0x10 [ 2670.126512] ? lock_chain_count+0x20/0x20 [ 2670.127649] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2670.129084] ? io_connect+0x610/0x610 [ 2670.130199] ? lock_acquire+0x197/0x470 [ 2670.131289] ? find_held_lock+0x2c/0x110 [ 2670.132425] ? __fget_files+0x2cf/0x520 [ 2670.133502] ? lock_downgrade+0x6d0/0x6d0 [ 2670.134663] __io_queue_sqe+0x90/0x9d0 [ 2670.135736] ? io_issue_sqe+0x77b0/0x77b0 [ 2670.136883] ? __fget_files+0x2f8/0x520 [ 2670.137972] ? io_prep_rw+0x7f5/0x1050 [ 2670.139041] io_submit_sqes+0x44aa/0x8610 [ 2670.140288] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2670.141655] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2670.142944] ? lock_downgrade+0x6d0/0x6d0 [ 2670.144100] ? find_held_lock+0x2c/0x110 [ 2670.145276] ? io_submit_sqes+0x8610/0x8610 [ 2670.146456] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2670.147812] ? wait_for_completion_io+0x270/0x270 [ 2670.149081] ? rcu_read_lock_any_held+0x75/0xa0 [ 2670.150323] ? vfs_write+0x354/0xb10 [ 2670.151329] ? fput_many+0x2f/0x1a0 [ 2670.152285] ? ksys_write+0x1a9/0x260 [ 2670.153284] ? __ia32_sys_read+0xb0/0xb0 [ 2670.154339] do_syscall_64+0x33/0x40 [ 2670.155345] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2670.156681] RIP: 0033:0x7fd311e28b19 [ 2670.157685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2670.166338] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2670.168325] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2670.170158] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2670.171998] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2670.173862] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2670.175721] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 [ 2670.258120] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:56:50 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2000000000000000) 09:56:50 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:56:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2, 0x0, 0x11}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:56:50 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001080)={0x0, 0x0}) perf_event_open(&(0x7f0000001100)={0x4, 0x80, 0x3f, 0xff, 0x40, 0x5, 0x0, 0x4ad5e5f1, 0x1000, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f0000000000), 0x14}, 0x40040, 0x7, 0x9, 0x5, 0x1, 0x400, 0x2a4, 0x0, 0xff, 0x0, 0x1}, r2, 0x9, r1, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:56:50 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000200)="3b2df6aceff114fa5e9c08985350ca0a8c6683361a46d025418b02845c5fcdcb601732597b837f8765553b", 0x2b}, {&(0x7f0000000240)="19128f6bcdeea8aaf76dfea6710468e6b3d881ecdd177d5b", 0x18}, {&(0x7f00000002c0)="51bcd4a250a0b8d03cbd90fffbad097a792f86951fd634c017952e5d4a66fd1f69d0d0eb45e608d7c906d39df470c4da997f3a195912a9c0da5b71be4d5ba6be18e7aa1c13c0147502f866348cd2cbbcd9caaae1ffd46c681606dd3b34b067ad3256eec194274b8a9323d8ff65dffa83d9f510a0131279e62a319a14ca8a2f01", 0x80}, {&(0x7f0000000340)="94be31d8d9e411aec4cc41be196938a2aa0aec509a6694f5fa873c2cf17cfc60c3994566c0b6d0", 0x27}, {&(0x7f0000000380)="00f764770d1b4ebdb9fb315eaeb6921889d9af44a9d794fa3627615d00a3fafe539c61fd965bf768d51d0216ee47e730f32177999313e2c64c69213eb873529acdbd5ee307324f86361dac720944a8a88e15557f28094617032a315b2009f7370904571de7413f3203621d6953b9f9c6", 0x70}, {&(0x7f0000000400)="ef57ced04a7fa75071b60ddc6f4728c525eef526b056074cb907291297b616dd776cfe2bb6ea66f032e054ffb8196a78a33b89df91f8264d2d4bcd12e27f6fae5d87f6892229e264810eca95bdb28ea726b94ee4214ee72d0c2c19c8753dbef54ea376a04cc3a7fa3ad87d32fe1060f89218d4f64b367a50d5c9af056a3043e37ad0b88d6ea1c7604eb027db4bf15b6c41f3b41f5d78018f0f54d2c4e009cdfff42eebf1af4ffc337eaee567dcd9121489de25e61ecff8e3cb3c7ddb408f92d206e11545f57a6ced3a8ffca4f8e991be9023f8d02d23528f03d6460f8b130ba88c431d20f51dadb23acee78ca9561a2c2898295dac423e5828080ffb0c3167a05fb63a910a3d90c9a1a06e00caeb889fb773b42d9d15e0be82cb32905cf6ad7d0150da0e40c2e5721aa8b0d40905b4bc4f7bd4e4de8e6c53cd4a5eb09fdd9abb3478ddd98049c8630abd4bc8bfecf9e9dde41c155f57e9faf9b06b14fbbad1f877f6a493ca2925b134e0c90d393918587489bdd0b2f6838255ac96ca8ea5cf79e03d35e8b65fac7d493cfd3bd836ed1dad24b1b861da09de672beb5c8cb39e8dc230b54847a80294b3e75438a3db8da7f504cefe032836276519c2b0f20bdb6ebbb073e317f7a9ddf57a004a1dfea9fb0ba98c20324615d382308984e025db0ebbf0e6921693e4095f20f9b60f827782b6a891dbdaf04e0b61f061001583055ed5002d2494d4a49c59cc030e4ea9936536bbada2662840a6b7e9879ef3eb622232ca567b7a07371f77f51dcd5e19559085339f61445e6f577c5f5059621e5a34e559c2ece709c0c773d74295b9a435b8a275b810dde26732b6c4b71110d3a1e940acb4669507a75bb0078ddb5c2380f7e76d1d54ead276dfb95df261c44f168fc572b473ba18e6b563aaab4fe4f81d73b4691cc6e0ddacd9c9164ee0ba47e44aa4a4aed4e1433e8bec31c0a90e1a5ac5461115d7972fd60fc0ccb0c97662d0db4a6ca41ac2ab2370ffe24cc0c153046d8790a7be1a92477fa7a47f6a7b61e223cbc436fac2faa66383a90cd5763c911d016f10440a1722f45d32e4dabfdd816cb0a29a412bd624ccb947583ed928978f3dfbe74cf48db76fd8d6a7449ee07b99464c01a31dd3157a35b48d808885aaf2452b9b839fcd963af6bd05a8e069c2e2d3a254957ef210aa2664ebf9af7d4b83cd0eb66f2e2661e8d082d24ec72144956edd07c34e6dab08d224c481fc9973585df5da527c76c62926e397ead209a08247c27b5e17cf4491876932fc66780c650b99579301266cb300c15a4b2d7eb351eb92429c0fa840b79714df0eccb430c22ec0b90e2bca3d383c5846bb64e013d2bceba4e001bce00bef8ad9e9028ebb4465073c5710452d791c96adda6691cce4abbc785e1ec60f91bca4df57a0687e8f487c7c98d5ccd80e8f6e06988815ca544db7b857ed0dacd5dcb16a87b54c8477717ea19d6a61fd89e67cf74b49b4965340b0defe449d6badead820c44347dc8743d26c33e932a697abbf386ea5649365e32cbdb11683d6f65aef73152a57ec788b657e2e86cdfd729a8864017cb5dc2084fb324b43d2c2bab5d39121f85a867a501b806eeb8e1462f259c3b76d5fbba623b471545ab3963d1f43b0f504279a26b5e723c0bc8726c1f0d7c2951bc0adf2bfce853e9cc2eedf8b425714ef623656c7a3a2207f77daf77c4e25f0e26e9d716ee3264f15d225ee3fc933a2dfe5d7fa3fda408fb2789c9969e2eb9d39191e80b71a7bf770f6fb9023c8e591d28304804dc783593ccba0d8a70b85999f85b22233f6505ddb1457c43f501814b3e2da1165638e4f86c41d6ca18c7be1ea8528cee3169963488dd2fd6c323db99e4e221de3e86ff9918c1d125169439c25256ba74b7acd2e2d90962941b795aeaa378194d5f470c8c9397834283ec933f2acc39c1a25a6a904aa9ab7b9f3c63d291444191c6b4827d9fb429a915c182f0173f4ccc651be9d4200084a1780d94c3c185201d1be371022f0ed8cfa25eb915fc60a6dc90a7ca2b3cd314d25dcd1711266447a01763db464fdabbf625d911e3534f7a433cf66f08d2a80ac1c40d0228955c6fb674835a2c6dbfc4cd1d7b305ac80671fbcbb38575ef70923029bde5116467e2a1a0ead7d1edcaafb517d14120f86d5ef13906493017d8238ed8719524dd047e1e3ed047b28194d941c860c7cf4c6b496fc0a43900c67cf0cf67b767d6fa6ca8ed6206daaa87606ee93190ca34a6b32cdda5c468dc0a11dd9b630c1e404a4b5b324c712a3fa069e2698474f1dc3758bcf4c8e4b5dd5750f54e693c67f807723341bbbc3100b02348034b13f10f2c06784cafb6a8cc444a82c73b2205b77ddfb379f3385a8d0e898b3094fee7eb0cf7e362d8f704e93f9e7487c6e3a16e94b3f95d247380370b13fccd589dd4e26ee87c87534c1818627b86092f37e8979bbae48bfb43e527ea28d7206dff83e8144fbeaafd89d8f555c191b8f82cdb82d46a61c07e07cf5df85b8fafbc530f912c3383ef8a04d4a3f0dbb353da892047546dd9d93b5b1e40adc74ff871277fbc0eb42b6c4093d1a4e4d078c5e5029eb61ccc1f4713c9af508a80038efe219af968e2682a85118dda0a3062ab779abdf274eec80955db58258607ac5e43cc96169b7c6e9aa7525eeb752cbde76b05c03009d86f133dbded222f2e2b0e16174b104a845074ab51e0b9eddffa1b3726ade5e15de4a6d3af4fb18e256f995b74e4680e28547b16d62b3386712da6b9efd99b63264532a9e573a870c2d0f8646a12dc2ade859bb79f13dae0a68f8c09cc707626b08a333bd5b9b7cc8c24abcab2380fd6d88759a7e51805387eca5f2df2b3556d445cda8e6e8bf8043e814407b132c7e38b46f2783822fc211d3ddd6cd37435f563e39b43654b248eacc1d93cec7c7386dea106cfaa53e0f8a88913f5734015187e6a9fefaac03f64a99d9641156d56bc8eb7eafa994f8ec11cc03d3cd342ff615b8419156ce36ba4b9e58a7cb8cbb66fc3eff11faf0b600db98674cfd8e1732b198aad6aff14d0704e7e764822d50c9b53482fc766bea3af1ffd92c58dee457cf371c28b85fc681a5cb93bbc016b54991e3b8a6b3c7b49c35bb0d29579b52ea3596aa0fc3105db9d68dab22bbbcc10e4202b1e276fc2daf976114a34dc521a4e5e203157e89fc40e38b9da9ffacbac7c9f0d39e9d4a20df24f535fcdd069a5ef8a528a81f262269eb3bf6f4e05edc04d40b735d19357cb8678b65827b91fc78bdce86b75f87f2e002dea867b41b5e32e61fb46d75b7dbd9004a5f1112574082e6b5aac5ab4c24e19dfc8f713895b6454d7195829c8a02600f66295c32ca831c11e5f25e2b9e737ea40cc7c904c646f32e53b1e1dea00e447680dc013acf01014399d1b4c2defb9274da1f79c4f94e0374675db414c93f9b0f9145388d6e8e1d8aa9a5be966b74933a29eebb450875727e51e06e4096ff6a88cf820d669f3d04351179165b361f1517faa049f3b80509b11e411f34b2c7af84b4045b7ebebd5f9433358cc0491e209147437517fecacaeaed2cb9348a27da40843f1014dd0bcfa5145d0d92996202361e8bec4a24877ce43f56950ad25f897bc6a695f27a140f69283511b453bd89e67712ab23a953a9601789ffa89c35fd49fa9e442ebb7dc93a8a5272c81033a49b4a060a349355ae0b5b4f28162b9fabcd42ee6e9c6dec8b8b1a1a7c6b5b0b464823a6a46f5e48bbd0810c76e05b61855182e3940047269d326807e73690e8f8109413aac801076eeb5406cb5a01ee851b061a77aec54bd5ea1e66576017bf8935e9f6578e62d9560808594f538f57865f3efcbcef74fe8b2abfe2363d77504a08e0774e9921053a42352273071236fbad7e479ed80bebb6a25bf5f01081bacc976c198788cf8772941730abf8ab830f206a739b54fc5699010715e518fa0ccca5d33fff26ca279cb35dbb11d5473597be4448e2889d0ebc138e4e1aa5678c351726e86152b38856111a0aac0de20354eafa1a5f70444d398c642c0889a5dc1888e6a49df1e88247b90e28f0bce8f05899d147e410cef14d5333046f4f38958be7c436cfcd7972c196fe7733b2e81473d1aea622366cd7068956386bfed33b6363fae997b05e790dbce6d57d9e116ae9426fa526020984ee249519b2177fe28b81aa77520d650b984780a102e26377cfef5e452821117feb3cfb6785edc70dfb922707018235682ddedba0c1d74bbbc6cbe4e2b11d9a2248d413eae45202a5abd5cdf80c97260e5f1dff0f09b94f1dc95edca5a6f517ec121c39d6c7166c3fbd380f26b8a3ca6ed4ebe175567b1865959c28e0a69e64ce5cae2c741648f55c4c925e8e3c9b8da7c0db54ae83cc6d1711ea1b82671f0f121d8a47a7cbf52b03959c2d70325e3a0f3827b81d6093b17f1c9cc7f7b97bfdb8285c171cbb891eeb277724be9108974bd68daac80f41aec110518d592849e188dbe9cc102c876f71faeae459c9cb8916371d1356e10833d0845e013f17532e27b4970e589e8ed2b505344979dab957b88f4a73be2fddb62bb0cd701914bff9f096b361fc0c5deda9c0f39603b58769cd4f6c487248e04f4c5f7d76bb0748a9d39a95e6c3d751c043cc5adf8faab225080e9cdbde44e64187c1b2ef44a6d2e3fcf97d8357702179d952b354333309cf6ef51b758929566ef29efc35cb152da2559994ce18b2cecc636d75137779c8a49e1092d0a07b297ff009cbdafc66478643491bd144be05863aae7e03a30b36a781a635baf39f76783b23000fc8c42eb5d4103f3c9e355b9f7e25f0dcc71d83a2996b861728f102bfb6a96bbf07462f17545e64dbc46e77cee4d8373aefabdbd2389af6f3781d0f8ac35bf50544c90e19c3a29c4a1cdf87e54b596b029f3000d675e1c3c0ff14877e2a4fd77b2d8aa9aba50bc24fe20d68724212740340e68d31ba87952b95aff472607b6e99b839215e7057a6a5b4701b1cb2af59670e6c66c2b68f806b6361e8bca9863b000592b436142ca3b68df6c4c8cc096c2941520cdd7b44791f8639d39949c9b1f87d544588baaaf082fb77f1646a85c604374e4b96cf3374358ff0fe89922e5257c49514ebed72247cb5f37dcf2bc6d7c3e6948d56e661492bdbfe0e2250998b23a9982322ba9ee00b810a0cb536743226c86c8e9d8abff2b593194ec0341a4ed183658251ff4798fa2e71e75e0b4807f9fba3d4d6d72fb3125f91dc8edfcff4baa10fbbeef0c2e29ebf6e49121f60886538a3031d51ea5bb9abaf910602e82162bb1b2db8fed1f9df7b883272a5a273950d3622f48132b68b5e24bc2a8393a0ce2c89c8160da454a5581c1e656c4b5fc86384c338968e6afc86bda4eca010b1987e619a8e774e9ed90af1349ec2ddcfb5dabeea6cc55fa062e56aadef789979853d014bfc742ea5762be3277d5a3c60b4ae04be13d726f363cadbc63dc3e8fb820c7ff71e31641a380ce1b04156ed0de20276ba1df98a4d02c19b340490ddb51c6ab9778a4f64e5a09bfc78e87404edbe56b3689117d6136935d878fe5432a9fd3bf60fe4361e8d0b6861e5b12eaa2dc54b4b0a20619118387557f0d768d622046043291820f201f8d16418163d5dd297c6d8b73d94257dd53d35e684361f6f512a6758d72e9127f9ef074f0f2cf3c5e8803fbdc72484e822d17e47e91b11617bdc3c4d7653e60e7afad5f2a103bbce8f7a085c00b10398ccc367a7e2c16251a391719d87db32d986dc0da2ef460c1351c97e380f703a0e9ded", 0x1000}], 0x6}}], 0x1, 0x20004000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:56:50 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 18) 09:56:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x87) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x2, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) lseek(r3, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x0, 0x0) 09:56:50 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3600, 0x3, 0x0, 0x0) 09:56:50 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0x8, 0x0, 0x0, 0xb9, 0x0, 0x2, 0x402, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0xffffffff, 0x6}, 0x3a704, 0x2, 0x8, 0x4, 0xffffffff00000001, 0x0, 0xfab4, 0x0, 0x2, 0x0, 0x2}, 0x0, 0x3, r0, 0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f00000016c0)={&(0x7f0000000000), 0xc, &(0x7f0000001080)={&(0x7f0000001180)={0x530, 0x15, 0x200, 0x70bd2b, 0x25dfdbfd, {0x18, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xee, 0x1, "b93b4d2495b9937dec4a992b8a76500301361244b14fdfb30ee9200eb306017c0ecc935f0743b2af169b3299ec14a2d8e8255a9f7424c6a6b8758899bf848e92f35740fa3a4698cb5716c633a1d9587d8a920648c5ec7d51f248fc280142a4dd8110b9f75eb3c73eda607b3f89ff993d1f1d6c5bf76132f5a0cc8b38705b678472bcaa64d637f620ce2c7523c819f0ac2869c3857fd2d4137da204f9fa443bd19409cd4f84b205b583d062f9f70c75f17e72d3c1a4c4c3092782fc37744720ba505e7c98562053fef27b956c652f448e6bf3c1b3ca3b468a6fe51c130866bfa362916097957ba4638f6b"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "74b5083e8f701dec5904afa87f094e48673dd8710a2c90c8c0b3f76cbf00692562dac65fd30eea1dad5f75f524362e9942d216b16a55829e542f87ab8cccbe3a322694b19e844ba9f592388af06a2c8374df590e3aa871bcbd228658e884b701221feb0072adb83918c7d6ca178f35991e6771be0571000fe7630bf17773ba831a9632fe1d3faf7867b22b83fe167a6c73373f18810763"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "46fd60b2ca421fc69a846e2437ad011f5f5c41e4f20c1735526c9e9add56b5123ab19231e30d3bdb96dd5339d6"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "c977a36de3f8572ac365109cc5c220d2a22dcbd275a1e02698e113ef0674da981ccff2777b3141cc2420274bf7af7c86d3aef2707f2309f7f3d7c2bc38b0f43f7008beef0206224d8da3ab882d"}, @INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "f2c8a5dc6af010a38f82f2e85a2142156e9aad63d2611e6ab634810c3a7d8e88ebe222979a66348cdfbd74581346f46c1e5b2bb1d7a5ccd15f5baeb6e8bc5a73a7d70a7746d9f51f60f19b6f713d704380ba052ba584b1f36140679336cf31ab220de5240ff90871bef779f0c950adf53a42d0efc514994b1797a0ef6292ced7b43c48ae1cd62b1aa61bbcd8f1b8f2c47c655e66db85eb6a4fdb77dce6d4eb3bd103b2a35ee6970557f7b61733a3ebdb6ceea3d5b8b4b4155f191623b96a35d29acf16edf7f74e9d81f82c46938e4c91a1096cc2ae530e04dc08f7210301df54714a5045bf6f291a228f32801190a0fe762284"}, @INET_DIAG_REQ_BYTECODE={0xbe, 0x1, "c9ada173b243c962b4c51049cf8ada1fd04d682be02b304a121ba4cfe6857c08bec680534de2f6e0aae037d2b77d31731df3256ecbdd251d67878627064b0142e7040ccdc84f32fc8e79180bdb55745168aaf71e2695cb7ed367d238f9d062df605ac1d14c03d0168fa523d905f9a717986f00d508e6e216788f83783e81b3fd8ab6b422efe45e93be8e79e4574d243b82c4246442ebdc115dae046b3e5d84022bd3befb10a3f336291e987ea35cb681de1010fb4d45a9414203"}, @INET_DIAG_REQ_BYTECODE={0x81, 0x1, "cab13a31c9d6e9f9ab9d1c3c6adf371375938397f1aa4d53a233779078dee5cbc7f68cf85dd06c583b8edae6e50010233b653906f60ef789c3b6efdf9dc5df2c5c40c5b2f59ddbda0d00d812629e6e4f9f62fb6aea55b1ad5b0befd3afe027a0e2f1200b58abfea5ebf3413db0fa75827d995f9c2240597111ebac5cf3"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "f81dbd4da540707f79ffc9083af2dc447cd5873e3403b0c6a5af86dea2ff432ca6b619879323b0d2c3489d5fe4d149b4e21461726ac4f27784f770b0db99a4a97d6391d2c438102aeaacca607172e2c9fb175b03babf70651fb029ac7fea38ace0beb592b31bd5f4de615ebd759e9a45fb6c5424ad3c55c41c30"}, @INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "e02cf967b7266712bb9333af80f6bb7b8bdebf102cc99b6330d6b5f7cfb465f51565c85f8a9c514f4dbc93850187a0e845eb224dd1b6a16a60d25050eb9b184c0df231dffa3c"}]}, 0x530}, 0x1, 0x0, 0x0, 0x8810}, 0x48000) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 2687.147004] FAULT_INJECTION: forcing a failure. [ 2687.147004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2687.149080] CPU: 0 PID: 12980 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2687.149796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2687.150557] Call Trace: [ 2687.150811] dump_stack+0x107/0x167 [ 2687.151153] should_fail.cold+0x5/0xa [ 2687.151516] _copy_from_user+0x2e/0x1b0 [ 2687.151888] iovec_from_user+0x141/0x400 [ 2687.152276] __import_iovec+0x67/0x590 [ 2687.152686] io_import_iovec+0x581/0x1120 [ 2687.153078] ? io_complete_rw+0x230/0x230 [ 2687.153468] ? kiocb_done+0x16b/0xc90 [ 2687.153826] io_read+0xe14/0x11e0 [ 2687.154162] ? kiocb_done+0xc90/0xc90 [ 2687.156630] ? mark_lock+0xf5/0x2df0 [ 2687.156984] ? lock_chain_count+0x20/0x20 [ 2687.157383] ? stack_trace_consume_entry+0x160/0x160 [ 2687.157939] ? lock_acquire+0x197/0x470 [ 2687.158317] ? __lock_acquire+0xbb1/0x5b00 [ 2687.158845] io_issue_sqe+0x2e8a/0x77b0 [ 2687.159225] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2687.159780] ? SOFTIRQ_verbose+0x10/0x10 [ 2687.160169] ? lock_chain_count+0x20/0x20 [ 2687.160773] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2687.161267] ? io_connect+0x610/0x610 [ 2687.161635] ? lock_acquire+0x197/0x470 [ 2687.162012] ? find_held_lock+0x2c/0x110 [ 2687.162405] ? __fget_files+0x2cf/0x520 [ 2687.162772] ? lock_downgrade+0x6d0/0x6d0 [ 2687.163160] __io_queue_sqe+0x90/0x9d0 [ 2687.163529] ? io_issue_sqe+0x77b0/0x77b0 [ 2687.163913] ? __fget_files+0x2f8/0x520 [ 2687.164286] ? io_prep_rw+0x7f5/0x1050 [ 2687.164691] io_submit_sqes+0x44aa/0x8610 [ 2687.165103] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2687.165565] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2687.166016] ? lock_downgrade+0x6d0/0x6d0 [ 2687.166402] ? find_held_lock+0x2c/0x110 [ 2687.166785] ? io_submit_sqes+0x8610/0x8610 [ 2687.167194] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2687.167658] ? wait_for_completion_io+0x270/0x270 [ 2687.168124] ? rcu_read_lock_any_held+0x75/0xa0 [ 2687.168615] ? vfs_write+0x354/0xb10 [ 2687.168965] ? fput_many+0x2f/0x1a0 [ 2687.169307] ? ksys_write+0x1a9/0x260 [ 2687.169662] ? __ia32_sys_read+0xb0/0xb0 [ 2687.170049] do_syscall_64+0x33/0x40 [ 2687.170397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2687.170875] RIP: 0033:0x7fd311e28b19 [ 2687.171223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2687.172947] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2687.173663] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2687.174341] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2687.175011] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2687.175683] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 09:56:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x1, r5}) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r3, &(0x7f0000001080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x1}, 0x7fffffff) [ 2687.176354] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:56:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local={0xac, 0x17}, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:56:50 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2400000000000000) 09:56:50 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c00, 0x3, 0x0, 0x0) 09:56:50 executing program 2: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r0, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) lseek(r1, 0xffffffff00000001, 0x1) unshare(0x48020200) unshare(0x58020000) unshare(0x2000000) listen(0xffffffffffffffff, 0x800000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7f) unshare(0x22000400) unshare(0x2010400) 09:56:50 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 19) [ 2687.424526] FAULT_INJECTION: forcing a failure. [ 2687.424526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2687.425696] CPU: 1 PID: 13087 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2687.426330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2687.427034] Call Trace: [ 2687.427314] dump_stack+0x107/0x167 [ 2687.427625] should_fail.cold+0x5/0xa [ 2687.427949] _copy_to_iter+0x264/0x12d0 [ 2687.428349] ? chacha_block_generic+0x13e/0x200 [ 2687.428771] ? chacha_permute+0x6f0/0x6f0 [ 2687.429218] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2687.429658] get_random_bytes_user+0x173/0x3b0 [ 2687.430062] ? get_random_u32+0x670/0x670 [ 2687.430489] ? wait_for_random_bytes+0x91/0xe0 [ 2687.430896] ? security_file_permission+0xb1/0xe0 [ 2687.431377] ? get_random_bytes_user+0x3b0/0x3b0 [ 2687.431799] random_read_iter+0x65/0x140 [ 2687.432217] io_read+0x2dc/0x11e0 [ 2687.432546] ? kiocb_done+0xc90/0xc90 [ 2687.432881] ? mark_lock+0xf5/0x2df0 [ 2687.433278] ? lock_chain_count+0x20/0x20 [ 2687.433655] ? stack_trace_consume_entry+0x160/0x160 [ 2687.434107] ? lock_acquire+0x197/0x470 [ 2687.434750] ? __lock_acquire+0xbb1/0x5b00 [ 2687.435289] io_issue_sqe+0x2e8a/0x77b0 [ 2687.435844] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2687.436341] ? SOFTIRQ_verbose+0x10/0x10 [ 2687.436843] ? lock_chain_count+0x20/0x20 [ 2687.437387] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2687.437868] ? io_connect+0x610/0x610 [ 2687.438343] ? lock_acquire+0x197/0x470 [ 2687.438785] ? find_held_lock+0x2c/0x110 [ 2687.439332] ? __fget_files+0x2cf/0x520 [ 2687.439716] ? lock_downgrade+0x6d0/0x6d0 [ 2687.440279] __io_queue_sqe+0x90/0x9d0 [ 2687.440799] ? io_issue_sqe+0x77b0/0x77b0 [ 2687.441197] ? __fget_files+0x2f8/0x520 [ 2687.441606] ? io_prep_rw+0x7f5/0x1050 [ 2687.441988] io_submit_sqes+0x44aa/0x8610 [ 2687.442599] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2687.443036] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2687.443599] ? lock_downgrade+0x6d0/0x6d0 [ 2687.444055] ? find_held_lock+0x2c/0x110 [ 2687.444612] ? io_submit_sqes+0x8610/0x8610 [ 2687.445019] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2687.445609] ? wait_for_completion_io+0x270/0x270 [ 2687.446236] ? rcu_read_lock_any_held+0x75/0xa0 [ 2687.446630] ? vfs_write+0x354/0xb10 [ 2687.447043] ? fput_many+0x2f/0x1a0 [ 2687.447540] ? ksys_write+0x1a9/0x260 [ 2687.447943] ? __ia32_sys_read+0xb0/0xb0 [ 2687.448388] do_syscall_64+0x33/0x40 [ 2687.448860] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2687.449520] RIP: 0033:0x7fd311e28b19 [ 2687.449920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2687.452021] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2687.452778] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2687.453592] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2687.454487] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2687.455093] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2687.455749] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:56:50 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2a00000000000000) 09:56:50 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001100)={0x3, 0x80, 0x8, 0x1, 0x4, 0x32, 0x0, 0x2, 0x40, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0xd}, 0x40, 0x8, 0x10001, 0x8, 0x81, 0x8, 0x7, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0xc, r1, 0x1) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) ftruncate(r0, 0x31) 09:56:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local={0xac, 0x14, 0x17}, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:56:51 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000001100)=""/224, 0xe0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x1, r3}) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x0, r3}) 09:57:06 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:57:06 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x800000, 0x3, 0x0, 0x0) 09:57:06 executing program 2: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r0, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) lseek(r1, 0xffffffff00000001, 0x1) unshare(0x48020200) unshare(0x58020000) unshare(0x2000000) listen(0xffffffffffffffff, 0x800000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7f) unshare(0x22000400) unshare(0x2010400) 09:57:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001b40)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001140)={0x998, 0x37, 0x200, 0x70bd26, 0x25dfdbfc, {0xf}, [@typed={0x8, 0x90, 0x0, 0x0, @u32=0x81}, @generic="52814d407366d79b0a81ca71ea809df2349ed0368dfe7c6d8d63c4afa0e1259826046b4af57e7207bdcbddc40ad6d90c5baa45b35cad6eb765d027f0b494dbca9b91b21356ae8f93ac561a", @generic="58236776089a54fec9e12105198b114520e83ec0a6b6937cecf33bab8dcc7aceaf081513f0ca273c0ea147b650997fb0250c5cee5e778afb7e153fcb0657fef4c58a0ea199c4a1cde8672c22f5627ba303792f22be7c85ebe4ddec9666c1c91c5b95f1756094f37fef7c", @nested={0x3f6, 0x47, 0x0, 0x1, [@generic="486be4f2dd2db61ba2a93967941267255d0537b29dd457888c07f204fdf67c96396a19a8403e5a314f51be5d1185355ed82403acc2299a98c9963240b918105bf06b70cb81189dcbfdf551439b2921588e05c23533d921beb463f866b1da253780f31174c1e55e6cb52d0449e662979dd3be8e555abec70a5a6750ea9965c3c029ac0cb657425a57aed33c", @generic="8f507957a44a6c566dffb260582911abeb4f4025f5c7765ac510da2b630cf16b42038872568e5b2b52c05708d3304178670cdb90eae88da520a70c37070f93ced3df893866dd9abba1e87a079a365513492ab86b4a25c0583fd5a9dcde4633bf0e8ef5d1a979c2f01783ee302e934d8f3aad0e7e0ed5be05479f5c4a03f30d2a6af9401d79cbc8dd04d716f56e69ca236f53572fdb0815ef697397f1962cc94fa310bd301e3a54006d3da399", @typed={0x76, 0x53, 0x0, 0x0, @binary="fcdda5713dbab0dc9dd1128987ae8db3d1278505ea1a8c182d044219a80e82098a104da591c8dba0830f28ac53d3250e91e7656b4b7c8d06688a5e5725a7fb088c610e8d5b77a2c5f4bae4b38d86d3ed3c1dbb5f13bfcb8739b7facfc4e02f4054ed21dfe932fe4b5daf7b22dc3ea26355d9"}, @generic="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", @generic="b02583e7fb15edb36348b346d3a2b606375eca93aa4b875c3f1c1332637e1c187a454face7c7753f55e4a9b57be49886487d3a75fa3ed982344ff7f0887ed70e71698a1b5d09747eab860cd74cf64afaee32c6f6ee37780119c8082ed4ecd2ed21af106d5c94bf331b543c1d6218251b03dd23db131aea19374aad7c5e627042100cc296749f3f4ad89c740d8da9cd8228cf6a7a02f14023d7", @generic="545f3553410bc5112c6e0763fa42707603c2fe626155f9bd9d796e376948e560591c1e8e4c459ae882cffae9d60e475430cc42af96273b11639235a7d066ba29bc4ea2a3c85ce8a4f7823c9b4f9ad7983792d56a552df08e9d82acb2237c8bdfd3d3e17d306bf474b897578fa073", @generic="9e1d821cbf4d2f3acf3afc444aae1f925030bd6ec1bc21b951468fe9a12aa18ddb21e10c3529023a6d9a637b73a008c93baf20bf0077093adb6d19d6", @typed={0x4, 0x30}]}, @generic="0947462de50953eff51dd54d41d21efa02ceb2780c6d2bd6e593628279224e7a022bf6c6285f0a104be2e3a32820cafc43c22ee0dc29a6142bd36b919f0e3ff37ca694061c362f9c74afddd84569236c103f6cfda28bcae677fcb77f709951940f320db15ddeda41d915fd43fd2c403665d71706b801cedda7e63e1e0ef313436cc1520b82355ba70c", @generic="bbcce9317c421e2e2c7ad79e85bd79c427425093a5e500f91a894b8309231793abbfb38ef85502a8c59694939957776d820c40c7c06af61a1d64af46a84ba049306363dc9c2acf490caaf49de2a504c1119b01c61b937dbe114bfd2138bfef6a555c595d2f3e16d11a1000dec0f2d0324ccc4619bb542d48ef08e0c1e54f0e2087cb78243f0f7ea4f778b49e76515cf16173369d161a49f7c8b855f24c24e9462b2f9d3213897474009e5948eacd16329a19a849d45234976af786af89a97ef29e765b363e7695c7cd1224671476c9", @nested={0x16d, 0x15, 0x0, 0x1, [@typed={0xc, 0x8b, 0x0, 0x0, @u64=0x3}, @typed={0xab, 0x45, 0x0, 0x0, @binary="e724c84e766e1cf1bfda931b81bd11eeea2276fc374ce72f7f1d0e29214967d08429f43ea746a6e9b8bb349d461291084656f2d827c4f2408c60780b18d0ac86a14743ae18638d822e86b4d73d0c0a70011e552ec7427c4f1b06035a1fb27f3ff32b31b1a276da7ef59f99aad2949c85e9aaafa0e880cdebe26bf534302d3eac6f82c58ec89736509344996609e4373e71ed961f43b0fce19459cea75dc954fd7e4061193206e5"}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x4, 0x65}, @typed={0x4, 0x7c, 0x0, 0x0, @binary}, @typed={0x14, 0x67, 0x0, 0x0, @str='/proc/diskstats\x00'}, @generic="8a39e6cdf2082e902e0a08fe96b0f25e4adf4a3dd60f967668ba75ce66d687c34d6e63a24288835ee8d20ffd63a6f50758a699acfbc508c58732953189d3cd26b5be241f425d692855863156459fbaa434cd1a00daef83898db9427da7c48d5949128cbf4acba13c7ac81aaace", @typed={0x14, 0x27, 0x0, 0x0, @ipv6=@local}]}, @typed={0xc, 0x2a, 0x0, 0x0, @u64=0x8}, @nested={0x1f5, 0x8a, 0x0, 0x1, [@typed={0xf3, 0x92, 0x0, 0x0, @binary="aebe1551d92dca4f2d598e514666ebfb9c2ac4bd3184faf323478beb55b714aceac74c981dc91ba53bb638ca1dec2c817b1af6b840912818f8046385ece899278636f004ea8aaeb8f43fae5d5dd7d471698005cf10443f74fc299bf386bf786ce1db257dae9c855b27e73f26df2b32f2db4e59c0cc3d1b870a24f3fda427340aed42318f100349219a6ef2bbd31eec4cc17a22d543094d74f96dc21a7d0ead22c56be939c542d42feaf0db369e1dcaca5a6a25b550f0eb817b8a8fdd26c146f428387403185ce9258ee856a8c080a8b109a63458fb862c98b97ff2808bfdbe046acb2d00f436f26c79c7635e4d50f6"}, @generic="fccf80c0f271dc5bbf15323045f79a437970af248998e430bcafe41d3572ec8fe6383a514caebd19", @generic="17a32e1fdde40439e74e783d8dcc9193a18960f66bb166a18fe565d8b29eb91764e70f2be96dd0d5887bcaf14d831feabbcbcf570ecec1ed29e1d6", @generic="d3b605c34fac2dd9983cf23d8b", @generic="a57ea7def7287dc05a7c82a5080a19a1b7e29337368db9a61f4ed07f11fdd6dadd38af25e6a28274ca41e0efeb08abf5794cc9c51242d5a887d218743ee31c989298e6cfe3e9a80620c4a6577a151d6b0fd2f8eb9830be4e879c74dad56e276498568a9ea02e78e7c3c0ac5235c50b62c23134688e0767f9ead28dc0d8981938f9830d2f52609626bfc63aa07d"]}]}, 0x998}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x540a, 0x3) sendfile(r1, r2, &(0x7f0000001080)=0x5, 0x4) 09:57:06 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3000000000000000) 09:57:06 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 20) 09:57:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:57:06 executing program 4: perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) openat(r0, &(0x7f0000000000)='./file0\x00', 0x20200, 0x142) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 2703.511524] FAULT_INJECTION: forcing a failure. [ 2703.511524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2703.512781] CPU: 0 PID: 13216 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2703.513444] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2703.514227] Call Trace: [ 2703.514492] dump_stack+0x107/0x167 [ 2703.514844] should_fail.cold+0x5/0xa [ 2703.515217] _copy_to_iter+0x264/0x12d0 [ 2703.515612] ? chacha_block_generic+0x13e/0x200 [ 2703.516062] ? chacha_permute+0x6f0/0x6f0 [ 2703.516459] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2703.516938] get_random_bytes_user+0x173/0x3b0 [ 2703.517362] ? get_random_u32+0x670/0x670 [ 2703.517756] ? wait_for_random_bytes+0x91/0xe0 [ 2703.518191] ? security_file_permission+0xb1/0xe0 [ 2703.518639] ? get_random_bytes_user+0x3b0/0x3b0 [ 2703.519081] random_read_iter+0x65/0x140 [ 2703.519485] io_read+0x2dc/0x11e0 [ 2703.519822] ? kiocb_done+0xc90/0xc90 [ 2703.520183] ? mark_lock+0xf5/0x2df0 [ 2703.520545] ? lock_chain_count+0x20/0x20 [ 2703.520960] ? stack_trace_consume_entry+0x160/0x160 [ 2703.521464] ? __lock_acquire+0xbb1/0x5b00 [ 2703.521866] io_issue_sqe+0x2e8a/0x77b0 [ 2703.522247] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2703.522744] ? SOFTIRQ_verbose+0x10/0x10 [ 2703.523123] ? lock_chain_count+0x20/0x20 [ 2703.523514] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2703.524004] ? io_connect+0x610/0x610 [ 2703.524366] ? lock_acquire+0x197/0x470 [ 2703.524748] ? find_held_lock+0x2c/0x110 [ 2703.525136] ? __fget_files+0x2cf/0x520 [ 2703.525515] ? lock_downgrade+0x6d0/0x6d0 [ 2703.525907] __io_queue_sqe+0x90/0x9d0 [ 2703.526278] ? io_issue_sqe+0x77b0/0x77b0 [ 2703.526664] ? __fget_files+0x2f8/0x520 [ 2703.527038] ? io_prep_rw+0x7f5/0x1050 [ 2703.527407] io_submit_sqes+0x44aa/0x8610 [ 2703.532665] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2703.533122] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2703.533570] ? lock_downgrade+0x6d0/0x6d0 [ 2703.533949] ? find_held_lock+0x2c/0x110 [ 2703.534331] ? io_submit_sqes+0x8610/0x8610 [ 2703.534741] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2703.535186] ? wait_for_completion_io+0x270/0x270 [ 2703.535632] ? rcu_read_lock_any_held+0x75/0xa0 [ 2703.536062] ? vfs_write+0x354/0xb10 [ 2703.536408] ? fput_many+0x2f/0x1a0 [ 2703.536763] ? ksys_write+0x1a9/0x260 [ 2703.537116] ? __ia32_sys_read+0xb0/0xb0 [ 2703.537500] do_syscall_64+0x33/0x40 [ 2703.537844] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2703.538319] RIP: 0033:0x7fd311e28b19 [ 2703.538665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2703.540349] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2703.541073] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2703.541741] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2703.542395] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2703.543051] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2703.543708] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:57:06 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6000000, 0x3, 0x0, 0x0) 09:57:06 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000001080), 0xffffffff, 0x60000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000001100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:57:07 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$TIOCCBRK(r3, 0x5428) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:57:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:57:07 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3600000000000000) 09:57:07 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 21) 09:57:07 executing program 2: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r0, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) lseek(r1, 0xffffffff00000001, 0x1) unshare(0x48020200) unshare(0x58020000) unshare(0x2000000) listen(0xffffffffffffffff, 0x800000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7f) unshare(0x22000400) unshare(0x2010400) [ 2703.986538] FAULT_INJECTION: forcing a failure. [ 2703.986538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2703.987664] CPU: 1 PID: 13247 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2703.988256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2703.989037] Call Trace: [ 2703.989302] dump_stack+0x107/0x167 [ 2703.989652] should_fail.cold+0x5/0xa [ 2703.990020] _copy_to_iter+0x264/0x12d0 [ 2703.990408] ? chacha_block_generic+0x13e/0x200 [ 2703.990849] ? chacha_permute+0x6f0/0x6f0 [ 2703.991238] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2703.991725] get_random_bytes_user+0x173/0x3b0 [ 2703.992153] ? get_random_u32+0x670/0x670 [ 2703.992569] ? wait_for_random_bytes+0x91/0xe0 [ 2703.992993] ? security_file_permission+0xb1/0xe0 [ 2703.993417] ? get_random_bytes_user+0x3b0/0x3b0 [ 2703.993837] random_read_iter+0x65/0x140 [ 2703.994188] io_read+0x2dc/0x11e0 [ 2703.994496] ? kiocb_done+0xc90/0xc90 [ 2703.994837] ? mark_lock+0xf5/0x2df0 [ 2703.995170] ? lock_chain_count+0x20/0x20 [ 2703.995535] ? stack_trace_consume_entry+0x160/0x160 [ 2703.995985] ? lock_acquire+0x197/0x470 [ 2703.996333] ? __lock_acquire+0xbb1/0x5b00 [ 2703.996741] io_issue_sqe+0x2e8a/0x77b0 [ 2703.997090] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2703.997536] ? SOFTIRQ_verbose+0x10/0x10 [ 2703.997900] ? lock_chain_count+0x20/0x20 [ 2703.998264] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2703.998710] ? io_connect+0x610/0x610 [ 2703.999050] ? lock_acquire+0x197/0x470 [ 2703.999391] ? find_held_lock+0x2c/0x110 [ 2703.999743] ? __fget_files+0x2cf/0x520 [ 2704.000093] ? lock_downgrade+0x6d0/0x6d0 [ 2704.000452] __io_queue_sqe+0x90/0x9d0 [ 2704.000810] ? io_issue_sqe+0x77b0/0x77b0 [ 2704.001173] ? __fget_files+0x2f8/0x520 [ 2704.001567] ? io_prep_rw+0x7f5/0x1050 [ 2704.001987] io_submit_sqes+0x44aa/0x8610 [ 2704.002448] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2704.002976] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2704.003489] ? lock_downgrade+0x6d0/0x6d0 [ 2704.003911] ? find_held_lock+0x2c/0x110 [ 2704.004354] ? io_submit_sqes+0x8610/0x8610 [ 2704.004798] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2704.005303] ? wait_for_completion_io+0x270/0x270 [ 2704.005797] ? rcu_read_lock_any_held+0x75/0xa0 [ 2704.006299] ? vfs_write+0x354/0xb10 [ 2704.006679] ? fput_many+0x2f/0x1a0 [ 2704.007064] ? ksys_write+0x1a9/0x260 [ 2704.007479] ? __ia32_sys_read+0xb0/0xb0 [ 2704.007907] do_syscall_64+0x33/0x40 [ 2704.008314] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2704.008788] RIP: 0033:0x7fd311e28b19 [ 2704.009108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2704.010672] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2704.011323] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2704.011932] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2704.012553] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2704.013230] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2704.013970] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:57:22 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:57:22 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000200)={0x1, 0x200, 0x8}) r2 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) readv(r2, &(0x7f0000001900)=[{&(0x7f0000000280)=""/6, 0x6}, {&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f0000000500)=""/38, 0x26}, {&(0x7f0000000540)=""/104, 0x68}, {&(0x7f00000005c0)=""/95, 0x5f}, {&(0x7f0000000640)=""/177, 0xb1}, {&(0x7f0000000700)=""/54, 0x36}, {&(0x7f0000000740)=""/223, 0xdf}, {&(0x7f0000000840)=""/56, 0x38}], 0x9) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x540a, 0x3) readv(r3, &(0x7f0000000340)=[{&(0x7f0000000000)=""/193, 0xc1}, {&(0x7f0000000140)=""/154, 0x9a}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000440)=""/150, 0x96}, {&(0x7f0000000300)=""/62, 0x3e}], 0x5) r4 = fsopen(&(0x7f0000000880)='qnx6\x00', 0x1) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f00000008c0)) 09:57:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc000000, 0x3, 0x0, 0x0) 09:57:22 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r1}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) perf_event_open(&(0x7f0000001100)={0x3, 0x80, 0x34, 0x5, 0x1, 0x7, 0x0, 0x7, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x465, 0x390d}, 0x8504, 0x0, 0x2, 0x4, 0x7ff, 0xc61a, 0x3f, 0x0, 0xae, 0x0, 0x9a}, r1, 0xf, r2, 0x8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) 09:57:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x3, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:57:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3c00000000000000) 09:57:22 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 22) 09:57:22 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="487fec864b24"]}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x90, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf00}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x393}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x40090) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001340)={&(0x7f0000001100)={0x234, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x56}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5702, @dev={0xfe, 0x80, '\x00', 0x37}, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x49, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8f60}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x20040000}, 0x4c010) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 2719.563683] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2719.583978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2719.604319] FAULT_INJECTION: forcing a failure. [ 2719.604319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2719.606796] CPU: 0 PID: 13267 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2719.608088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2719.609887] Call Trace: [ 2719.610383] dump_stack+0x107/0x167 [ 2719.611060] should_fail.cold+0x5/0xa [ 2719.611787] _copy_from_user+0x2e/0x1b0 [ 2719.612509] iovec_from_user+0x141/0x400 [ 2719.613397] __import_iovec+0x67/0x590 [ 2719.614119] io_import_iovec+0x581/0x1120 [ 2719.614878] ? io_complete_rw+0x230/0x230 [ 2719.615632] ? kiocb_done+0x16b/0xc90 [ 2719.616329] io_read+0xe14/0x11e0 [ 2719.616837] ? kiocb_done+0xc90/0xc90 [ 2719.617192] ? mark_lock+0xf5/0x2df0 [ 2719.617551] ? lock_chain_count+0x20/0x20 [ 2719.617948] ? stack_trace_consume_entry+0x160/0x160 [ 2719.618430] ? lock_acquire+0x197/0x470 [ 2719.618805] ? __lock_acquire+0xbb1/0x5b00 [ 2719.619207] io_issue_sqe+0x2e8a/0x77b0 [ 2719.619587] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2719.620079] ? SOFTIRQ_verbose+0x10/0x10 09:57:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x4, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2719.620456] ? lock_chain_count+0x20/0x20 [ 2719.621060] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2719.621564] ? io_connect+0x610/0x610 [ 2719.621923] ? lock_acquire+0x197/0x470 [ 2719.622291] ? find_held_lock+0x2c/0x110 [ 2719.622675] ? __fget_files+0x2cf/0x520 [ 2719.623045] ? lock_downgrade+0x6d0/0x6d0 [ 2719.623439] __io_queue_sqe+0x90/0x9d0 [ 2719.623806] ? io_issue_sqe+0x77b0/0x77b0 [ 2719.624194] ? __fget_files+0x2f8/0x520 [ 2719.624570] ? io_prep_rw+0x7f5/0x1050 [ 2719.624989] io_submit_sqes+0x44aa/0x8610 [ 2719.625405] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2719.625868] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2719.626318] ? lock_downgrade+0x6d0/0x6d0 [ 2719.626708] ? find_held_lock+0x2c/0x110 [ 2719.627092] ? io_submit_sqes+0x8610/0x8610 [ 2719.627503] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2719.627960] ? wait_for_completion_io+0x270/0x270 [ 2719.628414] ? rcu_read_lock_any_held+0x75/0xa0 [ 2719.629161] ? vfs_write+0x354/0xb10 [ 2719.629845] ? fput_many+0x2f/0x1a0 [ 2719.630524] ? ksys_write+0x1a9/0x260 [ 2719.631235] ? __ia32_sys_read+0xb0/0xb0 [ 2719.631980] do_syscall_64+0x33/0x40 [ 2719.632666] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2719.633823] RIP: 0033:0x7fd311e28b19 [ 2719.634500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2719.634508] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2719.634523] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2719.634531] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2719.634538] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2719.634545] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2719.634553] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 [ 2719.658747] scsi_io_completion_action: 59 callbacks suppressed [ 2719.658789] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2719.660730] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2719.661432] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2719.662163] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 40 00 00 40 00 [ 2719.662883] print_req_error: 374 callbacks suppressed [ 2719.662897] blk_update_request: critical target error, dev sr0, sector 256 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2719.689237] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2719.690139] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2719.690831] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2719.691547] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 00 00 00 40 00 09:57:23 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) perf_event_open$cgroup(&(0x7f0000001100)={0x3, 0x80, 0x9, 0xec, 0x9e, 0x7, 0x0, 0xbc92, 0x40000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xe5, 0x1, @perf_config_ext={0x7, 0x51}, 0x40200, 0x401, 0x0, 0x0, 0x2df26be2, 0x5d14, 0xfc00, 0x0, 0x80, 0x0, 0x8}, r1, 0x7, r0, 0x9) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 2719.692258] blk_update_request: critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2719.716775] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2719.719717] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2719.720410] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2719.721170] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 80 00 00 40 00 [ 2719.721912] blk_update_request: critical target error, dev sr0, sector 512 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 09:57:23 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xeffdffffffffffff) [ 2719.740327] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2719.741714] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2719.742398] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2719.743149] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 c0 00 00 40 00 [ 2719.743856] blk_update_request: critical target error, dev sr0, sector 768 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 09:57:23 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) perf_event_open(&(0x7f0000001100)={0xc, 0x80, 0x1, 0x0, 0x8, 0x6, 0x0, 0x5, 0x100c, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp, 0x8e63, 0x1f, 0xfffffffc, 0x5, 0x1f, 0x4, 0x7fff, 0x0, 0x8, 0x0, 0xe000000000}, 0xffffffffffffffff, 0x0, r0, 0x12) 09:57:23 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12000000, 0x3, 0x0, 0x0) [ 2719.782406] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2719.783440] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2719.784225] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2719.784935] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 00 00 00 40 00 [ 2719.785692] blk_update_request: critical target error, dev sr0, sector 1024 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 09:57:23 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 23) [ 2719.830442] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2719.831434] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] 09:57:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x5, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2719.832094] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2719.832826] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 40 00 00 40 00 [ 2719.833559] blk_update_request: critical target error, dev sr0, sector 1280 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2719.850921] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2719.851820] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2719.852521] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2719.853242] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 80 00 00 40 00 [ 2719.853931] blk_update_request: critical target error, dev sr0, sector 1536 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 09:57:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001200)={0x0, 0xfffffffffffffffc, 0x1000, 0xfd, @buffer={0x0, 0xcc, &(0x7f0000001100)=""/204}, &(0x7f0000001e00)="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", &(0x7f0000000000)=""/22, 0x80000001, 0x20, 0x2, &(0x7f0000001080)}) [ 2719.872410] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2719.873340] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2719.874018] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2719.874734] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 c0 00 00 40 00 [ 2719.875445] blk_update_request: critical target error, dev sr0, sector 1792 op 0x1:(WRITE) flags 0x0 phys_seg 32 prio class 0 [ 2719.903853] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2719.904800] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2719.905488] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2719.906195] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 02 00 00 00 40 00 [ 2719.906884] blk_update_request: critical target error, dev sr0, sector 2048 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2719.939327] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2719.940455] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2719.941235] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2719.941984] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 02 40 00 00 40 00 [ 2719.942807] blk_update_request: critical target error, dev sr0, sector 2304 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2720.244719] FAULT_INJECTION: forcing a failure. [ 2720.244719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2720.245759] CPU: 1 PID: 13396 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2720.246340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2720.247030] Call Trace: [ 2720.247292] dump_stack+0x107/0x167 [ 2720.247630] should_fail.cold+0x5/0xa [ 2720.247986] _copy_to_iter+0x264/0x12d0 [ 2720.248359] ? chacha_block_generic+0x13e/0x200 [ 2720.248797] ? chacha_permute+0x6f0/0x6f0 [ 2720.249196] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2720.249654] get_random_bytes_user+0x173/0x3b0 [ 2720.250069] ? get_random_u32+0x670/0x670 [ 2720.250456] ? wait_for_random_bytes+0x91/0xe0 [ 2720.250885] ? security_file_permission+0xb1/0xe0 [ 2720.251307] ? get_random_bytes_user+0x3b0/0x3b0 [ 2720.251706] random_read_iter+0x65/0x140 [ 2720.252051] io_read+0x2dc/0x11e0 [ 2720.252352] ? __is_insn_slot_addr+0x14c/0x290 [ 2720.252771] ? kiocb_done+0xc90/0xc90 [ 2720.253099] ? mark_lock+0xf5/0x2df0 [ 2720.253415] ? register_lock_class+0xbb/0x17b0 [ 2720.253801] ? arch_stack_walk+0x99/0xf0 [ 2720.254150] ? lock_chain_count+0x20/0x20 [ 2720.254500] ? is_dynamic_key+0x1e0/0x1e0 [ 2720.254865] ? __lock_acquire+0x1657/0x5b00 [ 2720.255239] ? __lock_acquire+0xbb1/0x5b00 [ 2720.255600] io_issue_sqe+0x2e8a/0x77b0 [ 2720.255944] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2720.256385] ? SOFTIRQ_verbose+0x10/0x10 [ 2720.272762] ? lock_chain_count+0x20/0x20 [ 2720.273120] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2720.273564] ? io_connect+0x610/0x610 [ 2720.273893] ? lock_acquire+0x197/0x470 [ 2720.274234] ? find_held_lock+0x2c/0x110 [ 2720.274584] ? __fget_files+0x2cf/0x520 [ 2720.274920] ? lock_downgrade+0x6d0/0x6d0 [ 2720.275275] __io_queue_sqe+0x90/0x9d0 [ 2720.275609] ? io_issue_sqe+0x77b0/0x77b0 [ 2720.275956] ? __fget_files+0x2f8/0x520 [ 2720.276297] ? io_prep_rw+0x7f5/0x1050 [ 2720.276630] io_submit_sqes+0x44aa/0x8610 [ 2720.277035] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2720.277461] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2720.277870] ? lock_downgrade+0x6d0/0x6d0 [ 2720.278219] ? find_held_lock+0x2c/0x110 [ 2720.278565] ? io_submit_sqes+0x8610/0x8610 [ 2720.278939] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2720.279349] ? wait_for_completion_io+0x270/0x270 [ 2720.279760] ? rcu_read_lock_any_held+0x75/0xa0 [ 2720.280155] ? vfs_write+0x354/0xb10 [ 2720.280471] ? fput_many+0x2f/0x1a0 [ 2720.280814] ? ksys_write+0x1a9/0x260 [ 2720.281142] ? __ia32_sys_read+0xb0/0xb0 [ 2720.281495] do_syscall_64+0x33/0x40 [ 2720.281811] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2720.282243] RIP: 0033:0x7fd311e28b19 [ 2720.282559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2720.284094] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2720.284766] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2720.285383] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2720.285997] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2720.286611] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2720.287223] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 [ 2724.669573] scsi_io_completion_action: 259 callbacks suppressed [ 2724.669615] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2724.671210] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2724.671868] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2724.672618] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 43 40 00 00 40 00 [ 2724.673334] print_req_error: 259 callbacks suppressed [ 2724.673348] blk_update_request: critical target error, dev sr0, sector 68864 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2724.698935] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2724.699826] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2724.700523] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2724.701251] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 43 80 00 00 40 00 [ 2724.701937] blk_update_request: critical target error, dev sr0, sector 69120 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2724.725220] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2724.727087] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2724.729255] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2724.729962] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 43 c0 00 00 40 00 [ 2724.731678] blk_update_request: critical target error, dev sr0, sector 69376 op 0x1:(WRITE) flags 0x0 phys_seg 32 prio class 0 [ 2724.781025] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2724.781889] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2724.782593] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2724.783233] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 44 00 00 00 40 00 [ 2724.783965] blk_update_request: critical target error, dev sr0, sector 69632 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2724.809936] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2724.810815] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2724.811446] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2724.816133] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 44 40 00 00 40 00 [ 2724.818077] blk_update_request: critical target error, dev sr0, sector 69888 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2724.855724] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2724.856591] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2724.857231] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2724.865118] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 44 80 00 00 40 00 [ 2724.867130] blk_update_request: critical target error, dev sr0, sector 70144 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2724.904269] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2724.905078] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2724.905721] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2724.906367] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 44 c0 00 00 40 00 [ 2724.906993] blk_update_request: critical target error, dev sr0, sector 70400 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2724.930835] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2724.931669] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2724.932296] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2724.932940] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 45 00 00 00 40 00 [ 2724.933587] blk_update_request: critical target error, dev sr0, sector 70656 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2724.972142] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2724.973400] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2724.974046] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2724.977746] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 45 40 00 00 40 00 [ 2724.978418] blk_update_request: critical target error, dev sr0, sector 70912 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2725.014594] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2725.015531] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 2725.016219] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 2725.016961] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 45 80 00 00 40 00 [ 2725.018730] blk_update_request: critical target error, dev sr0, sector 71168 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 09:57:45 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x800) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)={0x6, 0x200, 0x0, 0x9, 0x1ff}) r2 = dup2(0xffffffffffffffff, r0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x9, 0x1001}}, './file0\x00'}) write$P9_RREAD(r4, &(0x7f0000000080)={0x18, 0x75, 0x2, {0xd, "8ee0ce637949059c635812bde8"}}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {&(0x7f0000000440)="ffdd14b2d545b969616d54fa413948ca8c884e05a5e0b29fda45678de5b6ea9b32040cfbe28f87c93cf898c2624a360384a71f96dc79194b8c9cf744da855ca0b5aaf22f51db7f7c1cf4850f245977421e5f993e2c5e97146ac61139caedb63455f06e0ac29e00f522a151c2774de3ac62b0621adbe8f1cfca71952a01bd410dbd0731eb96367acfaef362026b898c9311a95951a302f26d1b3d3c6fb59470b3ce9e99d98277d23940f8e92a64207f20951d9407895b748c482f265db1ff0ac5", 0xc0, 0x5}], 0x1, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) 09:57:45 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xf5ffffffffffffff) 09:57:45 executing program 4: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:57:45 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 24) 09:57:45 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x7f, 0x531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x7, 0x1, 0x3, 0xfa, 0x0, 0x4, 0x1a00, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff77, 0x4, @perf_config_ext={0x9, 0x101}, 0x20, 0x3, 0x575, 0x7, 0x1f, 0x4, 0x2, 0x0, 0x5, 0x0, 0x82c3}, 0xffffffffffffffff, 0x100000000000008, r1, 0x1) r2 = openat2(r1, &(0x7f0000001240)='./file0\x00', &(0x7f0000001280)={0x731001, 0x3}, 0x18) pipe2(&(0x7f00000012c0), 0x800) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x540a, 0x3) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001340)={'tunl0\x00'}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/tty/drivers\x00', 0x0, 0x0) pwrite64(r4, &(0x7f0000001140)="7cee77c500fc9ba604ba256b0feb9c8b206003c472687d19d86083e6f1df14fc50ffd15b084e8c3c28fbde4bc0bf0c0f00eac98275432e70feec1bebbbdbf536ff0123a933c0fa073c3ee22db5ec42dcd43859fec50fe65a1fd4145b188bb13000f0e135e19eb86fc2de3e55e6544e6b58b364e700576a504336e0c3197481f347daab0d56e7accdf11063a9187102d1efa62c19fadae2e00de2062a1a458d9555ada37e43dd8ca8e5f163804b91495b4dd4806e309c0bb8d7171c67012a8329365628d7c8bb94e28bfb0dfb", 0xcc, 0x10001) pread64(r6, &(0x7f0000000040)=""/4126, 0x101e, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xf0, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x99, 0xa8, @random="1602d9bdbfb8df9a8c463b93f9410245e3c2cf4b60200659457be9614133844aabacd8dd5e2932b6e8580f2e7c84633bdf5a2266532b35e9b9d79e82a749239b3435f689108480e8e9a51e8eaaf837baef46a914c8e7c1cb2ccb6acc8ed6d09532267218557a83dc96f6cf00567d0c4a6009626dca7b9e58a7a9788a654c46bdfc94fe0bd6ab9cbecc7645b01f6500f8caa8dd8968"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x40000000) pipe2(&(0x7f0000001300), 0x800) tee(r5, r3, 0x6, 0x8) 09:57:45 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18000000, 0x3, 0x0, 0x0) 09:57:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x6, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:57:45 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:57:45 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e000000, 0x3, 0x0, 0x0) [ 2741.993812] FAULT_INJECTION: forcing a failure. [ 2741.993812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2741.996429] CPU: 1 PID: 13413 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2741.998184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.000245] Call Trace: [ 2742.000931] dump_stack+0x107/0x167 [ 2742.001825] should_fail.cold+0x5/0xa [ 2742.002814] _copy_to_iter+0x264/0x12d0 [ 2742.003849] ? chacha_block_generic+0x13e/0x200 [ 2742.004982] ? chacha_permute+0x6f0/0x6f0 [ 2742.005966] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2742.007137] get_random_bytes_user+0x173/0x3b0 [ 2742.008212] ? get_random_u32+0x670/0x670 [ 2742.009213] ? wait_for_random_bytes+0x91/0xe0 [ 2742.010301] ? security_file_permission+0xb1/0xe0 [ 2742.011467] ? get_random_bytes_user+0x3b0/0x3b0 [ 2742.012585] random_read_iter+0x65/0x140 [ 2742.013562] io_read+0x2dc/0x11e0 [ 2742.014389] ? kiocb_done+0xc90/0xc90 [ 2742.015298] ? mark_lock+0xf5/0x2df0 [ 2742.016177] ? lock_chain_count+0x20/0x20 [ 2742.017198] ? stack_trace_consume_entry+0x160/0x160 [ 2742.018396] ? lock_acquire+0x197/0x470 [ 2742.019343] ? __lock_acquire+0xbb1/0x5b00 [ 2742.020326] io_issue_sqe+0x2e8a/0x77b0 [ 2742.021281] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2742.022512] ? SOFTIRQ_verbose+0x10/0x10 [ 2742.023459] ? lock_chain_count+0x20/0x20 [ 2742.024432] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2742.025631] ? io_connect+0x610/0x610 [ 2742.026459] ? lock_acquire+0x197/0x470 [ 2742.027328] ? find_held_lock+0x2c/0x110 [ 2742.028213] ? __fget_files+0x2cf/0x520 [ 2742.029115] ? lock_downgrade+0x6d0/0x6d0 [ 2742.030018] __io_queue_sqe+0x90/0x9d0 [ 2742.030867] ? io_issue_sqe+0x77b0/0x77b0 [ 2742.031757] ? __fget_files+0x2f8/0x520 [ 2742.032625] ? io_prep_rw+0x7f5/0x1050 [ 2742.033504] io_submit_sqes+0x44aa/0x8610 [ 2742.034428] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2742.035508] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2742.036554] ? lock_downgrade+0x6d0/0x6d0 [ 2742.037480] ? find_held_lock+0x2c/0x110 [ 2742.038369] ? io_submit_sqes+0x8610/0x8610 [ 2742.039306] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2742.040353] ? wait_for_completion_io+0x270/0x270 [ 2742.041429] ? rcu_read_lock_any_held+0x75/0xa0 [ 2742.042443] ? vfs_write+0x354/0xb10 [ 2742.043245] ? fput_many+0x2f/0x1a0 [ 2742.044036] ? ksys_write+0x1a9/0x260 [ 2742.044882] ? __ia32_sys_read+0xb0/0xb0 [ 2742.045784] do_syscall_64+0x33/0x40 [ 2742.046587] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2742.047710] RIP: 0033:0x7fd311e28b19 [ 2742.048505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.052542] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2742.054213] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2742.055768] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2742.057347] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.058898] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2742.060437] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:57:45 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xffffffff00000000) 09:57:45 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:57:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x7, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:57:45 executing program 2: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:57:45 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 25) 09:57:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x8, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2742.420253] FAULT_INJECTION: forcing a failure. [ 2742.420253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2742.421680] CPU: 0 PID: 13548 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2742.422373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.423225] Call Trace: [ 2742.423552] dump_stack+0x107/0x167 [ 2742.423905] should_fail.cold+0x5/0xa [ 2742.424315] _copy_to_iter+0x264/0x12d0 [ 2742.424783] ? chacha_block_generic+0x13e/0x200 [ 2742.425294] ? chacha_permute+0x6f0/0x6f0 [ 2742.425735] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2742.426255] get_random_bytes_user+0x173/0x3b0 [ 2742.426733] ? get_random_u32+0x670/0x670 [ 2742.427176] ? wait_for_random_bytes+0x91/0xe0 [ 2742.427690] ? security_file_permission+0xb1/0xe0 [ 2742.428202] ? get_random_bytes_user+0x3b0/0x3b0 [ 2742.428691] random_read_iter+0x65/0x140 [ 2742.429187] io_read+0x2dc/0x11e0 [ 2742.429575] ? kiocb_done+0xc90/0xc90 [ 2742.429940] ? mark_lock+0xf5/0x2df0 [ 2742.430354] ? lock_chain_count+0x20/0x20 [ 2742.430802] ? stack_trace_consume_entry+0x160/0x160 [ 2742.431337] ? lock_acquire+0x197/0x470 [ 2742.431786] ? __lock_acquire+0xbb1/0x5b00 [ 2742.432248] io_issue_sqe+0x2e8a/0x77b0 [ 2742.432680] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2742.433248] ? SOFTIRQ_verbose+0x10/0x10 [ 2742.433675] ? lock_chain_count+0x20/0x20 [ 2742.434065] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2742.434660] ? io_connect+0x610/0x610 [ 2742.435018] ? lock_acquire+0x197/0x470 [ 2742.435442] ? find_held_lock+0x2c/0x110 [ 2742.435899] ? __fget_files+0x2cf/0x520 [ 2742.436334] ? lock_downgrade+0x6d0/0x6d0 [ 2742.436814] __io_queue_sqe+0x90/0x9d0 [ 2742.437262] ? io_issue_sqe+0x77b0/0x77b0 [ 2742.437716] ? __fget_files+0x2f8/0x520 [ 2742.438088] ? io_prep_rw+0x7f5/0x1050 [ 2742.438569] io_submit_sqes+0x44aa/0x8610 [ 2742.438976] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2742.439550] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2742.440009] ? lock_downgrade+0x6d0/0x6d0 [ 2742.440441] ? find_held_lock+0x2c/0x110 [ 2742.440898] ? io_submit_sqes+0x8610/0x8610 [ 2742.441376] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2742.441889] ? wait_for_completion_io+0x270/0x270 [ 2742.442390] ? rcu_read_lock_any_held+0x75/0xa0 [ 2742.442943] ? vfs_write+0x354/0xb10 [ 2742.443396] ? fput_many+0x2f/0x1a0 [ 2742.443852] ? ksys_write+0x1a9/0x260 [ 2742.444324] ? __ia32_sys_read+0xb0/0xb0 [ 2742.444860] do_syscall_64+0x33/0x40 [ 2742.445338] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2742.445954] RIP: 0033:0x7fd311e28b19 [ 2742.446425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.448612] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2742.449466] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2742.450356] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2742.451233] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.452059] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2742.452954] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:58:01 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:58:01 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x2c, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, &(0x7f0000001080), 0x0) perf_event_open(&(0x7f0000001140)={0x4, 0x80, 0x7d, 0x0, 0x3f, 0x5, 0x0, 0x6, 0x20, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6224, 0x4, @perf_bp={&(0x7f0000001100), 0x8}, 0xd0, 0x3f, 0x4, 0x3, 0xf88, 0x6, 0x1ff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xb, r0, 0x3) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:58:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x9, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:58:01 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x3, 0x0, 0x0) 09:58:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) pwrite64(r1, &(0x7f0000001100)="887f2a2b486db44934e095030e0c809931b22ce7cf56cd68255af0da517bc21fcb57779e9e47c5bb556168daaa9112110374bdb047b19dffbb26eb3f81f67d6832945005f2f3d1af84cabbaeab1e2ce240471e4f85622cf86775dd8999371266a9fccf4fb8e8e357fac33d7b08141933e6a549137518e3bc9bccf7ab79a74c7f61327fc48efec6d541159145da4a1e547057d7e39fda51b7af6e", 0x9a, 0x58a) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:58:01 executing program 2: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:58:01 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xfffffffffffffdef) 09:58:01 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 26) 09:58:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xa, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2758.569797] FAULT_INJECTION: forcing a failure. [ 2758.569797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2758.570896] CPU: 1 PID: 13564 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2758.571490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2758.572186] Call Trace: [ 2758.572419] dump_stack+0x107/0x167 09:58:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001080), 0x4001, &(0x7f0000001100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@version_u}, {@access_user}, {@aname={'aname', 0x3d, '*)*['}}, {@version_u}, {@version_9p2000}, {@dfltuid}, {@cachetag={'cachetag', 0x3d, '/proc/diskstats\x00'}}, {@version_L}, {@posixacl}], [{@smackfsfloor}, {@dont_measure}, {@subj_user}, {@smackfshat={'smackfshat', 0x3d, '\\},'}}]}}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000001240)={0xbf6, {{0x2, 0x4e23, @broadcast}}}, 0x88) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) syz_io_uring_complete(0x0) [ 2758.572731] should_fail.cold+0x5/0xa [ 2758.573072] _copy_from_user+0x2e/0x1b0 [ 2758.573417] iovec_from_user+0x141/0x400 [ 2758.573765] __import_iovec+0x67/0x590 [ 2758.574104] io_import_iovec+0x581/0x1120 [ 2758.574462] ? io_complete_rw+0x230/0x230 [ 2758.574816] ? kiocb_done+0x16b/0xc90 [ 2758.575144] io_read+0xe14/0x11e0 [ 2758.575450] ? kiocb_done+0xc90/0xc90 [ 2758.575774] ? mark_lock+0xf5/0x2df0 [ 2758.576096] ? lock_chain_count+0x20/0x20 [ 2758.576459] ? stack_trace_consume_entry+0x160/0x160 [ 2758.576888] ? lock_acquire+0x197/0x470 [ 2758.577248] ? lock_acquire+0x197/0x470 [ 2758.577593] ? __lock_acquire+0xbb1/0x5b00 [ 2758.577957] io_issue_sqe+0x2e8a/0x77b0 [ 2758.578303] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2758.578746] ? SOFTIRQ_verbose+0x10/0x10 [ 2758.579091] ? lock_chain_count+0x20/0x20 [ 2758.579445] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2758.579888] ? io_connect+0x610/0x610 [ 2758.580222] ? lock_acquire+0x197/0x470 [ 2758.580560] ? find_held_lock+0x2c/0x110 [ 2758.580911] ? __fget_files+0x2cf/0x520 [ 2758.593281] ? lock_downgrade+0x6d0/0x6d0 [ 2758.593639] __io_queue_sqe+0x90/0x9d0 [ 2758.593971] ? io_issue_sqe+0x77b0/0x77b0 [ 2758.594318] ? __fget_files+0x2f8/0x520 [ 2758.594657] ? io_prep_rw+0x7f5/0x1050 [ 2758.594989] io_submit_sqes+0x44aa/0x8610 [ 2758.595359] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2758.595777] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2758.596184] ? lock_downgrade+0x6d0/0x6d0 [ 2758.596531] ? find_held_lock+0x2c/0x110 [ 2758.596876] ? io_submit_sqes+0x8610/0x8610 [ 2758.597270] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2758.597677] ? wait_for_completion_io+0x270/0x270 [ 2758.598085] ? rcu_read_lock_any_held+0x75/0xa0 [ 2758.598477] ? vfs_write+0x354/0xb10 [ 2758.598792] ? fput_many+0x2f/0x1a0 [ 2758.599099] ? ksys_write+0x1a9/0x260 [ 2758.599422] ? __ia32_sys_read+0xb0/0xb0 [ 2758.599771] do_syscall_64+0x33/0x40 [ 2758.600086] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2758.600515] RIP: 0033:0x7fd311e28b19 [ 2758.600830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2758.602369] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2758.603005] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2758.603598] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2758.604196] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 09:58:02 executing program 2: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 2758.604790] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2758.605404] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:58:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:58:02 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x24000000, 0x3, 0x0, 0x0) 09:58:02 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 27) 09:58:02 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xfffffffffffffff5) 09:58:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xb, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2758.999409] FAULT_INJECTION: forcing a failure. [ 2758.999409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2759.000818] CPU: 1 PID: 13594 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2759.001546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2759.002394] Call Trace: [ 2759.002689] dump_stack+0x107/0x167 [ 2759.003102] should_fail.cold+0x5/0xa [ 2759.003513] _copy_to_iter+0x264/0x12d0 [ 2759.004277] ? chacha_block_generic+0x13e/0x200 [ 2759.004764] ? chacha_permute+0x6f0/0x6f0 [ 2759.005510] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2759.006040] get_random_bytes_user+0x173/0x3b0 [ 2759.006553] ? get_random_u32+0x670/0x670 [ 2759.007018] ? wait_for_random_bytes+0x91/0xe0 [ 2759.007541] ? security_file_permission+0xb1/0xe0 [ 2759.008036] ? get_random_bytes_user+0x3b0/0x3b0 [ 2759.008516] random_read_iter+0x65/0x140 [ 2759.008915] io_read+0x2dc/0x11e0 [ 2759.009283] ? kiocb_done+0xc90/0xc90 [ 2759.009692] ? mark_lock+0xf5/0x2df0 [ 2759.010063] ? lock_chain_count+0x20/0x20 [ 2759.010494] ? stack_trace_consume_entry+0x160/0x160 [ 2759.010985] ? lock_acquire+0x197/0x470 [ 2759.011372] ? __lock_acquire+0xbb1/0x5b00 [ 2759.011799] io_issue_sqe+0x2e8a/0x77b0 [ 2759.012186] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2759.012679] ? SOFTIRQ_verbose+0x10/0x10 [ 2759.013072] ? lock_chain_count+0x20/0x20 [ 2759.013472] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2759.013992] ? io_connect+0x610/0x610 [ 2759.014360] ? lock_acquire+0x197/0x470 [ 2759.014760] ? find_held_lock+0x2c/0x110 [ 2759.015166] ? __fget_files+0x2cf/0x520 [ 2759.015532] ? lock_downgrade+0x6d0/0x6d0 [ 2759.015949] __io_queue_sqe+0x90/0x9d0 [ 2759.016329] ? io_issue_sqe+0x77b0/0x77b0 [ 2759.016737] ? __fget_files+0x2f8/0x520 [ 2759.017126] ? io_prep_rw+0x7f5/0x1050 [ 2759.017460] io_submit_sqes+0x44aa/0x8610 [ 2759.017850] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2759.018270] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2759.018679] ? lock_downgrade+0x6d0/0x6d0 [ 2759.019045] ? find_held_lock+0x2c/0x110 [ 2759.019393] ? io_submit_sqes+0x8610/0x8610 [ 2759.019765] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2759.020197] ? wait_for_completion_io+0x270/0x270 [ 2759.020608] ? rcu_read_lock_any_held+0x75/0xa0 [ 2759.021032] ? vfs_write+0x354/0xb10 [ 2759.021351] ? fput_many+0x2f/0x1a0 [ 2759.021663] ? ksys_write+0x1a9/0x260 [ 2759.022000] ? __ia32_sys_read+0xb0/0xb0 [ 2759.022360] do_syscall_64+0x33/0x40 [ 2759.022676] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2759.023130] RIP: 0033:0x7fd311e28b19 [ 2759.023446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2759.025003] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2759.025668] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2759.026285] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2759.026882] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2759.027495] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2759.028095] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:58:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xf, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:58:18 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:58:18 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) 09:58:18 executing program 2: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:58:18 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 28) 09:58:18 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a000000, 0x3, 0x0, 0x0) 09:58:18 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xffffffffffffffff) 09:58:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x600400, 0x8b) perf_event_open(&(0x7f0000001100)={0x1, 0x80, 0xb4, 0x8e, 0x7, 0xaf, 0x0, 0x9, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0xb}, 0x80, 0x4, 0xfff, 0x9, 0xffff, 0xfffffffc, 0x8, 0x0, 0x40627, 0x0, 0x9}, 0xffffffffffffffff, 0x2, r0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:58:18 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000000)) ioctl$TCXONC(r2, 0x540a, 0x3) close_range(r1, r2, 0x2) 09:58:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x10, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:58:18 executing program 2: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:58:18 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r2 = syz_io_uring_complete(0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000040)={0x1, r7}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r8, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r10, 0x540a, 0x3) syz_io_uring_submit(0x0, r5, &(0x7f00000011c0)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r9, 0x0, {0x0, r10}, 0x3, 0x4, 0x1, {0x0, 0x0, r0}}, 0xfffff801) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001100)={0x4c, 0x2, 0x8, 0x5, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x881) [ 2775.000276] FAULT_INJECTION: forcing a failure. [ 2775.000276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2775.004368] CPU: 0 PID: 13613 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2775.010786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2775.012819] Call Trace: [ 2775.013481] dump_stack+0x107/0x167 [ 2775.014364] should_fail.cold+0x5/0xa [ 2775.015302] _copy_to_iter+0x264/0x12d0 [ 2775.016280] ? chacha_block_generic+0x13e/0x200 [ 2775.017440] ? chacha_permute+0x6f0/0x6f0 [ 2775.018448] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2775.019657] get_random_bytes_user+0x173/0x3b0 [ 2775.020770] ? get_random_u32+0x670/0x670 [ 2775.021795] ? wait_for_random_bytes+0x91/0xe0 [ 2775.022925] ? security_file_permission+0xb1/0xe0 [ 2775.024108] ? get_random_bytes_user+0x3b0/0x3b0 [ 2775.025284] random_read_iter+0x65/0x140 [ 2775.026284] io_read+0x2dc/0x11e0 [ 2775.027136] ? __is_insn_slot_addr+0x14c/0x290 [ 2775.028254] ? kiocb_done+0xc90/0xc90 [ 2775.029191] ? mark_lock+0xf5/0x2df0 [ 2775.030098] ? register_lock_class+0xbb/0x17b0 [ 2775.031211] ? arch_stack_walk+0x99/0xf0 [ 2775.032202] ? lock_chain_count+0x20/0x20 [ 2775.033224] ? is_dynamic_key+0x1e0/0x1e0 [ 2775.034245] ? __lock_acquire+0x1657/0x5b00 [ 2775.035306] ? __lock_acquire+0xbb1/0x5b00 [ 2775.036344] io_issue_sqe+0x2e8a/0x77b0 [ 2775.037385] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2775.038734] ? SOFTIRQ_verbose+0x10/0x10 [ 2775.039765] ? lock_chain_count+0x20/0x20 [ 2775.040825] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2775.042181] ? io_connect+0x610/0x610 [ 2775.043153] ? lock_acquire+0x197/0x470 [ 2775.044165] ? find_held_lock+0x2c/0x110 [ 2775.045237] ? __fget_files+0x2cf/0x520 [ 2775.046255] ? lock_downgrade+0x6d0/0x6d0 [ 2775.047322] __io_queue_sqe+0x90/0x9d0 [ 2775.048327] ? io_issue_sqe+0x77b0/0x77b0 [ 2775.049397] ? __fget_files+0x2f8/0x520 [ 2775.050420] ? io_prep_rw+0x7f5/0x1050 [ 2775.051428] io_submit_sqes+0x44aa/0x8610 [ 2775.052521] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2775.053798] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2775.055032] ? lock_downgrade+0x6d0/0x6d0 [ 2775.056078] ? find_held_lock+0x2c/0x110 [ 2775.057130] ? io_submit_sqes+0x8610/0x8610 [ 2775.058250] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2775.059493] ? wait_for_completion_io+0x270/0x270 [ 2775.060725] ? rcu_read_lock_any_held+0x75/0xa0 [ 2775.061938] ? vfs_write+0x354/0xb10 [ 2775.062890] ? fput_many+0x2f/0x1a0 [ 2775.063818] ? ksys_write+0x1a9/0x260 [ 2775.064788] ? __ia32_sys_read+0xb0/0xb0 [ 2775.065835] do_syscall_64+0x33/0x40 [ 2775.066784] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2775.068094] RIP: 0033:0x7fd311e28b19 [ 2775.069045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2775.073808] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2775.075749] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2775.077606] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2775.079441] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2775.081283] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2775.083119] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:58:18 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x30000000, 0x3, 0x0, 0x0) 09:58:18 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 09:58:18 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 29) 09:58:18 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x0) 09:58:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x11, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2775.548607] FAULT_INJECTION: forcing a failure. [ 2775.548607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2775.551544] CPU: 0 PID: 13638 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2775.553121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2775.555008] Call Trace: [ 2775.555030] dump_stack+0x107/0x167 [ 2775.555045] should_fail.cold+0x5/0xa [ 2775.555063] _copy_to_iter+0x264/0x12d0 [ 2775.555083] ? chacha_block_generic+0x13e/0x200 [ 2775.555098] ? chacha_permute+0x6f0/0x6f0 [ 2775.555112] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2775.555145] get_random_bytes_user+0x173/0x3b0 [ 2775.555163] ? get_random_u32+0x670/0x670 [ 2775.555184] ? wait_for_random_bytes+0x91/0xe0 [ 2775.555209] ? security_file_permission+0xb1/0xe0 [ 2775.555223] ? get_random_bytes_user+0x3b0/0x3b0 [ 2775.555234] random_read_iter+0x65/0x140 [ 2775.555248] io_read+0x2dc/0x11e0 [ 2775.555267] ? __is_insn_slot_addr+0x14c/0x290 [ 2775.555283] ? kiocb_done+0xc90/0xc90 [ 2775.555295] ? mark_lock+0xf5/0x2df0 [ 2775.555307] ? register_lock_class+0xbb/0x17b0 [ 2775.555319] ? arch_stack_walk+0x99/0xf0 [ 2775.555333] ? lock_chain_count+0x20/0x20 [ 2775.555353] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2775.555370] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2775.555391] ? __lock_acquire+0xbb1/0x5b00 [ 2775.555406] io_issue_sqe+0x2e8a/0x77b0 [ 2775.555425] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2775.555437] ? SOFTIRQ_verbose+0x10/0x10 [ 2775.555447] ? lock_chain_count+0x20/0x20 [ 2775.555461] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2775.555472] ? io_connect+0x610/0x610 [ 2775.555487] ? lock_acquire+0x197/0x470 [ 2775.555498] ? find_held_lock+0x2c/0x110 [ 2775.555516] ? __fget_files+0x2cf/0x520 [ 2775.555528] ? lock_downgrade+0x6d0/0x6d0 [ 2775.555543] __io_queue_sqe+0x90/0x9d0 [ 2775.555559] ? io_issue_sqe+0x77b0/0x77b0 [ 2775.555569] ? __fget_files+0x2f8/0x520 [ 2775.555584] ? io_prep_rw+0x7f5/0x1050 [ 2775.555600] io_submit_sqes+0x44aa/0x8610 [ 2775.555642] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2775.555655] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2775.555673] ? lock_downgrade+0x6d0/0x6d0 [ 2775.594672] ? find_held_lock+0x2c/0x110 [ 2775.594692] ? io_submit_sqes+0x8610/0x8610 [ 2775.594712] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2775.597120] ? wait_for_completion_io+0x270/0x270 [ 2775.597135] ? rcu_read_lock_any_held+0x75/0xa0 [ 2775.597148] ? vfs_write+0x354/0xb10 [ 2775.597160] ? fput_many+0x2f/0x1a0 [ 2775.597172] ? ksys_write+0x1a9/0x260 [ 2775.597185] ? __ia32_sys_read+0xb0/0xb0 [ 2775.597206] do_syscall_64+0x33/0x40 [ 2775.597218] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2775.597227] RIP: 0033:0x7fd311e28b19 [ 2775.597243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2775.609308] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2775.609328] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2775.609335] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2775.609342] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2775.609349] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2775.609357] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:58:34 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7d}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:58:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:58:34 executing program 2: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:58:34 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = socket$inet6(0xa, 0x1, 0xf9ed) sendmsg$nl_generic(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)={0x4b4, 0x11, 0x10, 0x70bd2d, 0x25dfdbfb, {0x1d}, [@nested={0x224, 0x3a, 0x0, 0x1, [@generic="84274b2eac0c188dfc8406d4ea17ae7ee2af3f213f8d69860defe814d13536bf7c610580b126795361f32fa9d3", @generic="51d9f7b06c070a5320593b34f1238e17725fa7a278988f2333721b757093054a790428953a2e72afb7b13fdc0084658e28a7277c958aa68c8d2707d90af5999fb5622057eda05db7be17e155623ea388aac9fa4b677021359664ab0ed1383149ca5c88e943d508d6723954bf07e8c0c3254dd4599997a07b0e64a80c128333e40b55f79f638d5c908f26f9f3286c26f6c5a0e3360a93e32ccd59ff3588fa17d1b9837e09a13331f006a043b671e916a93d3956ffc604311ff4352e3268082be2422558d002a3d669dee3b566b4352324021c9378679320d0f946681a2214", @typed={0xc, 0x27, 0x0, 0x0, @u64=0xffffffff}, @generic="feb2d08ba45f293721d33bd9d4538a3b5322a28f5b7ebaeae9ee997ac48dcf963287dc6e60ec966a7702812847a58bd7559c7d4cdb6f81b2a16c77f4998f1e3499dd81abc5c3104d114e14bd90e0893817ee2742fb43e720065e8c6c2933be5a7c41666d69bcdba8ecd7d83a351560cbc7772fd6dace5fe2651e60ef961c7d438d2b2b20720d3cfd5520b3bbc9ed0bfaff72519881a575", @typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@multicast2}, @generic="b277e38c986d8cadda0a4742fe81e07b497edf891c4d7aa134352fbe67f44a4ea3bbf3ac2c36b2b2d6aa77dcdd572188f0b1a2aa1ef7fcbedd0cc9a148560def9ca014f9308ba4e84580c4c41ba1dafce76cf89b2716601955a6", @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@local}]}, @typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}, @generic="be13347616337630064f93d438e46d2a79d1e1446cca4fea59a3d9b05dc103648e9aadd7e183470d901f96613a5e914189352bedbb6a063dde4520e42b61879587c6a4f0cccb7bef4b9adcb8d863579b6349f643cf756a69daf3beb2b872ffdae3d2b2e93c81bbafdb62f069a084a6ffdfc0887f7f25e803a191607bf95c2a43bc1bd0b7d29856008d5693b8f31efc40dea7a98fb2b47bc8a9e6a536bd763d0ca2f7bcb4", @generic="7f18fa00904b4a772585418664330c2396adff16975f4c399c59c84149355cc397da9a14c1af7b28ac921d1bd762f6fe3db21fa620024c8796dddb57e8a3cf7ba06a30c35d5d9e521c6a43601757621f50cd6739857b571daae780597076d74659b4f0", @nested={0x169, 0x72, 0x0, 0x1, [@generic="8132ac77eca79f5d35040ee0fcdad36d60cef170ae10928e08eec4e4f9b4bf21e2e4aad1b45c01209c08ef15d6aa0481016b15b717b23ef5f5735d0f68cf4da3", @typed={0x8, 0x3d, 0x0, 0x0, @fd=r6}, @generic="793fbbeb28818eace8fb23a7a885deb2542dd54fbbf73bc398ac78f678a4aa719135a3b65e806b4dd21bad068cf4d0156a5ec664e9c4e9a25e7faf34b90972e91f480605fb90bd9b10a62bb6b6b398f752d6d10ad264eb4a3d8bbb389bfcad3f502f4726c19cbac36aaa14fe9720e1d6885aff994855387c45fed225a58c5ec227cca1e2763307152ffac164e8070905c96ec463f7", @generic="bff23d8d490d17ec40893f956ce855d618583fde78360523ec689893c6cd937ed9", @typed={0x8, 0x79, 0x0, 0x0, @fd=r3}, @generic="02", @generic="18f5649ec4a5c991380a5cd8712cd993eb8456fc082aea7343de0053f2cbc55e987b9f5a745917377334264702db196fb44ef983464d7fc48342992599d51d268712cf361e261063138c1c909a4db97a1d7ed04a5f5169c3431f9abc2b12"]}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x4040010}, 0x20008480) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x226}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 09:58:34 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 30) 09:58:34 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x36000000, 0x3, 0x0, 0x0) 09:58:34 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:58:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xf0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2791.698626] FAULT_INJECTION: forcing a failure. [ 2791.698626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2791.699836] CPU: 0 PID: 13665 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2791.700473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2791.701231] Call Trace: [ 2791.701505] dump_stack+0x107/0x167 [ 2791.701851] should_fail.cold+0x5/0xa [ 2791.702220] _copy_from_user+0x2e/0x1b0 [ 2791.702597] iovec_from_user+0x141/0x400 [ 2791.702977] __import_iovec+0x67/0x590 [ 2791.703350] io_import_iovec+0x581/0x1120 [ 2791.703741] ? io_complete_rw+0x230/0x230 [ 2791.704129] ? kiocb_done+0x16b/0xc90 [ 2791.704488] io_read+0xe14/0x11e0 [ 2791.704821] ? kiocb_done+0xc90/0xc90 09:58:35 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c000000, 0x3, 0x0, 0x0) [ 2791.705175] ? mark_lock+0xf5/0x2df0 [ 2791.705554] ? lock_chain_count+0x20/0x20 [ 2791.705950] ? stack_trace_consume_entry+0x160/0x160 [ 2791.706426] ? lock_acquire+0x197/0x470 [ 2791.706804] ? __lock_acquire+0xbb1/0x5b00 [ 2791.707201] io_issue_sqe+0x2e8a/0x77b0 [ 2791.707576] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2791.708058] ? SOFTIRQ_verbose+0x10/0x10 [ 2791.708434] ? lock_chain_count+0x20/0x20 [ 2791.708819] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2791.717306] ? io_connect+0x610/0x610 [ 2791.717665] ? lock_acquire+0x197/0x470 [ 2791.718042] ? find_held_lock+0x2c/0x110 [ 2791.718436] ? __fget_files+0x2cf/0x520 [ 2791.718814] ? lock_downgrade+0x6d0/0x6d0 [ 2791.719212] __io_queue_sqe+0x90/0x9d0 [ 2791.719590] ? io_issue_sqe+0x77b0/0x77b0 [ 2791.719984] ? __fget_files+0x2f8/0x520 [ 2791.720369] ? io_prep_rw+0x7f5/0x1050 [ 2791.720745] io_submit_sqes+0x44aa/0x8610 [ 2791.721166] ? __do_sys_io_uring_enter+0x6b5/0x18c0 09:58:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x152, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:58:35 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001180)='/sys/module/ahci', 0x40, 0x0) r1 = perf_event_open(&(0x7f0000001100)={0x4, 0x80, 0x4, 0x0, 0xf4, 0x6, 0x0, 0x700, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffe0, 0x0, @perf_bp={&(0x7f0000001080), 0x2}, 0x2d1, 0xffffffff, 0x3, 0x9, 0x400, 0x8, 0x1}, 0x0, 0xd, r0, 0x5) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) fsetxattr$security_capability(r1, &(0x7f00000011c0), &(0x7f0000001200)=@v3={0x3000000, [{0x9, 0x400}, {0xd73, 0x68}], 0xee01}, 0x18, 0x3) fcntl$dupfd(r1, 0x406, r0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000000)={0x8, 'batadv_slave_0\x00', {'team0\x00'}, 0xfb}) [ 2791.721643] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2791.722096] ? lock_downgrade+0x6d0/0x6d0 [ 2791.722485] ? find_held_lock+0x2c/0x110 [ 2791.722865] ? io_submit_sqes+0x8610/0x8610 [ 2791.723274] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2791.723722] ? wait_for_completion_io+0x270/0x270 [ 2791.724171] ? rcu_read_lock_any_held+0x75/0xa0 [ 2791.724601] ? vfs_write+0x354/0xb10 [ 2791.729606] ? fput_many+0x2f/0x1a0 [ 2791.729944] ? ksys_write+0x1a9/0x260 [ 2791.730305] ? __ia32_sys_read+0xb0/0xb0 [ 2791.730702] do_syscall_64+0x33/0x40 [ 2791.731055] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2791.731532] RIP: 0033:0x7fd311e28b19 [ 2791.731876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2791.733590] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2791.734292] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2791.734947] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2791.735602] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2791.736255] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 09:58:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0xc0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 2791.736909] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:58:35 executing program 2: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:58:35 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 31) 09:58:35 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x80, 0x0, 0x5, 0x1fffffff}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020100ff010000000000000002000200845875eb180711363acfc5", @ANYRES32=r4, @ANYBLOB="04000500000080e910008f890800000000200064afe0"], 0x2c, 0x4) r5 = open(0x0, 0x100, 0x38) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001900)=ANY=[@ANYBLOB="3c0100001300210e0000000000000000fe8000000000000000000000000000aaac1414000000000000000000000000004e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000020000000000000000000000000000000000000000000000f1020000000000000000000000000000020000000000000084000500e000000200000000000000000000000000000003330000000000079b790000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000032000000000000007f00000100"/247], 0x13c}}, 0x0) dup2(r6, r5) statx(0xffffffffffffffff, &(0x7f00000018c0)='./file1\x00', 0x100, 0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',dfltgid=', @ANYRESHEX=r7, @ANYBLOB=',posixacl,loose,version=9p2000.u,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,fowner=', @ANYRESDEC, @ANYBLOB="2c646f6e745f686173682c6465666366696e65645f752c6d6561737572652c736d61636b66736861743d272c27412c7365636c6162656c2c7053723d3030303030303030303030303030303030303531e1f76566636f6e746578743d757365725f752c61707072616973652c00"]) sendmsg$unix(r3, &(0x7f0000001840)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000017c0)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000340)="e6ff9b430bb54b77ccfd8ffe562fb7444304637dbf53d8dc5ceb51dfabf6b355f17b670d718dec1cbb00d14bbb6c86e283693ceccc497ccb8d35f5392b049f35668030053dfef42d3bb42207cca0c6d17fbb6e61c96d04f98072d9ecb4e34f5abfa0595b8c629873ffcdc22ef6fa86c41b99fd25784f83fb8e92b2467c3954154d5f5575f63ea09e306611d28943aaf508a6f824e2a01ca2358858303a7437d622e3da3821ace4a63cf113", 0xab}, {&(0x7f0000000480)="bcf1d3e972273eb973c6a2f3eac051114dfbbc54febe439109c5b0bb99c56b1fd02dc753a6971ef36e10b566b962eb5bb4368cfca3fa368feec097e48cb8d4d6c8e561f70a34a79eafad38c598efb6556519f1fc5d8d74cacf8eb1c23fe9e5bfbaec41429f15cb1c8fe3c32034504ba3636257ce143ece49b1c0a953ca2cfedd19d239008b8d282229b88451668d66a7645fec840015e3e770d1087f8132b3bc4100e83424b131da0b802f8bced0b1fd040e51b6dccca5e02453c8c6d362d8d01969e2e986fa2fa48c54384294ddabe932d3cd7c3c446b219906eed3b5881fdc1a8a5657e24f31fd9331632ead7066314fc6765279c87037", 0xf8}, {&(0x7f0000000240)="0015762607c1fbf2a1f78c11253c68608887a07a7d53896ca15b1b510cf07122c004915c7e1c473230d82bd87e8c63e615942123e17aeeb05e54235a37c6084a89e3e1e55427a31a7e0a5bfc0fee1ef29a6db3ff02a5dc", 0x57}, {&(0x7f0000000580)="8bb28ce41db42acb6ee355d722b86d9438ce87776b247073222ea29296b6b6e3fbafff70d1266f9c21328a800bc2516c5412423763dd810dc3ac9e8522ef80a30f14441a82aad5d8c047e12b1f34a84749eae84e18a824a0aff560682800847830677d52d77dbf89240069414712b5349c207ebd813f19a57e598c260be449f7f7881cc047540a8e504a32cbb53d0a68088ee8ed", 0x94}, {&(0x7f0000000640)="0ce18dbf12800b865c1f4e262acfe5853579112d03ce82e4b342357430b29b30edca597662819c4cfd83efa9983b3523b77d9b01426e2269c7d46bd4087f03d50781cab1936aa687a6ce69791cbcc9f8e81d64cdd78394a98237c377dafb90a2ba1d561d2b4986f5b72c07e1b62a10053f09acbbf379c6039ad344255386119eea1c7f31509476b62bd7c9d74d2727be35de42fecf59e95c4d01ef1d102538e0d1877ce6c00d08664ba3e40102cf486939e2997484e719fab44badc3f1524743c48e15adfb1d1c9235bb14b977ffdbe80d866eb04da96aa099434cf76016f7b20fd5c863", 0xe4}, {&(0x7f00000001c0)="27f302e6d13e66d40945a35c725f5f0b6fd71f19b2d4", 0x16}], 0x7, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r7}}}], 0x40, 0x14}, 0x10) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 09:58:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x300, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2792.014295] FAULT_INJECTION: forcing a failure. [ 2792.014295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2792.017434] CPU: 0 PID: 13685 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2792.021590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2792.023613] Call Trace: [ 2792.024283] dump_stack+0x107/0x167 [ 2792.025195] should_fail.cold+0x5/0xa [ 2792.026150] _copy_to_iter+0x264/0x12d0 [ 2792.027137] ? chacha_block_generic+0x13e/0x200 [ 2792.028391] ? chacha_permute+0x6f0/0x6f0 [ 2792.029516] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2792.030852] get_random_bytes_user+0x173/0x3b0 [ 2792.032108] ? get_random_u32+0x670/0x670 [ 2792.033240] ? wait_for_random_bytes+0x91/0xe0 [ 2792.034482] ? security_file_permission+0xb1/0xe0 [ 2792.035792] ? get_random_bytes_user+0x3b0/0x3b0 [ 2792.037001] random_read_iter+0x65/0x140 [ 2792.037973] io_read+0x2dc/0x11e0 [ 2792.038805] ? kiocb_done+0xc90/0xc90 [ 2792.039693] ? mark_lock+0xf5/0x2df0 [ 2792.040575] ? lock_chain_count+0x20/0x20 [ 2792.041573] ? stack_trace_consume_entry+0x160/0x160 [ 2792.042772] ? lock_acquire+0x197/0x470 [ 2792.043701] ? __lock_acquire+0xbb1/0x5b00 [ 2792.044714] io_issue_sqe+0x2e8a/0x77b0 [ 2792.045666] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2792.046895] ? SOFTIRQ_verbose+0x10/0x10 [ 2792.047837] ? lock_chain_count+0x20/0x20 [ 2792.048805] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2792.050137] ? io_connect+0x610/0x610 [ 2792.051282] ? lock_acquire+0x197/0x470 [ 2792.052439] ? find_held_lock+0x2c/0x110 [ 2792.053643] ? __fget_files+0x2cf/0x520 [ 2792.055790] ? lock_downgrade+0x6d0/0x6d0 [ 2792.064611] __io_queue_sqe+0x90/0x9d0 [ 2792.065644] ? io_issue_sqe+0x77b0/0x77b0 [ 2792.066699] ? __fget_files+0x2f8/0x520 [ 2792.067716] ? io_prep_rw+0x7f5/0x1050 [ 2792.068705] io_submit_sqes+0x44aa/0x8610 [ 2792.069803] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2792.071073] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2792.072313] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2792.073653] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2792.074784] ? trace_hardirqs_on+0x5b/0x180 [ 2792.075880] ? io_submit_sqes+0x8610/0x8610 [ 2792.079859] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2792.080989] ? finish_task_switch+0x126/0x5d0 [ 2792.082138] ? finish_task_switch+0xef/0x5d0 [ 2792.083253] ? __switch_to+0x572/0xf70 [ 2792.084345] ? __switch_to_asm+0x3a/0x60 [ 2792.087662] ? __switch_to_asm+0x34/0x60 [ 2792.088698] ? __schedule+0x82c/0x1ea0 [ 2792.089711] ? io_schedule_timeout+0x140/0x140 [ 2792.091190] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2792.092747] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2792.094459] ? ksys_write+0x1a9/0x260 [ 2792.095670] do_syscall_64+0x33/0x40 [ 2792.096854] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2792.098599] RIP: 0033:0x7fd311e28b19 [ 2792.099733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2792.105692] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2792.108280] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2792.110546] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2792.113076] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2792.115458] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2792.117719] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:58:50 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a644", 0x2}], 0x1}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @mcast1, 0x59}, 0x1c) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:58:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x500, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:58:50 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:58:50 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 32) 09:58:50 executing program 2: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:58:50 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffffffff, 0x3, 0x0, 0x0) 09:58:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xc7) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x0, 0x8a39, 0x7, 0x7fff, 0xffff}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a644", 0x2}], 0x1}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000001080)={0x0, 'bond_slave_0\x00', {0x4}, 0x7f}) 09:58:50 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) 09:58:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x600, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:58:51 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2807.640997] FAULT_INJECTION: forcing a failure. [ 2807.640997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2807.642326] CPU: 1 PID: 13716 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2807.643079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2807.643966] Call Trace: [ 2807.644220] dump_stack+0x107/0x167 [ 2807.644677] should_fail.cold+0x5/0xa [ 2807.645037] _copy_to_iter+0x264/0x12d0 [ 2807.645430] ? chacha_block_generic+0x13e/0x200 [ 2807.645944] ? chacha_permute+0x6f0/0x6f0 [ 2807.646323] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2807.646876] get_random_bytes_user+0x173/0x3b0 [ 2807.647299] ? get_random_u32+0x670/0x670 [ 2807.647811] ? wait_for_random_bytes+0x91/0xe0 [ 2807.648246] ? security_file_permission+0xb1/0xe0 [ 2807.648805] ? get_random_bytes_user+0x3b0/0x3b0 [ 2807.649242] random_read_iter+0x65/0x140 [ 2807.649719] io_read+0x2dc/0x11e0 [ 2807.650051] ? __is_insn_slot_addr+0x14c/0x290 [ 2807.650569] ? kiocb_done+0xc90/0xc90 [ 2807.650922] ? mark_lock+0xf5/0x2df0 [ 2807.651267] ? register_lock_class+0xbb/0x17b0 [ 2807.651762] ? arch_stack_walk+0x99/0xf0 [ 2807.652141] ? lock_chain_count+0x20/0x20 [ 2807.652660] ? is_dynamic_key+0x1e0/0x1e0 [ 2807.653060] ? __lock_acquire+0x1657/0x5b00 [ 2807.653565] ? __lock_acquire+0xbb1/0x5b00 [ 2807.653993] io_issue_sqe+0x2e8a/0x77b0 [ 2807.654565] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2807.655051] ? SOFTIRQ_verbose+0x10/0x10 [ 2807.655499] ? lock_chain_count+0x20/0x20 [ 2807.655891] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2807.656364] ? io_connect+0x610/0x610 [ 2807.656830] ? lock_acquire+0x197/0x470 [ 2807.657189] ? find_held_lock+0x2c/0x110 [ 2807.657696] ? __fget_files+0x2cf/0x520 [ 2807.658057] ? lock_downgrade+0x6d0/0x6d0 [ 2807.658521] __io_queue_sqe+0x90/0x9d0 [ 2807.658897] ? io_issue_sqe+0x77b0/0x77b0 [ 2807.659278] ? __fget_files+0x2f8/0x520 [ 2807.659743] ? io_prep_rw+0x7f5/0x1050 [ 2807.660112] io_submit_sqes+0x44aa/0x8610 [ 2807.660650] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2807.661099] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2807.661664] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2807.662117] ? _raw_spin_unlock_irq+0x27/0x30 [ 2807.662639] ? io_submit_sqes+0x8610/0x8610 [ 2807.663036] ? finish_task_switch+0x1a4/0x5d0 [ 2807.663521] ? __switch_to+0x572/0xf70 [ 2807.663879] ? __switch_to_asm+0x3a/0x60 [ 2807.664247] ? __switch_to_asm+0x34/0x60 [ 2807.664731] ? __schedule+0x82c/0x1ea0 [ 2807.665099] ? io_schedule_timeout+0x140/0x140 [ 2807.665610] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2807.666027] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2807.666610] ? ksys_write+0x1a9/0x260 [ 2807.666970] do_syscall_64+0x33/0x40 [ 2807.667312] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2807.667886] RIP: 0033:0x7fd311e28b19 [ 2807.668225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2807.670084] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2807.670899] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2807.671721] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2807.672360] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2807.673116] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2807.673838] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:58:51 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:58:51 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) 09:58:51 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendto$unix(r3, &(0x7f0000000040)="34cf89870c39222ee9c9f201884c89df63696175324e95f79215dc3e950e33e01120d3df92e91fd406a6bca7243922fa69f25899a96a", 0x36, 0x20000001, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e) pipe2(&(0x7f00000000c0), 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) fcntl$getown(r0, 0x9) 09:58:51 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 33) 09:58:51 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x399323b9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = perf_event_open(&(0x7f0000001100)={0x4, 0x80, 0x8, 0x0, 0xf8, 0xff, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4d, 0x0, @perf_bp={&(0x7f0000001240)}, 0x9000, 0x100000001, 0x4, 0x4, 0x81, 0xa, 0x3ff, 0x0, 0x1, 0x0, 0x20}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x540a, 0x3) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x540a, 0x3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x540a, 0x3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000016c0)=ANY=[@ANYBLOB="782f77fdde852b243d687b5880fc412e1ea92a4fc78c8615074773b65295bf0cea5f252ddc006641374dc31a67edb5c22901eeee9023d3c5a6dcb0326b45e6c50802f5138684c804dc07b9c42e1c7d623e89c67abd21bcafbd8c910589bd265b4de58cf73f86666fa49806d98bd7c7454c93a9906c9dd322c5ae13a749d6bdaa04d9116edfcc2512ff6787ff4b3f0068e625329dba382981e9ace9071c195e9c6a089514", @ANYRES16=r1, @ANYRES32]) perf_event_open(&(0x7f0000001180)={0x1, 0x80, 0x6, 0x9, 0x9f, 0x1, 0x0, 0x7fff, 0x10004, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x62, 0x4, @perf_config_ext={0x4, 0x4}, 0x4000, 0x3, 0x40, 0x7, 0x200, 0x6, 0x6, 0x0, 0x40, 0x0, 0x7}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x61295a4c32181a66) r5 = syz_io_uring_setup(0x4d4f, &(0x7f0000001480), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x20, 0x1, 0x7f, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000001340), 0x4}, 0x12100, 0x100, 0x1000, 0x8, 0x39a9, 0xda63b803, 0x7ff, 0x0, 0x200, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000040)={0x1, r6}) perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x4, 0x7, 0x7f, 0x80, 0x0, 0xb61, 0x90, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x810, 0x6, 0x41a, 0x5, 0x400, 0x7ff, 0x9, 0x0, 0x800, 0x0, 0x2}, r6, 0xf, r0, 0x12) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000040)=""/4126, 0x101e, 0x0) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f00000013c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001380)={&(0x7f0000001580)=ANY=[@ANYBLOB="eaff8d478b6b335aee5b3a242e77000000000000", @ANYRESDEC, @ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0x20004050}, 0x40011) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:58:51 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001100)={0x0, 0x6, 0x1, [0x81, 0x9, 0x3, 0x4, 0x7], [0xffffffffffff8848, 0x1, 0xa8f0000, 0x1ff, 0x6, 0x100, 0x2, 0xffffffff, 0x8, 0x3, 0x3ff, 0x0, 0x100000000, 0x2, 0x9, 0x337, 0x6, 0x8001, 0x5, 0x101, 0x1000, 0x1, 0x706, 0x0, 0x7fff, 0x3, 0x25c2, 0x0, 0x1, 0x8, 0x3f, 0x7f, 0x7, 0x1, 0x3f, 0x7, 0x7, 0x3, 0x1, 0x600000000000, 0x1000, 0x3, 0x7, 0x8, 0x1, 0x5, 0x8, 0x5, 0xff, 0x6, 0x8, 0xffffffffffff8f60, 0x8, 0x5, 0xff, 0x7fff, 0x1, 0x3, 0x81, 0xfffffffffffffff8, 0x401, 0x3, 0x400, 0x5, 0x7, 0x7, 0x1c, 0x3b90, 0x2, 0x10001, 0x6, 0x7, 0xe00c, 0x80, 0x62d, 0x4, 0x8, 0x2, 0x9, 0xfffffffffffffffd, 0x200, 0x8ba, 0x7fffffff, 0x2, 0xfffffffffffff800, 0x3ff, 0x1, 0x10001, 0x100000001, 0x9b, 0x3, 0x101, 0xfff, 0x7fffffff, 0xfffffffffffffffe, 0x7, 0xbd, 0x7, 0xfffffffffffffe01, 0x1, 0x33, 0x1000, 0x5763, 0x3, 0x1ff, 0x0, 0x6, 0xfffffffffffffbff, 0xff, 0x1, 0x6974, 0xffffffff80000001, 0x3ff, 0x5, 0x8, 0x5, 0x9, 0x800, 0x54, 0x1, 0x6]}) r3 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000008c0)={r4, 0x5, 0x80000001}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001540)={0x412266d4b28b8add, 0x0, {0x5, @struct={0x9ce, 0x1ff}, r2, 0xfffffffffffffbff, 0x9, 0xec0, 0x1, 0x7, 0x434, @usage=0x2, 0x2, 0xfffffffa, [0x0, 0x4, 0x5, 0xfffffffffffffffd, 0x5, 0x84fc]}, {0xfff, @usage=0x8, 0x0, 0x7, 0x3, 0x400000000000025, 0x3, 0x10001, 0xc3, @usage=0xbc, 0x4e7, 0xfffffc2a, [0x7fff, 0x98b8, 0x7fffffff, 0x8, 0x1, 0xfffffffffffffff9]}, {0x4d6e, @usage=0x58, r4, 0xe5a8, 0xb9, 0x3, 0x1, 0x20, 0x400, @usage=0xffffffff, 0x80000000, 0x7, [0x8, 0x0, 0x401, 0x40, 0x10000, 0x72]}, {0x7f7, 0x0, 0x10001}}) 09:58:51 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000001100)="88aca67f62df582ddab094303d5f9fb03cb94755b469fd9618812822b76dc14778518c489fb0dae18a61fd1e700033bdb45d8f75ef9247e0768ef777d976e0a6e41e1554eec9505bf34ee82c18cf067669060f3d2ea7c941082b548e", 0x5c, 0xfffffffffffffffc) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:58:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x700, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2808.308905] FAULT_INJECTION: forcing a failure. [ 2808.308905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2808.310276] CPU: 1 PID: 13742 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2808.310959] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2808.311789] Call Trace: [ 2808.312072] dump_stack+0x107/0x167 [ 2808.312448] should_fail.cold+0x5/0xa [ 2808.312833] _copy_to_iter+0x264/0x12d0 [ 2808.313253] ? chacha_block_generic+0x13e/0x200 [ 2808.313716] ? chacha_permute+0x6f0/0x6f0 [ 2808.314133] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2808.314650] get_random_bytes_user+0x173/0x3b0 [ 2808.315113] ? get_random_u32+0x670/0x670 [ 2808.315542] ? wait_for_random_bytes+0x91/0xe0 [ 2808.316017] ? security_file_permission+0xb1/0xe0 [ 2808.316516] ? get_random_bytes_user+0x3b0/0x3b0 [ 2808.316993] random_read_iter+0x65/0x140 [ 2808.317432] io_read+0x2dc/0x11e0 [ 2808.317741] ? kiocb_done+0xc90/0xc90 [ 2808.318069] ? mark_lock+0xf5/0x2df0 [ 2808.318405] ? lock_chain_count+0x20/0x20 [ 2808.318770] ? stack_trace_consume_entry+0x160/0x160 [ 2808.319209] ? lock_acquire+0x197/0x470 [ 2808.319566] ? __lock_acquire+0xbb1/0x5b00 [ 2808.319931] io_issue_sqe+0x2e8a/0x77b0 [ 2808.320279] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2808.320734] ? SOFTIRQ_verbose+0x10/0x10 [ 2808.321080] ? lock_chain_count+0x20/0x20 [ 2808.321447] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2808.321983] ? io_connect+0x610/0x610 [ 2808.322380] ? lock_acquire+0x197/0x470 [ 2808.322785] ? find_held_lock+0x2c/0x110 [ 2808.323204] ? __fget_files+0x2cf/0x520 [ 2808.323601] ? lock_downgrade+0x6d0/0x6d0 [ 2808.324039] __io_queue_sqe+0x90/0x9d0 [ 2808.324435] ? io_issue_sqe+0x77b0/0x77b0 [ 2808.324856] ? __fget_files+0x2f8/0x520 [ 2808.325269] ? io_prep_rw+0x7f5/0x1050 [ 2808.325656] io_submit_sqes+0x44aa/0x8610 [ 2808.326046] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2808.326471] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2808.326896] ? lock_downgrade+0x6d0/0x6d0 [ 2808.327251] ? find_held_lock+0x2c/0x110 [ 2808.327603] ? io_submit_sqes+0x8610/0x8610 [ 2808.327991] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2808.328405] ? wait_for_completion_io+0x270/0x270 [ 2808.328818] ? rcu_read_lock_any_held+0x75/0xa0 [ 2808.329224] ? vfs_write+0x354/0xb10 [ 2808.329570] ? fput_many+0x2f/0x1a0 [ 2808.329940] ? ksys_write+0x1a9/0x260 [ 2808.330341] ? __ia32_sys_read+0xb0/0xb0 [ 2808.330760] do_syscall_64+0x33/0x40 [ 2808.331158] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2808.331679] RIP: 0033:0x7fd311e28b19 [ 2808.332035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2808.333787] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2808.334525] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2808.335207] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2808.335885] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2808.336566] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2808.337241] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:58:51 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8, 0x0, 0x0) 09:58:51 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000000)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r1}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:58:51 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000040)={0x1, r7}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r8, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 09:59:07 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:59:07 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x16f7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x6, 0x1fffffff, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) read(r3, &(0x7f0000000240)=""/81, 0x51) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 09:59:07 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x10, 0x0, 0x0) 09:59:07 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:59:07 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 34) 09:59:07 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x1, r2}) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x4, 0x81, 0x4, 0x8, 0x0, 0x5, 0x42, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xb1, 0x3}, 0x2000, 0xaa, 0xffffffff, 0x8, 0x10001, 0xffffa13b, 0x3, 0x0, 0x85, 0x0, 0x8}, r2, 0x4, r0, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:59:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x900, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:59:07 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:59:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xa00, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:59:08 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000001080)={0x0, 0x9, 0x16}, 0x18) fcntl$dupfd(r1, 0x14aaf0ad631ba19c, r0) [ 2824.643488] FAULT_INJECTION: forcing a failure. [ 2824.643488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2824.644617] CPU: 1 PID: 13783 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2824.645226] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2824.645977] Call Trace: [ 2824.646244] dump_stack+0x107/0x167 [ 2824.646582] should_fail.cold+0x5/0xa [ 2824.646938] _copy_to_iter+0x264/0x12d0 [ 2824.647317] ? chacha_block_generic+0x13e/0x200 [ 2824.647746] ? chacha_permute+0x6f0/0x6f0 [ 2824.648128] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2824.648595] get_random_bytes_user+0x173/0x3b0 [ 2824.649017] ? get_random_u32+0x670/0x670 [ 2824.649410] ? wait_for_random_bytes+0x91/0xe0 [ 2824.649860] ? security_file_permission+0xb1/0xe0 [ 2824.650279] ? get_random_bytes_user+0x3b0/0x3b0 [ 2824.650682] random_read_iter+0x65/0x140 [ 2824.651033] io_read+0x2dc/0x11e0 [ 2824.651343] ? __is_insn_slot_addr+0x14c/0x290 [ 2824.651737] ? kiocb_done+0xc90/0xc90 [ 2824.652064] ? mark_lock+0xf5/0x2df0 [ 2824.652385] ? register_lock_class+0xbb/0x17b0 [ 2824.652776] ? arch_stack_walk+0x99/0xf0 [ 2824.653126] ? lock_chain_count+0x20/0x20 [ 2824.653482] ? is_dynamic_key+0x1e0/0x1e0 [ 2824.653860] ? __lock_acquire+0x1657/0x5b00 [ 2824.654237] ? __lock_acquire+0xbb1/0x5b00 [ 2824.654604] io_issue_sqe+0x2e8a/0x77b0 [ 2824.654952] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2824.655401] ? SOFTIRQ_verbose+0x10/0x10 [ 2824.655749] ? lock_chain_count+0x20/0x20 [ 2824.656108] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2824.656556] ? io_connect+0x610/0x610 [ 2824.656888] ? lock_acquire+0x197/0x470 [ 2824.657229] ? find_held_lock+0x2c/0x110 [ 2824.657602] ? __fget_files+0x2cf/0x520 [ 2824.657945] ? lock_downgrade+0x6d0/0x6d0 [ 2824.658303] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2824.658766] __io_queue_sqe+0x90/0x9d0 [ 2824.659106] ? io_issue_sqe+0x77b0/0x77b0 [ 2824.659460] ? __fget_files+0x2f8/0x520 [ 2824.659805] ? io_prep_rw+0x7f5/0x1050 [ 2824.660146] io_submit_sqes+0x44aa/0x8610 [ 2824.660524] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2824.660949] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2824.661366] ? lock_downgrade+0x6d0/0x6d0 [ 2824.661732] ? find_held_lock+0x2c/0x110 [ 2824.662084] ? io_submit_sqes+0x8610/0x8610 [ 2824.662462] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2824.662877] ? wait_for_completion_io+0x270/0x270 [ 2824.663292] ? rcu_read_lock_any_held+0x75/0xa0 [ 2824.663689] ? vfs_write+0x354/0xb10 [ 2824.664008] ? fput_many+0x2f/0x1a0 [ 2824.664322] ? ksys_write+0x1a9/0x260 [ 2824.664649] ? __ia32_sys_read+0xb0/0xb0 [ 2824.665004] do_syscall_64+0x33/0x40 [ 2824.665325] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2824.665772] RIP: 0033:0x7fd311e28b19 [ 2824.666092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2824.667639] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2824.668287] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2824.668888] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2824.669491] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.670109] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2824.670717] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:59:24 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x30e, 0x0, 0x0) 09:59:24 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) 09:59:24 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5ad3, &(0x7f0000000740)={0x0, 0x80000000, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x810, r4, 0x10000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 09:59:24 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:59:24 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 35) 09:59:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xb00, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:59:24 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:59:24 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:59:24 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x1, r3}) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r3}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r4, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) perf_event_open(&(0x7f0000001100)={0x0, 0x80, 0xac, 0x8, 0x1, 0xff, 0x0, 0x0, 0x1c1f46afb505a56e, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x60001, 0x80000001, 0x1ff, 0x9, 0x9, 0x9, 0xfffc, 0x0, 0x640a, 0x0, 0x8000}, r1, 0xffffffffffffffff, r4, 0xa) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000001080)='./file0\x00', 0x800, 0x10) pread64(r5, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:59:24 executing program 7: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000010c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000001080), r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:59:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xf00, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2841.425279] FAULT_INJECTION: forcing a failure. [ 2841.425279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2841.427650] CPU: 1 PID: 13815 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2841.428337] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2841.429115] Call Trace: [ 2841.429763] dump_stack+0x107/0x167 [ 2841.430564] should_fail.cold+0x5/0xa [ 2841.431415] _copy_to_iter+0x264/0x12d0 [ 2841.432298] ? chacha_block_generic+0x13e/0x200 [ 2841.433317] ? chacha_permute+0x6f0/0x6f0 [ 2841.435341] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2841.435891] get_random_bytes_user+0x173/0x3b0 [ 2841.436941] ? get_random_u32+0x670/0x670 [ 2841.437893] ? wait_for_random_bytes+0x91/0xe0 [ 2841.438373] ? security_file_permission+0xb1/0xe0 [ 2841.440898] ? get_random_bytes_user+0x3b0/0x3b0 [ 2841.441398] random_read_iter+0x65/0x140 [ 2841.441978] io_read+0x2dc/0x11e0 [ 2841.442781] ? kiocb_done+0xc90/0xc90 [ 2841.443643] ? mark_lock+0xf5/0x2df0 [ 2841.444496] ? lock_chain_count+0x20/0x20 [ 2841.445430] ? stack_trace_consume_entry+0x160/0x160 [ 2841.446600] ? mark_lock+0xf5/0x2df0 [ 2841.447441] ? lock_chain_count+0x20/0x20 [ 2841.448390] ? __lock_acquire+0xbb1/0x5b00 [ 2841.449350] io_issue_sqe+0x2e8a/0x77b0 [ 2841.450280] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2841.451510] ? SOFTIRQ_verbose+0x10/0x10 [ 2841.452440] ? mark_held_locks+0x9e/0xe0 [ 2841.453357] ? io_connect+0x610/0x610 [ 2841.454250] ? lock_acquire+0x197/0x470 [ 2841.455150] ? find_held_lock+0x2c/0x110 [ 2841.456071] ? __fget_files+0x2cf/0x520 [ 2841.456976] ? lock_downgrade+0x6d0/0x6d0 [ 2841.457939] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2841.459179] __io_queue_sqe+0x90/0x9d0 [ 2841.460077] ? io_issue_sqe+0x77b0/0x77b0 [ 2841.461031] ? __fget_files+0x2f8/0x520 [ 2841.461959] ? io_prep_rw+0x7f5/0x1050 [ 2841.462837] io_submit_sqes+0x44aa/0x8610 [ 2841.463810] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2841.464945] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2841.466083] ? lock_downgrade+0x6d0/0x6d0 [ 2841.467015] ? find_held_lock+0x2c/0x110 [ 2841.467949] ? io_submit_sqes+0x8610/0x8610 [ 2841.468929] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2841.470110] ? wait_for_completion_io+0x270/0x270 [ 2841.471236] ? rcu_read_lock_any_held+0x75/0xa0 [ 2841.472258] ? vfs_write+0x354/0xb10 [ 2841.473095] ? fput_many+0x2f/0x1a0 [ 2841.473949] ? ksys_write+0x1a9/0x260 [ 2841.474801] ? __ia32_sys_read+0xb0/0xb0 [ 2841.475700] do_syscall_64+0x33/0x40 [ 2841.476510] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2841.477645] RIP: 0033:0x7fd311e28b19 [ 2841.478496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2841.482695] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2841.484419] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2841.486058] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2841.487695] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2841.489320] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2841.490955] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:59:24 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:59:24 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x6) 09:59:25 executing program 3: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) creat(&(0x7f0000000000)='./file2\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="34010000170001000000000000000000fe8800000000000000000000000000010000000000000000e000000100000000000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000000000000000000011000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000008000000008f0000000000027f00000100000000000000000000000011360000000000000a00000000000000cb3ed02033c623f6c5ca4fa22d7c3cfa1569ea4b1bac606180d94c30479c4a63f33910bdbbb72dd4d7ea709222ca324fc1c8feffffffeef248d017bfd12aed74f00a02e06ab9602dc4a77ca9434ae2caa9410bfee9f4628df51e4ffe5e8b3b915d1dbe9ea90af84ce145800a8e0042d788f21d7652289eec9606f58678b2c509f00900000000000000e408", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000f3dcd223e9b1d2a000000000000000000000000000000000000000000000000000000000000000000000000000010000001200000000000000000000000000000000000000000000000100eb272851bc431081000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000c000800084ea7f49e4ea5fbde25db5a76023f90e669ba75f120033171a430f356cc35aff9d30e2fd12a4b45a99918f531328a06f98a3db383d2e99aa2adfffa2940119fa83a8006471074e239839aa3b7a2a9516bf1520779165d3695c3d185d5e70cd12e103d0eff12cd7a"], 0x134}}, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000040)={{}, {}, 0x0, 0x6}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x80000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r3, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r3, 0x0, 0x200f5ee, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) 09:59:25 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 36) 09:59:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x1100, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2841.774545] FAULT_INJECTION: forcing a failure. [ 2841.774545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2841.778080] CPU: 0 PID: 13838 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2841.779808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2841.781662] Call Trace: [ 2841.782178] dump_stack+0x107/0x167 [ 2841.782985] should_fail.cold+0x5/0xa [ 2841.783794] _copy_to_iter+0x264/0x12d0 [ 2841.784574] ? chacha_block_generic+0x13e/0x200 [ 2841.785645] ? chacha_permute+0x6f0/0x6f0 [ 2841.786444] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2841.787047] get_random_bytes_user+0x173/0x3b0 [ 2841.787497] ? get_random_u32+0x670/0x670 [ 2841.788190] ? wait_for_random_bytes+0x91/0xe0 [ 2841.789174] ? security_file_permission+0xb1/0xe0 [ 2841.790177] ? get_random_bytes_user+0x3b0/0x3b0 [ 2841.791142] random_read_iter+0x65/0x140 [ 2841.791931] io_read+0x2dc/0x11e0 [ 2841.792770] ? kiocb_done+0xc90/0xc90 [ 2841.793269] ? mark_lock+0xf5/0x2df0 [ 2841.793644] ? lock_chain_count+0x20/0x20 [ 2841.794068] ? stack_trace_consume_entry+0x160/0x160 [ 2841.795299] ? lock_acquire+0x197/0x470 [ 2841.796080] ? __lock_acquire+0xbb1/0x5b00 [ 2841.797078] io_issue_sqe+0x2e8a/0x77b0 [ 2841.797569] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2841.798086] ? SOFTIRQ_verbose+0x10/0x10 [ 2841.798513] ? lock_chain_count+0x20/0x20 [ 2841.798921] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2841.799497] ? io_connect+0x610/0x610 [ 2841.800236] ? lock_acquire+0x197/0x470 [ 2841.801150] ? find_held_lock+0x2c/0x110 [ 2841.802052] ? __fget_files+0x2cf/0x520 [ 2841.802892] ? lock_downgrade+0x6d0/0x6d0 [ 2841.803707] __io_queue_sqe+0x90/0x9d0 [ 2841.804463] ? io_issue_sqe+0x77b0/0x77b0 [ 2841.804971] ? __fget_files+0x2f8/0x520 [ 2841.805364] ? io_prep_rw+0x7f5/0x1050 [ 2841.805839] io_submit_sqes+0x44aa/0x8610 [ 2841.806672] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2841.807197] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2841.807674] ? lock_downgrade+0x6d0/0x6d0 [ 2841.808469] ? find_held_lock+0x2c/0x110 [ 2841.809080] ? io_submit_sqes+0x8610/0x8610 [ 2841.809512] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2841.810072] ? wait_for_completion_io+0x270/0x270 [ 2841.811019] ? rcu_read_lock_any_held+0x75/0xa0 [ 2841.812139] ? vfs_write+0x354/0xb10 [ 2841.812861] ? fput_many+0x2f/0x1a0 [ 2841.813676] ? ksys_write+0x1a9/0x260 [ 2841.814465] ? __ia32_sys_read+0xb0/0xb0 [ 2841.815260] do_syscall_64+0x33/0x40 [ 2841.816148] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2841.816720] RIP: 0033:0x7fd311e28b19 [ 2841.817087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2841.821162] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2841.822123] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2841.823102] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2841.824664] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2841.826366] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2841.827949] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 [ 2842.015729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2846.834177] Bluetooth: hci3: command 0x0409 tx timeout [ 2848.882177] Bluetooth: hci3: command 0x041b tx timeout [ 2850.933815] Bluetooth: hci3: command 0x040f tx timeout [ 2851.119547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2851.121836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2851.124645] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2851.174190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2851.176161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2851.179523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2852.978190] Bluetooth: hci3: command 0x0419 tx timeout 09:59:49 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:59:49 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:59:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x5201, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:59:49 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001980)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x2, 0x9, 0xff, 0xb2, 0x0, 0x3606c4f0, 0x20422, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x2, @perf_config_ext={0x1, 0x6}, 0x60409, 0x0, 0x8, 0x3, 0x100000001, 0x1, 0x9d, 0x0, 0x1, 0x0, 0x80000000d24a}, 0xffffffffffffffff, 0xb, r1, 0xb) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00e0\x00']) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000001a40)=0x20) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) recvmmsg$unix(r4, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001080)}, {&(0x7f0000001180)=""/252, 0xfc}, {&(0x7f0000001280)=""/234, 0xea}, {&(0x7f0000001380)=""/42, 0x2a}, {&(0x7f00000013c0)=""/172, 0xac}, {&(0x7f0000001480)=""/244, 0xf4}, {&(0x7f0000001580)=""/60, 0x3c}], 0x7, &(0x7f0000001b40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16=r3, @ANYRES32, @ANYRESOCT=r3, @ANYRES32, @ANYRESHEX=r4, @ANYRES32, @ANYRES32], 0x158}}], 0x1, 0x40000002, &(0x7f0000001800)={0x0, 0x3938700}) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000001840)=ANY=[@ANYBLOB="01000000010000001800fff9", @ANYRES32=r4, @ANYBLOB="ff000000000000002e2f66696c653000"]) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001880)={0x2, {0x2, 0x1, 0x800, 0x7, 0x9, 0x10}}) r8 = openat(r1, &(0x7f00000019c0)='./file0\x00', 0x400, 0x44) r9 = perf_event_open(&(0x7f0000001100)={0x3, 0x80, 0x2, 0x3, 0x1, 0x2, 0x0, 0x80, 0x4004, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000000), 0x677879227a57ae5}, 0x20100, 0xf650, 0x3, 0x4, 0xffffffffffff177a, 0xe4d8, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, r5, 0x10, r7, 0x2) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, &(0x7f0000001a80)={{0x1, 0x1, 0x18, r1, {0x1f}}, './file0\x00'}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000001ac0)={0x1, 0x8, 0x3, 0x0, 0x0, [{{r9}, 0x4}, {{r11}, 0xfae}, {{r3}, 0x8}]}) ioctl$TCXONC(r10, 0x540a, 0x3) ioctl$TIOCSERGETLSR(r10, 0x5459, &(0x7f0000001a00)) 09:59:49 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xc) 09:59:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001080), 0x8000, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000001100)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:59:49 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 37) 09:59:49 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0xd7, 0x420100) fsmount(r4, 0x0, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0xf8b) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2866.388107] FAULT_INJECTION: forcing a failure. [ 2866.388107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2866.389208] CPU: 1 PID: 14331 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2866.389852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2866.390667] Call Trace: [ 2866.390940] dump_stack+0x107/0x167 [ 2866.391323] should_fail.cold+0x5/0xa [ 2866.391699] _copy_to_iter+0x264/0x12d0 [ 2866.392105] ? chacha_block_generic+0x13e/0x200 [ 2866.392575] ? chacha_permute+0x6f0/0x6f0 [ 2866.392975] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2866.393475] get_random_bytes_user+0x173/0x3b0 [ 2866.393927] ? get_random_u32+0x670/0x670 [ 2866.394352] ? wait_for_random_bytes+0x91/0xe0 [ 2866.394806] ? security_file_permission+0xb1/0xe0 [ 2866.395279] ? get_random_bytes_user+0x3b0/0x3b0 [ 2866.395747] random_read_iter+0x65/0x140 [ 2866.396137] io_read+0x2dc/0x11e0 [ 2866.396494] ? kiocb_done+0xc90/0xc90 [ 2866.396863] ? mark_lock+0xf5/0x2df0 [ 2866.397244] ? lock_chain_count+0x20/0x20 [ 2866.397673] ? stack_trace_consume_entry+0x160/0x160 [ 2866.398175] ? lock_acquire+0x197/0x470 [ 2866.398580] ? lock_acquire+0x197/0x470 [ 2866.398975] ? __lock_acquire+0xbb1/0x5b00 [ 2866.399389] io_issue_sqe+0x2e8a/0x77b0 [ 2866.399797] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2866.400306] ? SOFTIRQ_verbose+0x10/0x10 [ 2866.400711] ? lock_chain_count+0x20/0x20 [ 2866.401113] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2866.401618] ? io_connect+0x610/0x610 [ 2866.402004] ? lock_acquire+0x197/0x470 [ 2866.402379] ? find_held_lock+0x2c/0x110 [ 2866.402792] ? __fget_files+0x2cf/0x520 [ 2866.403184] ? lock_downgrade+0x6d0/0x6d0 [ 2866.403589] __io_queue_sqe+0x90/0x9d0 [ 2866.403987] ? io_issue_sqe+0x77b0/0x77b0 [ 2866.404381] ? __fget_files+0x2f8/0x520 [ 2866.404768] ? io_prep_rw+0x7f5/0x1050 [ 2866.405159] io_submit_sqes+0x44aa/0x8610 [ 2866.405565] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2866.406073] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2866.406564] ? lock_downgrade+0x6d0/0x6d0 [ 2866.406985] ? find_held_lock+0x2c/0x110 [ 2866.407380] ? io_submit_sqes+0x8610/0x8610 [ 2866.407816] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2866.408297] ? wait_for_completion_io+0x270/0x270 [ 2866.408759] ? rcu_read_lock_any_held+0x75/0xa0 [ 2866.409220] ? vfs_write+0x354/0xb10 [ 2866.409570] ? fput_many+0x2f/0x1a0 [ 2866.409929] ? ksys_write+0x1a9/0x260 [ 2866.410314] ? __ia32_sys_read+0xb0/0xb0 [ 2866.410703] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2866.411219] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2866.411713] do_syscall_64+0x33/0x40 [ 2866.412072] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2866.412576] RIP: 0033:0x7fd311e28b19 [ 2866.412936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2866.414725] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2866.415472] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2866.416158] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2866.416856] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2866.417543] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2866.418250] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 09:59:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xf000, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 09:59:49 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000001280)={0x5, 0x80, 0x0, 0x8, 0xe0, 0x9, 0x0, 0xcaa9, 0x40, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000001440)}, 0x8000, 0x7e1c, 0x6b69, 0x8, 0x2, 0xe5, 0x1, 0x0, 0x0, 0x0, 0x10000}, r1, 0x1, r0, 0x2) perf_event_open(&(0x7f00000011c0)={0x5, 0x80, 0x0, 0x9, 0xf8, 0x1f, 0x0, 0xa830, 0x1810, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x522e, 0x4, @perf_config_ext={0xffffffffffff1000, 0x10001}, 0x11, 0x80000000, 0x8001, 0x2, 0xd18a261, 0x17, 0x4, 0x0, 0xfffff531, 0x0, 0x80}, 0xffffffffffffffff, 0x8, r3, 0x0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r4 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="24000000fb82343ffcb6354f78af6b42182d3ab70a542392850acb780e08ea4345e15b3b936469a0e5fc62eccb23c804e5455f9e95f10e5a78290b14e0aa72eb3793b15b221f488f3c66468d73112054ef623f5112c894fcaef8686d6abd4e0a1d03a1cde54e37f135454f42e5d32954aeb6b865726e762299643acdacef8b81b54fafde73de1bdec2edb6659810f34507f368334fab1a73d205388cffde5e41659c91aab32e36d0dd92edde7f4e", @ANYRES16=r6, @ANYBLOB="010000000000000000000e00000010000280080002000000000004000400"], 0x24}}, 0x0) r7 = syz_io_uring_complete(0x0) getresuid(&(0x7f0000001240)=0x0, &(0x7f0000001580), &(0x7f00000015c0)) ioctl$TUNSETOWNER(r7, 0x400454cc, r8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xfffffffffffffebb, &(0x7f0000001080)={&(0x7f0000001100)={0x48, r6, 0x8, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x861b79cd95f153ad}, 0x4000) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001300)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d4}, 0x8890) 09:59:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x400) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 09:59:49 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 09:59:49 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x12) 09:59:49 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 38) 09:59:49 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000080)={0x4, 0x3, 0x7, 0x9}) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 09:59:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x80000, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2866.715855] FAULT_INJECTION: forcing a failure. [ 2866.715855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2866.718986] CPU: 0 PID: 14354 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2866.720690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2866.722741] Call Trace: [ 2866.723400] dump_stack+0x107/0x167 [ 2866.724283] should_fail.cold+0x5/0xa [ 2866.725215] _copy_from_user+0x2e/0x1b0 [ 2866.726197] iovec_from_user+0x141/0x400 [ 2866.727186] __import_iovec+0x67/0x590 [ 2866.728152] io_import_iovec+0x581/0x1120 [ 2866.729167] ? io_complete_rw+0x230/0x230 [ 2866.730208] ? kiocb_done+0x16b/0xc90 [ 2866.731142] io_read+0xe14/0x11e0 [ 2866.731996] ? kiocb_done+0xc90/0xc90 [ 2866.732934] ? mark_lock+0xf5/0x2df0 [ 2866.733852] ? lock_chain_count+0x20/0x20 [ 2866.734894] ? stack_trace_consume_entry+0x160/0x160 [ 2866.736160] ? lock_acquire+0x197/0x470 [ 2866.737136] ? __lock_acquire+0xbb1/0x5b00 [ 2866.738206] io_issue_sqe+0x2e8a/0x77b0 [ 2866.739180] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2866.740455] ? SOFTIRQ_verbose+0x10/0x10 [ 2866.741444] ? lock_chain_count+0x20/0x20 [ 2866.742483] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2866.743770] ? io_connect+0x610/0x610 [ 2866.744709] ? lock_acquire+0x197/0x470 [ 2866.745695] ? find_held_lock+0x2c/0x110 [ 2866.746705] ? __fget_files+0x2cf/0x520 [ 2866.747668] ? lock_downgrade+0x6d0/0x6d0 [ 2866.748697] __io_queue_sqe+0x90/0x9d0 [ 2866.749668] ? io_issue_sqe+0x77b0/0x77b0 [ 2866.750695] ? __fget_files+0x2f8/0x520 [ 2866.751691] ? io_prep_rw+0x7f5/0x1050 [ 2866.752663] io_submit_sqes+0x44aa/0x8610 [ 2866.753708] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2866.754943] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2866.756123] ? lock_downgrade+0x6d0/0x6d0 [ 2866.757135] ? find_held_lock+0x2c/0x110 [ 2866.758123] ? io_submit_sqes+0x8610/0x8610 [ 2866.759112] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2866.760218] ? wait_for_completion_io+0x270/0x270 [ 2866.761318] ? rcu_read_lock_any_held+0x75/0xa0 [ 2866.762403] ? vfs_write+0x354/0xb10 [ 2866.763248] ? fput_many+0x2f/0x1a0 [ 2866.764077] ? ksys_write+0x1a9/0x260 [ 2866.764952] ? __ia32_sys_read+0xb0/0xb0 [ 2866.765901] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2866.767102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2866.768269] do_syscall_64+0x33/0x40 [ 2866.769112] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2866.770324] RIP: 0033:0x7fd311e28b19 [ 2866.771166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2866.775395] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2866.777117] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2866.778767] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2866.780399] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2866.782056] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2866.783701] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:00:07 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:00:07 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r2 = epoll_create(0x80000000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r7, r6, "66811f68e0c440bba4bcf609493241b2512dbb6769ef1fdb21219441b9d2937255c56ea8b443729c72bc47cf6386f73b7ce88432ac6f99b63a93b89e7443b46a773671dded77dc24ba79debef1df5ffcd9e2222930e25f8b7e1873aae1853d7d55b7b3b64a43657809e8ea816519bc0c7323593b9e24a473e537db27b2a3ba9b30d958d7ff8d4867d47df99ca9958a196ce0c3c2c20e2a72af42aafe94c107a043d58527121953dfabf2d3ba6f3e7b2f09c47a4a55c3f5a3e68724037035d781567270a828be9bbe626a85ac9fe77bfa461f8903fcd4986a3dcc6fa6ec88fc174630b23dd02e3cf61e2117f78c9d99aa7daf6f8a7d6c4a01ad17f50051be2848", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001e00)={r7, r3, "8baa8eca45b79fca915400ff0aca6c4b226dbae645b56bbea38e628df01372d21dc1a10ad9bba7fee6aaae926c3909bd15b48f80078f939f0594d3d49a1fe2b5e7857f367f2d6b3c334b77c2cff9d2bb2f72ab473ee9cbbf2383d9105600ba6364d2c0eda79358662dd801aafa108d7cdce307206a0d606113ebdd16d2fa815d1ff2170b80ea817717e461ef198f0e54bc71a205894f6b538ffe2a9297a387a5737c30f6267a2719b30ded93b44030df7397061d270f8af6ccc6f2048745f88793acb8b6224b0705f2afb8a09b3c3cd8f8be2929dd24354c80c78ca878dc8b23ed33963609f5d7b80a67bc5d82c64f9cde2e8aa3fb72b5905e3f75f707481cc3", "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"}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f00000001c0)=r4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001100)={"392047978f79973d626530eab17cc97f", 0x0, r4, {0x1c000, 0x7ff}, {0x9, 0x1}, 0x0, [0x9, 0x7, 0x4, 0x7fff, 0xfff, 0x2, 0x3ff, 0x8001, 0x2, 0x8, 0x9, 0xed0, 0x0, 0x3, 0x1, 0x9]}) 10:00:07 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xfffbfffffffff6e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x1, r2}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r3, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) perf_event_open(&(0x7f0000001140)={0x1, 0x80, 0x3, 0x80, 0x0, 0x40, 0x0, 0x6, 0x802, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3a7, 0x2, @perf_bp={&(0x7f0000001100), 0x4}, 0x0, 0x401, 0x5, 0x8, 0xffffffffffffff00, 0xfffffffb, 0x3ff, 0x0, 0x1}, r2, 0x3, r3, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x10000000}) 10:00:07 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x98de}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x41002, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat2(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x101000, 0x2, 0x18}, 0x18) pwrite64(r6, &(0x7f0000000340)="25e5e313a718955d17659bb1e5c748c84a812b76e91a07d7931736f772231f97649d352a9bcb8827dd51239d0859982437d4b68b5616ed9021dfa4e9ac3ac6c49743d17982762f2bb90e583cf6cdf4b9cef2923fa744498ad53d84f84ef445611cc3908d5d908170453e008455d148a592937cbf2f98a4b393fc9af0f98fabcda310", 0x82, 0x6a) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x540a, 0x3) r8 = openat$cgroup_pressure(r4, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r9, 0x540a, 0x3) getsockname(r4, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000400)=0x80) syz_io_uring_submit(r5, r2, &(0x7f00000004c0)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x401, &(0x7f0000000480)=[0xffffffffffffffff, r7, 0xffffffffffffffff, r3, r8, r9, r10], 0x7}, 0x2) 10:00:07 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x18) 10:00:07 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:00:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xf0ffff, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:00:07 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 39) 10:00:07 executing program 7: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)={0x120, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x3, 0x0, 0x0, 0x80, 0x8c01, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x1, 0x9, 0x4, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 2883.994506] FAULT_INJECTION: forcing a failure. [ 2883.994506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2883.997700] CPU: 1 PID: 14373 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2883.997726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2884.001242] Call Trace: [ 2884.001855] dump_stack+0x107/0x167 [ 2884.002745] should_fail.cold+0x5/0xa [ 2884.003652] _copy_to_iter+0x264/0x12d0 [ 2884.004725] ? chacha_block_generic+0x13e/0x200 [ 2884.006080] ? chacha_permute+0x6f0/0x6f0 [ 2884.007058] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2884.008231] get_random_bytes_user+0x173/0x3b0 [ 2884.009408] ? get_random_u32+0x670/0x670 [ 2884.010453] ? wait_for_random_bytes+0x91/0xe0 [ 2884.011788] ? security_file_permission+0xb1/0xe0 [ 2884.013018] ? get_random_bytes_user+0x3b0/0x3b0 [ 2884.014140] random_read_iter+0x65/0x140 [ 2884.015100] io_read+0x2dc/0x11e0 [ 2884.015926] ? __is_insn_slot_addr+0x14c/0x290 [ 2884.017065] ? kiocb_done+0xc90/0xc90 [ 2884.018136] ? mark_lock+0xf5/0x2df0 [ 2884.019185] ? register_lock_class+0xbb/0x17b0 [ 2884.020257] ? arch_stack_walk+0x99/0xf0 [ 2884.021217] ? lock_chain_count+0x20/0x20 [ 2884.022219] ? is_dynamic_key+0x1e0/0x1e0 [ 2884.023208] ? __lock_acquire+0x1657/0x5b00 [ 2884.024396] ? __lock_acquire+0xbb1/0x5b00 [ 2884.025616] io_issue_sqe+0x2e8a/0x77b0 [ 2884.026654] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2884.027896] ? SOFTIRQ_verbose+0x10/0x10 [ 2884.028846] ? lock_chain_count+0x20/0x20 [ 2884.029822] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2884.031051] ? io_connect+0x610/0x610 [ 2884.032107] ? lock_acquire+0x197/0x470 [ 2884.033144] ? find_held_lock+0x2c/0x110 [ 2884.034244] ? __fget_files+0x2cf/0x520 [ 2884.035178] ? lock_downgrade+0x6d0/0x6d0 [ 2884.036156] __io_queue_sqe+0x90/0x9d0 [ 2884.037072] ? io_issue_sqe+0x77b0/0x77b0 [ 2884.038071] ? __fget_files+0x2f8/0x520 [ 2884.039015] ? io_prep_rw+0x7f5/0x1050 [ 2884.040132] io_submit_sqes+0x44aa/0x8610 [ 2884.041220] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2884.042554] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2884.043684] ? lock_downgrade+0x6d0/0x6d0 [ 2884.044784] ? find_held_lock+0x2c/0x110 [ 2884.045729] ? io_submit_sqes+0x8610/0x8610 [ 2884.046769] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2884.047900] ? wait_for_completion_io+0x270/0x270 [ 2884.049033] ? rcu_read_lock_any_held+0x75/0xa0 [ 2884.050156] ? vfs_write+0x354/0xb10 [ 2884.051158] ? fput_many+0x2f/0x1a0 [ 2884.052233] ? ksys_write+0x1a9/0x260 [ 2884.053223] ? __ia32_sys_read+0xb0/0xb0 [ 2884.054184] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2884.055420] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2884.056624] do_syscall_64+0x33/0x40 [ 2884.057496] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2884.058900] RIP: 0033:0x7fd311e28b19 [ 2884.060096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2884.064483] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2884.066297] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2884.067973] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2884.069678] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2884.071350] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2884.073214] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:00:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x1000000, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:00:07 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 10:00:07 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:00:07 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0xc8002006}) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:00:07 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1e) 10:00:07 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001880)={0x0, r0, 0x7fffffff, 0x45fe, 0x8, 0xffffffff}) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat(r0, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) write$P9_RWSTAT(r0, &(0x7f0000001840)={0x7, 0x7f, 0x2}, 0x7) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x1, r3}) recvmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000001400)=@abs, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001480)=""/248, 0xf8}, {&(0x7f0000001580)=""/221, 0xdd}], 0x2, &(0x7f0000001680)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x8000) sendmsg$unix(r1, &(0x7f0000001800)={&(0x7f0000001100)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001e00)="ab62bc32fe75e99599bb1728ffee223403d2fe563d9b420e8495af4ea496baa1e13444b9c3f3f40b8d412798084ecad8fb601cd0b52e038278b8c4d12da424d1822f8ec299741453e63a71646b0c005e91f3062b0f678ec034d1111c12045ac932236c800dd5ddea3ac61afa669ad159eb8398a96ff2837f8c04deadf16a5f04a2524ca870cfe787c3a5733bcd12600cfbf26d0b63f6d4fd841eb90af93a93e933773fec2cebf5e16f02b952a9a826806db8173338fda0a67c6e978add17c9122c0a2ce3c34a98fda271c42f5aa123465a4c67fd301bcf769d991f00a8bd19ba29dbd746e042fc3b69a413c062dc2d120dae26a0e67d1e7b52634153c46043d829f43b71bd80a6663005d1bc715079e17a7b0e721d00a7faf65fca372656c5ef027ccccb8e85236d94145398f478c0cc21b6606d180fac3328d93f44a9e4d7aebff8380bfb9f66432674a7e6f3b2320d0988dbc659132519332bb0b6fdcfea3174c1eb3ad564e8e79d7b2f9f0364cc117d3a6724e925f87a7431b6855e302a333d23d5ae9c77d46cab9ef0a4fada722ae3f2c6253ebc7ecbe023f55997f4c65a80566a4ecebcaa23cb2d6aa91bf84bd5bba5d3e484ddc572cff4d1da87679b6ce7bfa8e4612a6e319662131db5b8df4d24c82a25801d0029efc947ceffe4174c99ad037b2e0403b98a80d075c60741dde21c20e1026d8e2ad1192b1473b84455998537ad7717abda6cf3ce0cad786399cf95a4918a7f5e63444b2486b044cba4664ba590e1560ba8b449604fffb76af9b590ccc26453cbe955ebeb6651f20becc03171f8f3325a47ec4b27b92896e1d22a92aa4af12f17daba509428ce1179dd70c5bbda3c43a8bfd44a53b0a52003ee03731829d518726c7c4dc9d435be06ad45c2f32a18de3186bb9ccabfd32909259459f48bdd9ff94d256f6f1d481fabf55971b55f9952106505518861669753584d878179b55d7cdff4dc4a7dae76c17df82825e0ba61c80038eaee377559c087f07f6817d7e4aafa36750f048814bd82a071719af468a4c3ce630515e05ff1133e06b96672020287d7438ac9b059f0755422094dccf84efe2c8b6bd4bd9a38b10eb1b870ab18be2748047eac23768b90a4fc7967dc237d01d5087b7f27d48a25f0ce48d6acb0cca841d34a080c197293d48dd7ad05608e358d69ab4d427f05189ae7d2587611adadab2d9feb196c6e0ac7660367ca979648e08b0d057848f3f3597e38d8dae33d9f1f9f8179066b0f056acf3fa7aef8850680d0e6be4cf68a2764a52f0c39c4125a60fbe174a4abd8c81ecd65ef2a43e220c2cd5563cf7b2db57d35380f72bf6b4390b608853050c9c71939c157de9d441a5a247b4ee17a873fb8604c0f06b3dc3d31ef6f4d68a08dfdaac62d058eac51569826190adefb3ea0746797af56733384e6c4bd9c09a7ba7269a95488221c26cdb541eda6c1fb2fac1a28078d2b926b1df2fd66f33b58061f70b696199b194954895b21336502c4af58ce21f984dc4c6dcb1cd77a633f2023d3f44a76dbaf6957291148100f4ef655b0f56fd91a938a5f4eb87d1e0687d59e9dd2954a6f21ec1aa17a3a4c637d063ea06bf78de728fada930512bd4944ec5a3fff0f192fe68cf1e97fee81317064c4963792a3fa7ae1dbf26c3737b057e24b59d69e223e940cfea587b4090a857d035ac817561f421e9d7056f5247548599d7b391074521b7e3f8ee466ada5333ecd3a3262976f5009c16724f8b10ce728cc01ac8a64ed373997d9fcaf437671c621579f510aa488f976c50743622a8af098122ac6300266d939d66f2523345cff08f9eb230ae59efc1aaaffbe9b1d827827d43f08c1eff392a307e035db4cfcdff79fd9ce6dfd451480ca9960aa4722846521ca681661299f1bd0d031b7da54525f2a8d5abc79dd37409ab4daf86900c34b77b9423cd26892b7ebba8c3ab83f38e350554240622d49351e1f265dc2ee0daa3a19d2d3b06429d0e30f843991d36add2887d5bcc9fc8fcdc43388fb9aa30439526de4970388af6f459db979b7b5707d322c2e1434ec42b72c4472ce76799045695e30e1eeb58aff287d5b6e6c683cb21cb311ea588fbb9ddf0f5d6c18b439a89c79d91090f5578a924de245a7970f8c7231b8c42900919a93ba7053ee4f3ae4efbd8f7c4e87a9bb441b6a13dd57406ecd4a3939f06daa6aefdef45573fd241941bb4201a82ab8563f254da016a4c13188214f0f75cb30c393762e9d7cdafa8abeccde5c194f9baca7e4a43ea686c3f9ccb879bf8995ad86df8d6d3b5e95c7bb097e157dd89fabec82875b9bf499addd737f476dce3d8584b551adc893bf5fa999e66fdd5aac82d39040538c60879e66785b1357b0fdd1f4ecba8ae779b2f73dd172feb16c3353b8df0d43974a91f9b52ec147fe2b8ee8fe27c2bcc0008c540e4fc7769e362006e3316691d64c7cb731b060eb170ae9901e043a3ba5b359c27bb12ccd41d0e481a41dcd918edd7c79cfe02f1cd38a72d14af6c985939d8ae368631054f75935fe372148c47ad96c5295ad0613aebf6d241a113940df5c36f4bba7ddbf8b556ead384e558b9a89b2ca5e4ba353b152b1ec207b37d75a873e71c3dd13863c46ae630abf43b9a40e42fb522910d783e512c661b4eb46cec9961ed52392e97c2563ce84f505b0a2985d9dc0a62c89fb1cd5ba55eb4122781e6dc1821d7c40366060e18d65ea2dfac473b7fe8268536d226f2c4d6df0ea9aaee4ecbf31e07175805018a1c41e72643ccb1221cb2c2e788ea373ed6cb906ad980edc706e70fd1a67bd46d4b8b4fd7500396fa4639208d8cb8055250358c454c55a27f14a83349c7c33b9732d8874cd781d36eb0387e8973d5fb246d7a5c92c32e2b6cb3dc4c6205c3ae116e7b0423c490d081595912589e39bec2b7b94173af369b1bbf3dee80263496c4d976da8ac4898e9116fb9c8181b100c8c48acc2a44fc25b67d724b4e3a7aa3c7e6d5d7d7ff196cbe3f595d7af3cd849f6c43096a7f44927eb0fb88c260a8ece0a7d1ffe24250905ec1f5dcbd9e9d0cdbd62ea5b24a0bc76de7ce92d3126d42bf97b39e1391cdf9e49a36c8bb502902475049387a9d4bffe75cb61c56dbcbe1bd431112f912172deb877aba0fb0a2ed7f82f3259d0fa03871ba0e0a907173990f575c755fa4645ec50efb6ddcc57ed42fb25667c91355fe2098bd36f63854e53e66556e424db63c09f4d5ddbe4994d28a52eb770ee80705b085e023854ca911891541b3d14bd2b97e48d84c3f2af453809d9a47043c89d1b58dd0b2f5caaea7f1e920d6a63b7aa9a621cdef6f2ebf4687088d3125b060b139b3d3dfa99fc9db42a5ad93b9f21c8923b97f4f83f5578f43247f2f11a09d4ff2ff4498c31e53b0f6a3e89aa701346ded5f223674c932fa8df44bdff5a5b1ac5accadfe9204897081c13ee84e5d76b1bc182cf9b7fe312f5a631529368778da37b5c2aa9d264659ae4b8bd3896ebd0112785a3e5aa80821fd0bf78e0f8273f47024b6027c55ed9b2ccfddfd4f22e97c42e4729dcc5dcd28f7c36983f736707c709cc30ec3d2c397aa7e553604104ec5e6571df4092d2b29bc1d750f19208c723f180bfd25b34b1efedc4a01cadba929126348d7ac7f73e7f854b5ac8d522999c06548b9f2aaff519f1bdd619707d37427feae5e4fbdc00108276566130bdde9ce5e5507b7326a46896f9fda18b793df6172225d438f9afe48ccf24056d82d794cfff5e155479368fdce28a2e3a2711ea94c11ad370ccd2668bfe55c49ed9c501d1b3da25cb96ff7d404cec6a47f3442b356692f70531542450c8d592d3a732d3f3e637b242291f916204aed185ff4371981134dae6aaad5b5f144f652cdf12bb20e012c9f0394e8d9defbd9c05022d2c675f173a11962c9714b7590474aea5764117755b029a08cc0ab518d15c5306506b7658e6efce51ae7e3a6dfc350002612ac7364cfc50ee86ccd207e11205e7809b9d20bbdd8a0ca91e1f1d7117b141ae3107dd9492018833f44ca0550e1a0ee98cbc3257f617f1f03f573a674ed05f41ce525a48694a30e675d95a7a3c947e7eea43c03515c04f4a964e6aeb21fbd54554195b799fc9114038a70c39c39919bc2254c350c499b23f688052cef6d84369c7a0f1767d5b4cf0f89869b97b4974271eb0aacd10bffe7006145f48705207df6972602bf4a2e57f7f2a0375b49c396e6ae7de7608bb1d51d955f6c8db5aff7266e29d65bf21b9189ae9bfbf7972bde7ad43485e5d1fe12ed15aee18f720c8d9f646483782a89e48aa023c3edbdfca67f810b2f43e158faffd5c498149eaf681ad95202a4b546936673c7303e806112ae6cdace1cd7f70be4544b20009524ce9cbfcc4e61ab63cd9a7fef4109fae766ff65be3a3716490046a8c8c14bd16e218b6bca970842f9199d692b87b6c3b2ec5b3ad93ec1b1ce5f1bec6cbed8304b76fffaa161c6ac6b03c0e376b18a6b48cfc7ae1932371dd48968b936fe25b5c351f11adf3ed00b9b3a3fd3f9ac34b2e1bc254ad84ec537d6bcf674ff9997659e65a0d6e2b1df4b427956a04b5eac2ae491e028e479925a386724ea33071f78c31096ec8fc33f03e4bfa34638330f0ed44933380b50e3292884516f0ad5d983e748f9b886813f45d9d227abdc5360c3c4cfd3f883d4e69d7cdef11809510e60eb2bd4d30c3f51e5ea7f2b4ac2ece808c5c8e92e17006d4f9b0c94ab6a19fe3fac1320bf9979c1a1c0c0dae03e1b802367eb348e236d57c464d5190010368bf4524b7876bb6e63d7a309aba835ee968c3674d8f0ea3983fd5de0fd4438eee7b6e9c598ce9fa903d09a2b2c4c5a8ddf26a84530d1f66f3a67670cf5c2ca882c9e763be0457762625f9113ce32ce87efc6a46c1dc4304ea04f2aaf2fb37a7e993ab70e915aef5ee368464e1a8c2c9352df4d7d09dcda440de43febee3d4f0d7e597f39e385e08e76236e4bf195bdcf30b1148535d3119c1cda37eb37a87327a0933570b3324f732697f8381dd7fa928a60d66923f455679d3f3cda436da063589131cb570a0b431f04e564c1915f64aad207c1da52ca7cbb03cb08047aa750a287fffc27130472f288e114ab209751b11a1e26f755357f5bcfc4add689c1cd9d9ca1075f9911ab87e1b8ff854cc40de4889ac1dc8395ff5fccc292ef70304a7d45e4514e2af38eeeca80b454c474776f48d99832639cbc70faec8e8f777c5b1303e53504fd10680aae34f18ce503c483040575919e8fbe88ab6fe7cc97041a694de83fd7e85b4881a968b8084b3b21324c2702396a89b110a1c7522a773af4d3ae564d67bb3ea0e078e800df54eec968c71946d80cc8279c5aacd7052893d385041305901511e197a80477cf3154a7ea924f6acb8b8114aafd44eead0d6181f828c6773016a634a2dfa8837a8ecc4c8e3d2321e44b839d9d577c0a5f04987edd6de29eae5a25f980afb36e4e4cbda66f86d133343263e79c2b0d3283b5f670e5986307df8de674c525a1ec59b2dd3281525c850fe37df838f4b0ba178e9dd26ecfb46fa4d8b2e7d54a3beddda26d1843430edd8f553b60de79d7256fbede62a71b6bfa57cbed5e5e31cbc76ecd830c8e8aff29c3386a683c7f734e01ad1b9fb8d55f8dec4d0ce3862bb50b8ff275aa96afc2b120b211ef35ef8a65fc313a12e82c11bfd0c9138d91badce3ae84f51a2b8be3871f6e1a79085785edc399dd1b67def2f98c5f6f2a773d6e7b19d3b073aa296030d9d053b230b257242b39affde29190e0c5a", 0x1000}, {&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000000000)="13", 0x1}, {&(0x7f0000001180)="65d3af1a01305083e665e25b95789f6c83bc67773c0360578e4751d7f4a9390a2c7b9a82ac95a335727eff8e2a52c08843e3ffde7e1a896d49ccfe9edade6db7ae9292f7de94b834f7c0d39f87cecd409e05953876966861bf7631ea2064f49b92f33b2eb0b1852e6ae1096a503f4430420dd95d6a8f573f7c2bcca0be558077582c56b259789fd9914e7881b57cb7270283111c3241933703c87015666f98022854cbc7041ce7af8bd57c0c745daae6ef570879e881749310c5a3da00333fc371149c3b896b15a9dffb567d529e19db37fcbc61eb8dd2a3485a", 0xda}, {&(0x7f0000001280)="99750a1cab2eea94b30324cb10c81692cf2f1651997d663cb43b98624e98d1ecd28b6ca868fa12b1057e4c5babee98a385599a384aaa68a935dd1998dde22415d290d4585a5e61c5c48ade863643e0657cd7f66a6c0612880e31604ba84624cdbe6ab90360999293535f5051eea8860c60fde85bb109cb0db955f0c9d24e03599ba2cc1fd0cffdcaf97950c6e3f2a47f3605b407d906ecd564e9539d5e3c0012b346a01ae13f1f32481b215483f6c2280535eb30ade8052f426f419138e6275a97be2781e100", 0xc6}], 0x5, &(0x7f00000017c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, 0xffffffffffffffff}}}], 0x20, 0x400080c}, 0x94) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:00:07 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 40) 10:00:07 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 10:00:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x2000000, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2884.419923] FAULT_INJECTION: forcing a failure. [ 2884.419923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2884.423436] CPU: 1 PID: 14408 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2884.425080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2884.427058] Call Trace: [ 2884.427698] dump_stack+0x107/0x167 [ 2884.428763] should_fail.cold+0x5/0xa [ 2884.429889] _copy_to_iter+0x264/0x12d0 [ 2884.430835] ? chacha_block_generic+0x13e/0x200 [ 2884.431936] ? chacha_permute+0x6f0/0x6f0 [ 2884.432915] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2884.434093] get_random_bytes_user+0x173/0x3b0 [ 2884.435386] ? get_random_u32+0x670/0x670 [ 2884.436700] ? wait_for_random_bytes+0x91/0xe0 [ 2884.437789] ? security_file_permission+0xb1/0xe0 [ 2884.438948] ? get_random_bytes_user+0x3b0/0x3b0 [ 2884.440065] random_read_iter+0x65/0x140 [ 2884.441024] io_read+0x2dc/0x11e0 [ 2884.441851] ? __is_insn_slot_addr+0x14c/0x290 [ 2884.442944] ? kiocb_done+0xc90/0xc90 [ 2884.444017] ? mark_lock+0xf5/0x2df0 [ 2884.445118] ? register_lock_class+0xbb/0x17b0 [ 2884.446294] ? arch_stack_walk+0x99/0xf0 [ 2884.447248] ? lock_chain_count+0x20/0x20 [ 2884.448216] ? is_dynamic_key+0x1e0/0x1e0 [ 2884.449210] ? __lock_acquire+0x1657/0x5b00 [ 2884.450249] ? __lock_acquire+0xbb1/0x5b00 [ 2884.451446] io_issue_sqe+0x2e8a/0x77b0 [ 2884.452666] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2884.453908] ? SOFTIRQ_verbose+0x10/0x10 [ 2884.454873] ? lock_chain_count+0x20/0x20 [ 2884.455857] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2884.457104] ? io_connect+0x610/0x610 [ 2884.458227] ? lock_acquire+0x197/0x470 [ 2884.459327] ? find_held_lock+0x2c/0x110 [ 2884.460294] ? __fget_files+0x2cf/0x520 [ 2884.461226] ? lock_downgrade+0x6d0/0x6d0 [ 2884.462222] __io_queue_sqe+0x90/0x9d0 [ 2884.463144] ? io_issue_sqe+0x77b0/0x77b0 [ 2884.464292] ? __fget_files+0x2f8/0x520 [ 2884.465494] ? io_prep_rw+0x7f5/0x1050 [ 2884.466439] io_submit_sqes+0x44aa/0x8610 [ 2884.467432] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2884.468618] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2884.469760] ? lock_downgrade+0x6d0/0x6d0 [ 2884.470948] ? find_held_lock+0x2c/0x110 [ 2884.472152] ? io_submit_sqes+0x8610/0x8610 [ 2884.473182] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2884.474331] ? wait_for_completion_io+0x270/0x270 [ 2884.475470] ? rcu_read_lock_any_held+0x75/0xa0 [ 2884.475944] ? vfs_write+0x354/0xb10 [ 2884.476311] ? fput_many+0x2f/0x1a0 [ 2884.476676] ? ksys_write+0x1a9/0x260 [ 2884.477191] ? __ia32_sys_read+0xb0/0xb0 [ 2884.477591] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2884.478121] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2884.478688] do_syscall_64+0x33/0x40 [ 2884.479208] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2884.479681] RIP: 0033:0x7fd311e28b19 [ 2884.480021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2884.481677] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2884.482372] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2884.483024] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2884.483831] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2884.484767] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2884.485455] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:00:23 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:00:23 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 41) 10:00:23 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x1, r3}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x1}, 0xfffff8e0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) execveat(r8, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000080)='\x00', &(0x7f00000001c0)='/dev/random\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)=':\\)#{-\x00', &(0x7f0000000340)='/dev/random\x00', &(0x7f0000000380)='{\x00', &(0x7f00000003c0)='/dev/random\x00', &(0x7f0000000400)='@*\xa9),\x00', &(0x7f0000000480)='\x00'], &(0x7f0000000580)=[&(0x7f0000000540)='/dev/random\x00'], 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:00:23 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) preadv(r1, &(0x7f0000001100)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001080)=""/17, 0x11}], 0x2, 0x6f9, 0x20) signalfd4(r1, &(0x7f0000000000)={[0x80000001]}, 0x8, 0x80000) 10:00:23 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x24) 10:00:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x3000000, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:00:23 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 10:00:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0xa00, 0x112, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00', 0x2100, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000001080)) fcntl$dupfd(r1, 0x406, r0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:00:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001100), r0) r3 = syz_mount_image$msdos(&(0x7f0000001440), &(0x7f0000001480)='./file0\x00', 0x7f, 0x2, &(0x7f00000015c0)=[{&(0x7f00000014c0)="9cec4e3f3543f0803ff89998d25b031c1ef3e0a33b3c59ccc5ab17aa5a577f4ccebb836c4e60f94d4b944bff9ae947b344d72ebf", 0x34, 0x10000}, {&(0x7f0000001500)="8a4cd74cc526537e06ddd2b012f70f92679c6477c5314f92b20feb4ff2c7b45cdb2a0b38000e2b25fc7073b4cf25c7fe07b58de8fe772221ba035f87fd140cf6b526a0c313f1b3ae076e77cba50fc2ec25e2126aa7edb5f4ffe7fb5b2dd5cb832845763fa29258645f44bcc757f3c13c006cadccd2163a2e50b7c197fb6464c68dcafc6d3151f56e5830fec181d0f4f29a983980d082f471ebf177df8dff911f484bfdf767d537a993b2c51649dcee064e109dd2b5a353b50c3d58", 0xbb}], 0x22400, &(0x7f0000001600)={[{@dots}, {@nodots}, {@dots}], [{@smackfsroot={'smackfsroot', 0x3d, '@!'}}, {@obj_role={'obj_role', 0x3d, '/dev/zero\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@hash}]}) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000001680)={0x9}) sendfile(r0, r1, 0x0, 0x1) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000001400)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x254, r2, 0xa, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x254}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:00:23 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2a) [ 2900.049669] FAULT_INJECTION: forcing a failure. [ 2900.049669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2900.053701] CPU: 0 PID: 14425 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2900.055445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2900.057497] Call Trace: [ 2900.058109] dump_stack+0x107/0x167 [ 2900.059015] should_fail.cold+0x5/0xa [ 2900.060019] _copy_from_user+0x2e/0x1b0 [ 2900.061048] iovec_from_user+0x141/0x400 [ 2900.062087] __import_iovec+0x67/0x590 [ 2900.063117] io_import_iovec+0x581/0x1120 [ 2900.064188] ? io_complete_rw+0x230/0x230 [ 2900.065293] ? kiocb_done+0x16b/0xc90 [ 2900.066301] io_read+0xe14/0x11e0 [ 2900.067203] ? __is_insn_slot_addr+0x14c/0x290 [ 2900.068368] ? kiocb_done+0xc90/0xc90 [ 2900.069356] ? mark_lock+0xf5/0x2df0 [ 2900.070350] ? register_lock_class+0xbb/0x17b0 [ 2900.071515] ? arch_stack_walk+0x99/0xf0 [ 2900.072500] ? lock_chain_count+0x20/0x20 [ 2900.073507] ? is_dynamic_key+0x1e0/0x1e0 [ 2900.074533] ? __lock_acquire+0x1657/0x5b00 [ 2900.075603] ? __lock_acquire+0xbb1/0x5b00 [ 2900.076622] io_issue_sqe+0x2e8a/0x77b0 [ 2900.077597] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2900.078876] ? SOFTIRQ_verbose+0x10/0x10 [ 2900.079878] ? lock_chain_count+0x20/0x20 [ 2900.080897] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2900.082203] ? io_connect+0x610/0x610 [ 2900.083120] ? lock_acquire+0x197/0x470 [ 2900.084091] ? find_held_lock+0x2c/0x110 [ 2900.085072] ? __fget_files+0x2cf/0x520 [ 2900.086043] ? lock_downgrade+0x6d0/0x6d0 [ 2900.087054] __io_queue_sqe+0x90/0x9d0 [ 2900.088032] ? io_issue_sqe+0x77b0/0x77b0 [ 2900.089042] ? __fget_files+0x2f8/0x520 [ 2900.090032] ? io_prep_rw+0x7f5/0x1050 [ 2900.090989] io_submit_sqes+0x44aa/0x8610 [ 2900.092015] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2900.093222] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2900.094429] ? lock_downgrade+0x6d0/0x6d0 [ 2900.095441] ? find_held_lock+0x2c/0x110 [ 2900.096453] ? io_submit_sqes+0x8610/0x8610 [ 2900.097523] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2900.098708] ? wait_for_completion_io+0x270/0x270 [ 2900.099873] ? rcu_read_lock_any_held+0x75/0xa0 [ 2900.101006] ? vfs_write+0x354/0xb10 [ 2900.101911] ? fput_many+0x2f/0x1a0 [ 2900.102772] ? ksys_write+0x1a9/0x260 [ 2900.103638] ? __ia32_sys_read+0xb0/0xb0 [ 2900.104571] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2900.105745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2900.106941] do_syscall_64+0x33/0x40 [ 2900.107779] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2900.108936] RIP: 0033:0x7fd311e28b19 10:00:23 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000000)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r1}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:00:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x4000000, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2900.109770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2900.117869] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2900.119608] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2900.121228] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2900.122865] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2900.124489] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2900.126097] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:00:23 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r2 = dup3(r1, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r2, 0x10000000) 10:00:23 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 42) 10:00:23 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x80010, r3, 0x8000000) r6 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000340)="d59adf42dc066f03294811e29627fecf2134816cfdddb2f6505bb001b7d713ec164abbda6033eb431a93735e5e10b68a15bfbbdbcb7a685d1da53c4865f904870b0068e0a3388818176a8a2763e190cdb9187401abc986e34e538283445cde1933082a342e9286328c624b052ab358303953227bb661472b9a6f0efeba4e94d2b3b6f6edad357297cd7d9edaebcc16735d7fbf91cbf55fd3c7109cf41932364e16bbead7ea70b2bf2be0", 0xaa, 0x6}], 0x1085039, &(0x7f0000000480)={[{@unhide}, {@session={'session', 0x3d, 0x23}}, {@sbsector={'sbsector', 0x3d, 0x4}}, {@sbsector={'sbsector', 0x3d, 0x8001}}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@seclabel}, {@measure}, {@smackfsdef={'smackfsdef', 0x3d, '@'}}]}) syz_io_uring_submit(r5, r2, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r6, 0x0, &(0x7f0000000240)='./file0\x00', 0x32, 0x200001, 0x12345}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:00:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x500, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2900.414675] FAULT_INJECTION: forcing a failure. [ 2900.414675] name failslab, interval 1, probability 0, space 0, times 0 [ 2900.417327] CPU: 0 PID: 14452 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2900.418113] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2900.419164] Call Trace: [ 2900.419453] dump_stack+0x107/0x167 [ 2900.419854] should_fail.cold+0x5/0xa [ 2900.420639] should_failslab+0x5/0x20 [ 2900.421603] kmem_cache_alloc_bulk+0x4b/0x320 [ 2900.422076] io_submit_sqes+0x6fe6/0x8610 [ 2900.422519] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2900.423779] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2900.424293] ? lock_downgrade+0x6d0/0x6d0 [ 2900.424931] ? find_held_lock+0x2c/0x110 [ 2900.425364] ? io_submit_sqes+0x8610/0x8610 [ 2900.425965] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2900.426488] ? wait_for_completion_io+0x270/0x270 [ 2900.426999] ? rcu_read_lock_any_held+0x75/0xa0 [ 2900.427487] ? vfs_write+0x354/0xb10 [ 2900.427891] ? fput_many+0x2f/0x1a0 [ 2900.428253] ? ksys_write+0x1a9/0x260 [ 2900.428666] ? __ia32_sys_read+0xb0/0xb0 [ 2900.429103] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2900.430479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2900.431798] do_syscall_64+0x33/0x40 [ 2900.432194] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2900.433039] RIP: 0033:0x7fd311e28b19 [ 2900.433463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2900.435357] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2900.436168] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2900.436953] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2900.437776] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2900.438535] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2900.439310] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:00:38 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 43) 10:00:38 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x30) 10:00:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x5000000, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:00:38 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x1, 0x0, 0xba, 0x1, 0x0, 0x100000001, 0x400a, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x3059c2866139565a, 0x2, 0x3fc00000, 0x3, 0x20, 0xfffffc01, 0x5, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x1010, 0xffffffffffffffff, 0x2d80e000) perf_event_open(&(0x7f0000001180)={0x0, 0x80, 0x3, 0x9, 0x1f, 0x8, 0x0, 0x40, 0x4018, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x6, 0x80}, 0x4, 0x1ff, 0x2, 0x3, 0x100, 0x1, 0x1, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x2) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:00:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x11, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:00:38 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000001180)={0xfffffffffffffffe, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x88, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10000}, 0x20000880) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:00:38 executing program 3: r0 = syz_io_uring_setup(0x7979, &(0x7f0000000240)={0x0, 0x0, 0x7f0a94f8a036989b}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x50001) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x1ffffffd, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000040)={0x1, r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x5b77, 0x5661, 0x3, &(0x7f0000000040)={[0x3c1]}, 0x8) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:00:38 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:00:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x6000000, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:00:38 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r2 = dup(r0) poll(&(0x7f0000000000)=[{r2, 0x2}, {r1, 0x400}], 0x2, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x540a, 0x3) close(r4) openat(r3, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x3, 0x1, 0x7, 0x0, 0xffffffff, 0x8, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000001080), 0x9}, 0x1412, 0x4c5, 0x58, 0x5, 0x3, 0xa00, 0x6, 0x0, 0x5, 0x0, 0xfffffffffffffff9}, 0x0, 0x7, r3, 0x0) [ 2915.455347] FAULT_INJECTION: forcing a failure. [ 2915.455347] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2915.456654] CPU: 1 PID: 14476 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2915.457254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2915.458103] Call Trace: [ 2915.458394] dump_stack+0x107/0x167 [ 2915.458856] should_fail.cold+0x5/0xa [ 2915.459237] __alloc_pages_nodemask+0x182/0x600 [ 2915.459751] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2915.460362] alloc_pages_current+0x187/0x280 [ 2915.460885] allocate_slab+0x26f/0x380 [ 2915.461263] ___slab_alloc+0x470/0x700 [ 2915.461706] ? io_submit_sqes+0x6fe6/0x8610 [ 2915.462128] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 2915.462679] kmem_cache_alloc_bulk+0x1ec/0x320 [ 2915.463129] io_submit_sqes+0x6fe6/0x8610 [ 2915.463637] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2915.464128] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2915.464708] ? lock_downgrade+0x6d0/0x6d0 [ 2915.465110] ? find_held_lock+0x2c/0x110 [ 2915.465569] ? io_submit_sqes+0x8610/0x8610 [ 2915.467372] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2915.467974] ? wait_for_completion_io+0x270/0x270 [ 2915.468515] ? rcu_read_lock_any_held+0x75/0xa0 [ 2915.468994] ? vfs_write+0x354/0xb10 [ 2915.469356] ? fput_many+0x2f/0x1a0 [ 2915.469796] ? ksys_write+0x1a9/0x260 [ 2915.470182] ? __ia32_sys_read+0xb0/0xb0 [ 2915.470650] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2915.471167] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2915.472202] do_syscall_64+0x33/0x40 [ 2915.472616] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2915.473127] RIP: 0033:0x7fd311e28b19 [ 2915.473585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2915.475533] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2915.476262] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2915.477003] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2915.477779] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2915.478572] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2915.479262] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:00:38 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x2c, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, &(0x7f0000001080), 0x0) perf_event_open(&(0x7f0000001140)={0x4, 0x80, 0x7d, 0x0, 0x3f, 0x5, 0x0, 0x6, 0x20, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6224, 0x4, @perf_bp={&(0x7f0000001100), 0x8}, 0xd0, 0x3f, 0x4, 0x3, 0xf88, 0x6, 0x1ff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xb, r0, 0x3) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:00:38 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:00:38 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x36) 10:00:39 executing program 7: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) clock_gettime(0x0, &(0x7f0000001580)) recvmmsg(r2, &(0x7f0000001500)=[{{&(0x7f00000010c0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000001140)=""/143, 0x8f}, {&(0x7f0000001600)=""/49, 0x31}, {&(0x7f0000001240)=""/41, 0x29}], 0x4, &(0x7f00000012c0)=""/22, 0xffffffec}, 0x5}, {{&(0x7f0000001300)=@nfc, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001380)=""/134, 0x86}, {&(0x7f0000001440)=""/123, 0x7b}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x4}, 0x7}], 0x2, 0x20, &(0x7f00000015c0)) r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x7022, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r3) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) r11 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r11, 0xf, &(0x7f0000000040)={0x1, r12}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r5, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PID={0x8, 0x1c, r12}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40810) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sysvipc/msg\x00', 0x0, 0x0) 10:00:39 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 44) 10:00:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x7000000, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2915.742806] FAULT_INJECTION: forcing a failure. [ 2915.742806] name failslab, interval 1, probability 0, space 0, times 0 [ 2915.746023] CPU: 0 PID: 14502 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2915.747743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2915.749769] Call Trace: [ 2915.750436] dump_stack+0x107/0x167 [ 2915.751319] should_fail.cold+0x5/0xa [ 2915.752265] ? create_object.isra.0+0x3a/0xa20 [ 2915.753379] should_failslab+0x5/0x20 [ 2915.754308] kmem_cache_alloc+0x5b/0x310 [ 2915.755319] ? mark_held_locks+0x9e/0xe0 [ 2915.756311] create_object.isra.0+0x3a/0xa20 [ 2915.757378] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2915.758630] kmem_cache_alloc_bulk+0x168/0x320 [ 2915.759744] io_submit_sqes+0x6fe6/0x8610 [ 2915.760771] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2915.761997] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2915.763196] ? lock_downgrade+0x6d0/0x6d0 [ 2915.764216] ? find_held_lock+0x2c/0x110 [ 2915.765220] ? io_submit_sqes+0x8610/0x8610 [ 2915.766289] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2915.767475] ? wait_for_completion_io+0x270/0x270 [ 2915.768651] ? rcu_read_lock_any_held+0x75/0xa0 [ 2915.769799] ? vfs_write+0x354/0xb10 [ 2915.770727] ? fput_many+0x2f/0x1a0 [ 2915.771622] ? ksys_write+0x1a9/0x260 [ 2915.772559] ? __ia32_sys_read+0xb0/0xb0 [ 2915.773559] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2915.774802] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2915.776054] do_syscall_64+0x33/0x40 [ 2915.776974] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2915.778223] RIP: 0033:0x7fd311e28b19 [ 2915.779153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2915.783657] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2915.785512] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2915.787274] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2915.789007] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2915.790766] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2915.792520] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:00:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000000)) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:00:55 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3c) 10:00:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x1, r2}) sendmsg$nl_generic(r0, &(0x7f00000013c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001100)={0x278, 0x1e, 0x0, 0x70bd29, 0x25dfdbfe, {0x20}, [@nested={0x235, 0x6b, 0x0, 0x1, [@generic="75c99ecdb586d88ac8c72bb4eced4c02409403b31a5a9d976e03f7bbf175e310d5ec90451e89092553d580f512d2811d087b9a503a08b9e8d02ad8cac66a7c42c3f3b74061fb406e6ee48eeb99c797bbf30547488dfb03cc2a1073701f1f43510ec06703cd91f6b77c06ccf5e1ad98d9718f5e3eecaa85a2c58eec8bda69669f761a06e28bcb4bd5d832a492d338bea67b83e98dadebcf84c8026507f58244982384a32f308c97d8151b0024b2f24f92a7668470f70b5624c803a28da83727ff6ff109dbfd472b71f16964c51aeafcb483d83b7d1a", @typed={0x8, 0x48, 0x0, 0x0, @u32=0x6}, @typed={0x4, 0x3}, @generic="68d6b45e69d9a7635cc8254741b8a2fb943938cd13050510121aa6c8a432aa482d01b0a2d9f4d1800702ba8d97b0f55dd04d9683a7ce936d1efd03691b4a69a6d34ad00bfe246aa87891ef0d6dc9f849f5f498d9804ac1c08e4e83b5", @typed={0x8, 0x2d, 0x0, 0x0, @pid=r2}, @typed={0xea, 0x3, 0x0, 0x0, @binary="0a33ef6db7b1193fea43e157e0af09c83f2e0b4eab82d41c9e4d60eb0c7b15565cb9bd48ea978f1fe2a17fbd8fd856e9dfba769fdb223cad002685480fe0c5b928cd91e113cccf4bf94bba4a04221df2161c364f6db3917dc6519060d40b80d684b76a3245f379155f111a822bca3943baf477d4720f3b532f4ca8498f03b623602dc41e30957d100973fb5ef3456590020b74b241127e7d2376d7a1a69a6403c65a4bfaf748010092b13058f434f38260f046a7a2df9d3dbd81adf2fdee65f817d41d5c4aa53b7f01b18eaccef810a27b622436db3b38c0e11dda694aba921b5fbbfe742185"}]}, @generic="0023c9427119556f12d5df74b512369ce18e218f252171c96075a804dcb15e6e8241eb4c92e64996c0aabe"]}, 0x278}, 0x1, 0x0, 0x0, 0x200000d0}, 0x20008009) 10:00:55 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:00:55 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000040)={0x1, r7}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r8, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r8, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x2000, @fd_index=0x3, 0x10001, 0x30, 0x20, 0x4, 0x1}, 0x1d8000) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:00:55 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 45) 10:00:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x8000000, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:00:55 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) (fail_nth: 1) [ 2932.083800] FAULT_INJECTION: forcing a failure. [ 2932.083800] name failslab, interval 1, probability 0, space 0, times 0 [ 2932.086529] CPU: 0 PID: 14530 Comm: syz-executor.2 Not tainted 5.10.223 #1 [ 2932.088180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2932.090197] Call Trace: [ 2932.090654] dump_stack+0x107/0x167 [ 2932.091048] should_fail.cold+0x5/0xa [ 2932.091457] ? kvmalloc_node+0x119/0x170 [ 2932.091894] should_failslab+0x5/0x20 [ 2932.092301] __kmalloc_node+0x76/0x420 [ 2932.092720] ? __lock_acquire+0xbb1/0x5b00 [ 2932.093174] kvmalloc_node+0x119/0x170 [ 2932.093594] seq_read_iter+0x81c/0x12b0 [ 2932.094017] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2932.094574] proc_reg_read_iter+0x20a/0x2e0 [ 2932.094946] new_sync_read+0x424/0x6f0 [ 2932.095322] ? ksys_lseek+0x1b0/0x1b0 [ 2932.095712] ? fsnotify_perm.part.0+0x22d/0x620 [ 2932.096172] ? security_file_permission+0xb1/0xe0 [ 2932.096653] vfs_read+0x4da/0x620 [ 2932.097008] __x64_sys_pread64+0x201/0x260 [ 2932.097388] ? ksys_pread64+0x1b0/0x1b0 [ 2932.097721] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2932.098140] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2932.098616] do_syscall_64+0x33/0x40 [ 2932.098989] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2932.099504] RIP: 0033:0x7fbc1e2ccb19 [ 2932.099886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2932.101795] RSP: 002b:00007fbc1b842188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2932.102569] RAX: ffffffffffffffda RBX: 00007fbc1e3dff60 RCX: 00007fbc1e2ccb19 [ 2932.104278] RDX: 000000000000101e RSI: 0000000020000040 RDI: 0000000000000003 [ 2932.105996] RBP: 00007fbc1b8421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2932.106803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2932.108528] R13: 00007fff2fcffa3f R14: 00007fbc1b842300 R15: 0000000000022000 10:00:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x9000000, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:00:55 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7, 0x5eb6d1a4}}, './file0\x00'}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x540a, 0x3) sendmsg$nl_generic(r1, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xf8, 0x22, 0xb23ed6197fb818d7, 0x70bd28, 0x25dfdbfc, {0x1}, [@generic="84848dc5084c10d7ceb80cef97f247483bac8c9b0726231bfd1c62f39f98761b4d6dbd40a937fd109aaa46fc87ad57985edf604ff78efbc8e5df19596a0483aca87596d7f7c89ff5ad74bce11b60b8c9e6a7566144048aaa5ed074565094a5d5bc3d61e5bf34c7a923dec498f4ea90ffab03326475318532294cfc2c5446dd62ff67eb2866f6ece36cfee81a4dfb851389aced1b36e74382e2e09628b20472ae59b6ff3d4c4948399750cb278f40eb0bdb676c81d1fadb3150fe291442baea9e1f4c64e75d8fee55eea42b37c61d", @typed={0x8, 0xb, 0x0, 0x0, @fd=r2}, @typed={0xc, 0x9, 0x0, 0x0, @u64=0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x14}, 0xc90) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:00:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r1}) getsockopt(0xffffffffffffffff, 0xffffffff, 0x3080, &(0x7f0000001e00)=""/4096, &(0x7f0000001200)=0x1000) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x1, r3}) r4 = fspick(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x540a, 0x3) kcmp(r1, r3, 0x6, r4, r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/sr_mod', 0x2000, 0x5) perf_event_open(&(0x7f0000001100)={0x4, 0x80, 0x1, 0xb7, 0x7, 0x8, 0x0, 0x401, 0x124, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x40, 0x3, 0xc948, 0x2, 0x100000000, 0x5, 0x8000, 0x0, 0x3, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x5, r7, 0x1) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, 0xfffffffffffffffc) pread64(r6, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x8040, 0x2) 10:00:55 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x600) [ 2932.165310] FAULT_INJECTION: forcing a failure. [ 2932.165310] name failslab, interval 1, probability 0, space 0, times 0 [ 2932.167561] CPU: 0 PID: 14526 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2932.169298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2932.171180] Call Trace: [ 2932.172843] dump_stack+0x107/0x167 [ 2932.173242] should_fail.cold+0x5/0xa [ 2932.173653] ? create_object.isra.0+0x3a/0xa20 [ 2932.174144] should_failslab+0x5/0x20 [ 2932.174581] kmem_cache_alloc+0x5b/0x310 [ 2932.175033] ? mark_held_locks+0x9e/0xe0 [ 2932.175497] create_object.isra.0+0x3a/0xa20 [ 2932.175984] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2932.176577] kmem_cache_alloc_bulk+0x168/0x320 [ 2932.177114] io_submit_sqes+0x6fe6/0x8610 [ 2932.177633] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2932.178225] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2932.178797] ? lock_downgrade+0x6d0/0x6d0 [ 2932.179791] ? find_held_lock+0x2c/0x110 [ 2932.180266] ? io_submit_sqes+0x8610/0x8610 [ 2932.181308] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2932.181859] ? wait_for_completion_io+0x270/0x270 [ 2932.183066] ? rcu_read_lock_any_held+0x75/0xa0 [ 2932.183602] ? vfs_write+0x354/0xb10 [ 2932.184523] ? fput_many+0x2f/0x1a0 [ 2932.184946] ? ksys_write+0x1a9/0x260 [ 2932.185742] ? __ia32_sys_read+0xb0/0xb0 [ 2932.186201] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2932.187380] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2932.187958] do_syscall_64+0x33/0x40 [ 2932.188680] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2932.189250] RIP: 0033:0x7fd311e28b19 [ 2932.190044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2932.192301] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2932.194107] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2932.195003] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2932.196791] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2932.199932] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2932.202107] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:00:55 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) (fail_nth: 2) 10:00:55 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 46) 10:00:55 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x1, r4}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="7c8efcc40aac5f77f972fe9297f08da87e77c6bfb6c99beeecaa40d34a5c74ba95018894426a20a8d3946f9d142f4b4f3d9475cec95c0bdec0f6d63e40cfd1b4e506172ee86bd7d6e049025c476a30bbd1716f1e8995ee7a6cebc67e5f7d23a68c6f8ee4904c3835cad303174971aaa72446f982ffba7d0163cfe7238e5ecfea05afca5f2b555e368eedf2492178a1921d0c1fc935dca7e1818977d191330aa4d689bf1dd7dca81fb740adfc997cfe086017f386ce7f7a40f3d3d242682e4b4ac6c36c7c9d736144318036d02c8f62b13a667c778940363ce43eaee0c24356133704984fcb4c216348978a69f67fcd8591c0aa", 0xf3, 0x8010, 0x1, {0x0, r6}}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r6}}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r6}}, 0x91) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:00:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xa000000, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2932.410468] FAULT_INJECTION: forcing a failure. [ 2932.410468] name failslab, interval 1, probability 0, space 0, times 0 [ 2932.413359] CPU: 1 PID: 14547 Comm: syz-executor.2 Not tainted 5.10.223 #1 [ 2932.415083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2932.417241] Call Trace: [ 2932.417264] dump_stack+0x107/0x167 [ 2932.417282] should_fail.cold+0x5/0xa [ 2932.417302] ? create_object.isra.0+0x3a/0xa20 [ 2932.417321] should_failslab+0x5/0x20 [ 2932.417337] kmem_cache_alloc+0x5b/0x310 [ 2932.417358] create_object.isra.0+0x3a/0xa20 [ 2932.417374] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2932.417395] __kmalloc_node+0x1ae/0x420 [ 2932.417422] kvmalloc_node+0x119/0x170 [ 2932.417439] seq_read_iter+0x81c/0x12b0 [ 2932.417456] ? __switch_to+0x572/0xf70 [ 2932.417469] ? __switch_to_asm+0x3a/0x60 [ 2932.417481] ? __switch_to_asm+0x34/0x60 10:00:55 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) (fail_nth: 3) [ 2932.417502] ? __schedule+0x82c/0x1ea0 [ 2932.417527] proc_reg_read_iter+0x20a/0x2e0 [ 2932.417546] new_sync_read+0x424/0x6f0 [ 2932.417563] ? ksys_lseek+0x1b0/0x1b0 [ 2932.417594] ? fsnotify_perm.part.0+0x22d/0x620 [ 2932.417617] ? security_file_permission+0xb1/0xe0 [ 2932.417643] vfs_read+0x4da/0x620 [ 2932.417666] __x64_sys_pread64+0x201/0x260 [ 2932.417683] ? ksys_pread64+0x1b0/0x1b0 [ 2932.417705] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2932.417721] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2932.417739] do_syscall_64+0x33/0x40 [ 2932.417755] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2932.417766] RIP: 0033:0x7fbc1e2ccb19 [ 2932.417781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2932.417790] RSP: 002b:00007fbc1b842188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2932.417808] RAX: ffffffffffffffda RBX: 00007fbc1e3dff60 RCX: 00007fbc1e2ccb19 [ 2932.417817] RDX: 000000000000101e RSI: 0000000020000040 RDI: 0000000000000003 [ 2932.417827] RBP: 00007fbc1b8421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2932.417836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2932.417846] R13: 00007fff2fcffa3f R14: 00007fbc1b842300 R15: 0000000000022000 [ 2932.473069] FAULT_INJECTION: forcing a failure. [ 2932.473069] name failslab, interval 1, probability 0, space 0, times 0 [ 2932.473091] CPU: 1 PID: 14548 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2932.473101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2932.473106] Call Trace: [ 2932.473129] dump_stack+0x107/0x167 [ 2932.473147] should_fail.cold+0x5/0xa [ 2932.473168] ? create_object.isra.0+0x3a/0xa20 [ 2932.473188] should_failslab+0x5/0x20 [ 2932.473204] kmem_cache_alloc+0x5b/0x310 [ 2932.473222] ? mark_held_locks+0x9e/0xe0 [ 2932.473241] create_object.isra.0+0x3a/0xa20 [ 2932.473257] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2932.473279] kmem_cache_alloc_bulk+0x168/0x320 [ 2932.473303] io_submit_sqes+0x6fe6/0x8610 [ 2932.473348] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2932.473363] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2932.473384] ? lock_downgrade+0x6d0/0x6d0 [ 2932.473397] ? find_held_lock+0x2c/0x110 [ 2932.473419] ? io_submit_sqes+0x8610/0x8610 [ 2932.473444] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2932.473465] ? wait_for_completion_io+0x270/0x270 [ 2932.473484] ? rcu_read_lock_any_held+0x75/0xa0 [ 2932.473498] ? vfs_write+0x354/0xb10 [ 2932.473514] ? fput_many+0x2f/0x1a0 [ 2932.473530] ? ksys_write+0x1a9/0x260 [ 2932.473546] ? __ia32_sys_read+0xb0/0xb0 [ 2932.473566] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2932.473581] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2932.473599] do_syscall_64+0x33/0x40 [ 2932.473614] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2932.473625] RIP: 0033:0x7fd311e28b19 [ 2932.473642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2932.473652] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2932.473670] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2932.473680] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2932.473690] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2932.473699] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2932.473710] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 [ 2932.738944] FAULT_INJECTION: forcing a failure. [ 2932.738944] name failslab, interval 1, probability 0, space 0, times 0 [ 2932.740228] CPU: 0 PID: 14559 Comm: syz-executor.2 Not tainted 5.10.223 #1 [ 2932.740940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2932.741821] Call Trace: [ 2932.742088] dump_stack+0x107/0x167 [ 2932.742557] should_fail.cold+0x5/0xa [ 2932.746967] ? disk_seqf_start+0x62/0x140 [ 2932.747903] should_failslab+0x5/0x20 [ 2932.748751] kmem_cache_alloc_trace+0x55/0x320 [ 2932.750249] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2932.751688] disk_seqf_start+0x62/0x140 [ 2932.752604] seq_read_iter+0x2cd/0x12b0 [ 2932.753518] proc_reg_read_iter+0x20a/0x2e0 [ 2932.754495] new_sync_read+0x424/0x6f0 [ 2932.755591] ? ksys_lseek+0x1b0/0x1b0 [ 2932.756541] ? fsnotify_perm.part.0+0x22d/0x620 [ 2932.757207] ? security_file_permission+0xb1/0xe0 [ 2932.757901] vfs_read+0x4da/0x620 [ 2932.758398] __x64_sys_pread64+0x201/0x260 [ 2932.759020] ? ksys_pread64+0x1b0/0x1b0 [ 2932.760068] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2932.760837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2932.761641] do_syscall_64+0x33/0x40 [ 2932.762146] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2932.762885] RIP: 0033:0x7fbc1e2ccb19 [ 2932.763395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2932.766091] RSP: 002b:00007fbc1b842188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2932.766981] RAX: ffffffffffffffda RBX: 00007fbc1e3dff60 RCX: 00007fbc1e2ccb19 [ 2932.767645] RDX: 000000000000101e RSI: 0000000020000040 RDI: 0000000000000003 [ 2932.768285] RBP: 00007fbc1b8421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2932.768945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2932.769598] R13: 00007fff2fcffa3f R14: 00007fbc1b842300 R15: 0000000000022000 10:01:11 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:01:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f0000001140)=""/33, &(0x7f0000001180)=0x21) perf_event_open(&(0x7f00000010c0)={0x3, 0x80, 0x7, 0xff, 0x6, 0x1, 0x0, 0x9, 0x8a00, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffba8d, 0x2, @perf_bp={&(0x7f0000001080), 0x4}, 0x110, 0x1f, 0x1, 0x0, 0x1, 0x736, 0xfffc, 0x0, 0x44c, 0x0, 0x8}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000040)=""/4104, 0x1008, 0x9) 10:01:11 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) (fail_nth: 4) 10:01:11 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 47) 10:01:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xb000000, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:01:11 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xc00) 10:01:11 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a644", 0x2}], 0x1}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r5, 0x0, &(0x7f0000000040)="c2822496e4dc50e210c841da6ba202b625ba271170dbc88b6a541d51", 0x1c, 0x4000000, 0x1}, 0xe56) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) fstatfs(r3, &(0x7f0000000940)=""/4092) 10:01:11 executing program 7: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x28, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x4}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x44010) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000001200), 0x1, 0x40) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000001480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="6c0e0000000000002e2f66696c653000d0a9e7b1224ecb9d0712d1d87a8516f1e176ada977b9724b081770e7d37dfb21c55ee478c9f62b7c78e7d8b5b5ed6151f1e0d2cb2b166e6b565a533711436a7650e3da721db8b58c9115b24e6d55cbe77224331457a66d055e01d533b9f2958c3e0e6ef889153decec4c6563be4e634a6b343e73daf237be75ef53f22ca608e142b3acdd1d6fb0c2aa043cf2e39b3292615b4c43b95d684ddd514576b4059400eb3d4508ccd74ac1a691b90405fcf91e6253402d91bb19edafdc940f895240fb5a42c5bb0962c95b2c11041a7d79b1a39a674152bf8a698f10a61bcffd"]) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0xe0400100}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2a}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004090}, 0x4000000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r5, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @dev}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @dev}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000001440)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001400)={&(0x7f00000012c0)={0x128, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x128}}, 0x80) [ 2948.147959] FAULT_INJECTION: forcing a failure. [ 2948.147959] name failslab, interval 1, probability 0, space 0, times 0 [ 2948.150778] CPU: 0 PID: 14573 Comm: syz-executor.2 Not tainted 5.10.223 #1 [ 2948.152454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2948.154335] Call Trace: [ 2948.154943] dump_stack+0x107/0x167 [ 2948.155760] should_fail.cold+0x5/0xa [ 2948.156614] ? create_object.isra.0+0x3a/0xa20 [ 2948.157639] should_failslab+0x5/0x20 [ 2948.158489] kmem_cache_alloc+0x5b/0x310 [ 2948.159441] create_object.isra.0+0x3a/0xa20 [ 2948.160443] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2948.161607] kmem_cache_alloc_trace+0x151/0x320 [ 2948.162665] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2948.163830] disk_seqf_start+0x62/0x140 [ 2948.164733] seq_read_iter+0x2cd/0x12b0 [ 2948.165646] proc_reg_read_iter+0x20a/0x2e0 [ 2948.167586] new_sync_read+0x424/0x6f0 [ 2948.167980] ? ksys_lseek+0x1b0/0x1b0 [ 2948.168356] ? fsnotify_perm.part.0+0x22d/0x620 [ 2948.168843] ? security_file_permission+0xb1/0xe0 [ 2948.169304] vfs_read+0x4da/0x620 [ 2948.169685] __x64_sys_pread64+0x201/0x260 [ 2948.170080] ? ksys_pread64+0x1b0/0x1b0 [ 2948.170506] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2948.171075] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2948.171623] do_syscall_64+0x33/0x40 [ 2948.175074] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2948.175627] RIP: 0033:0x7fbc1e2ccb19 [ 2948.175989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2948.177766] RSP: 002b:00007fbc1b842188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2948.178531] RAX: ffffffffffffffda RBX: 00007fbc1e3dff60 RCX: 00007fbc1e2ccb19 [ 2948.180211] RDX: 000000000000101e RSI: 0000000020000040 RDI: 0000000000000003 [ 2948.181936] RBP: 00007fbc1b8421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2948.183702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2948.185435] R13: 00007fff2fcffa3f R14: 00007fbc1b842300 R15: 0000000000022000 10:01:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xf000000, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2948.239016] FAULT_INJECTION: forcing a failure. [ 2948.239016] name failslab, interval 1, probability 0, space 0, times 0 [ 2948.240237] CPU: 1 PID: 14574 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2948.240818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2948.241511] Call Trace: [ 2948.241752] dump_stack+0x107/0x167 [ 2948.242067] should_fail.cold+0x5/0xa [ 2948.242397] ? create_object.isra.0+0x3a/0xa20 [ 2948.242812] should_failslab+0x5/0x20 [ 2948.243139] kmem_cache_alloc+0x5b/0x310 [ 2948.243489] ? mark_held_locks+0x9e/0xe0 [ 2948.243841] create_object.isra.0+0x3a/0xa20 [ 2948.244215] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2948.244652] kmem_cache_alloc_bulk+0x168/0x320 [ 2948.245053] io_submit_sqes+0x6fe6/0x8610 [ 2948.245432] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2948.245858] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2948.246272] ? lock_downgrade+0x6d0/0x6d0 [ 2948.254701] ? find_held_lock+0x2c/0x110 [ 2948.255158] ? io_submit_sqes+0x8610/0x8610 [ 2948.255941] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2948.256472] ? wait_for_completion_io+0x270/0x270 [ 2948.257003] ? rcu_read_lock_any_held+0x75/0xa0 [ 2948.257503] ? vfs_write+0x354/0xb10 [ 2948.257916] ? fput_many+0x2f/0x1a0 [ 2948.258316] ? ksys_write+0x1a9/0x260 [ 2948.258719] ? __ia32_sys_read+0xb0/0xb0 [ 2948.259098] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2948.259584] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2948.260064] do_syscall_64+0x33/0x40 [ 2948.260410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2948.260873] RIP: 0033:0x7fd311e28b19 [ 2948.261216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2948.262899] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2948.263669] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2948.264341] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2948.265007] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2948.265685] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2948.266347] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:01:11 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) (fail_nth: 5) 10:01:11 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000004000000"], 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, 0x0, 0x201, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x814}, 0x81) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/4121, 0x1019, 0x0) 10:01:11 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:01:11 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1200) 10:01:11 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:01:11 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x36b2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f00000007c0)={{r4}, r6, 0xc, @inherit={0x60, &(0x7f0000000040)={0x1, 0x3, 0xe96c, 0x8d2, {0x2, 0x8, 0x6, 0xffffffffffffffe1, 0x6}, [0x800, 0x100, 0x2]}}, @subvolid=0x4}) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:01:11 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 48) [ 2948.642485] FAULT_INJECTION: forcing a failure. [ 2948.642485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2948.644944] CPU: 1 PID: 14594 Comm: syz-executor.2 Not tainted 5.10.223 #1 [ 2948.646468] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2948.648355] Call Trace: [ 2948.648949] dump_stack+0x107/0x167 [ 2948.649759] should_fail.cold+0x5/0xa [ 2948.650615] _copy_to_iter+0x264/0x12d0 [ 2948.651504] ? slab_free_freelist_hook+0xa9/0x180 [ 2948.652557] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2948.653658] ? __virt_addr_valid+0x170/0x5d0 [ 2948.654648] ? __check_object_size+0x319/0x440 [ 2948.655674] seq_read_iter+0xdcb/0x12b0 [ 2948.656563] proc_reg_read_iter+0x20a/0x2e0 [ 2948.657510] new_sync_read+0x424/0x6f0 [ 2948.658358] ? ksys_lseek+0x1b0/0x1b0 [ 2948.659223] ? fsnotify_perm.part.0+0x22d/0x620 [ 2948.660262] ? security_file_permission+0xb1/0xe0 [ 2948.661326] vfs_read+0x4da/0x620 [ 2948.662094] __x64_sys_pread64+0x201/0x260 [ 2948.663032] ? ksys_pread64+0x1b0/0x1b0 [ 2948.663917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2948.665089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2948.666238] do_syscall_64+0x33/0x40 [ 2948.667074] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2948.668217] RIP: 0033:0x7fbc1e2ccb19 [ 2948.669027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2948.673110] RSP: 002b:00007fbc1b842188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2948.674813] RAX: ffffffffffffffda RBX: 00007fbc1e3dff60 RCX: 00007fbc1e2ccb19 [ 2948.676392] RDX: 000000000000101e RSI: 0000000020000040 RDI: 0000000000000003 [ 2948.677967] RBP: 00007fbc1b8421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2948.679557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2948.681135] R13: 00007fff2fcffa3f R14: 00007fbc1b842300 R15: 0000000000022000 10:01:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 2948.748588] FAULT_INJECTION: forcing a failure. [ 2948.748588] name failslab, interval 1, probability 0, space 0, times 0 [ 2948.751317] CPU: 0 PID: 14597 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2948.753085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2948.755155] Call Trace: [ 2948.755873] dump_stack+0x107/0x167 [ 2948.756771] should_fail.cold+0x5/0xa [ 2948.757527] ? create_object.isra.0+0x3a/0xa20 [ 2948.758554] should_failslab+0x5/0x20 [ 2948.759491] kmem_cache_alloc+0x5b/0x310 [ 2948.760496] ? mark_held_locks+0x9e/0xe0 [ 2948.761480] create_object.isra.0+0x3a/0xa20 [ 2948.762557] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2948.763794] kmem_cache_alloc_bulk+0x168/0x320 [ 2948.764925] io_submit_sqes+0x6fe6/0x8610 [ 2948.765943] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2948.767144] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2948.768298] ? lock_downgrade+0x6d0/0x6d0 [ 2948.769615] ? find_held_lock+0x2c/0x110 [ 2948.770589] ? io_submit_sqes+0x8610/0x8610 [ 2948.771880] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2948.773054] ? wait_for_completion_io+0x270/0x270 [ 2948.774203] ? rcu_read_lock_any_held+0x75/0xa0 [ 2948.775309] ? vfs_write+0x354/0xb10 [ 2948.776216] ? fput_many+0x2f/0x1a0 [ 2948.777111] ? ksys_write+0x1a9/0x260 [ 2948.778023] ? __ia32_sys_read+0xb0/0xb0 [ 2948.779013] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2948.780253] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2948.781543] do_syscall_64+0x33/0x40 [ 2948.782382] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2948.783639] RIP: 0033:0x7fd311e28b19 [ 2948.784576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2948.788970] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2948.794751] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2948.795450] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2948.796121] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2948.796791] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2948.797461] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:01:27 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 10:01:27 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080), 0x1}, 0xc028, 0x0, 0x1, 0x1, 0x0, 0x4fd12d4d, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001100)="aeb8db5d5ddb9edc84d0992c23c10dae29afaadea0d6a539b31849f96244668a052eb146f37261bd98222a4545cf1daf937ad17bc7643da886fb8f5775857ca4cea1f16313293dbbfdb4df961340481e5d15485e40d9929841e4bc76bec3d6d24f59a9ddd9da122eb0d0104e59b540ea710a7b1623235eb0604aa36dbcc00e912d26ab9ade3dcc613aaf6b8e574d4c1ad7ba559c3f276cf03b6635518a56239d89cb01c20e88f84fac4cee25b6e365ce0c0b", 0xb2}], 0x1) 10:01:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x10000000, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:01:27 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1800) 10:01:27 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001280)={[0xfc]}, 0x8, 0x80000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000008}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x68, r1, 0x900, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x66}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x55b}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x72b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x633}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x787}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x170}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040084}, 0x4000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/66, 0x42, 0x0, &(0x7f0000001180)=""/210, 0xd2}, &(0x7f0000001080)=0x40) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:01:27 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 49) 10:01:27 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:01:27 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) (fail_nth: 6) [ 2964.614010] FAULT_INJECTION: forcing a failure. [ 2964.614010] name failslab, interval 1, probability 0, space 0, times 0 [ 2964.615157] CPU: 0 PID: 14621 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2964.615520] FAULT_INJECTION: forcing a failure. [ 2964.615520] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2964.615781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2964.615792] Call Trace: [ 2964.617932] dump_stack+0x107/0x167 [ 2964.618250] should_fail.cold+0x5/0xa [ 2964.618620] ? create_object.isra.0+0x3a/0xa20 [ 2964.619033] should_failslab+0x5/0x20 [ 2964.619368] kmem_cache_alloc+0x5b/0x310 [ 2964.619763] ? mark_held_locks+0x9e/0xe0 [ 2964.620117] create_object.isra.0+0x3a/0xa20 [ 2964.620551] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2964.620992] kmem_cache_alloc_bulk+0x168/0x320 [ 2964.621413] io_submit_sqes+0x6fe6/0x8610 [ 2964.621820] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2964.622256] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2964.622777] ? lock_downgrade+0x6d0/0x6d0 [ 2964.623140] ? find_held_lock+0x2c/0x110 [ 2964.623532] ? io_submit_sqes+0x8610/0x8610 [ 2964.623915] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2964.624339] ? wait_for_completion_io+0x270/0x270 [ 2964.624803] ? rcu_read_lock_any_held+0x75/0xa0 [ 2964.625208] ? vfs_write+0x354/0xb10 [ 2964.625569] ? fput_many+0x2f/0x1a0 [ 2964.625886] ? ksys_write+0x1a9/0x260 [ 2964.626215] ? __ia32_sys_read+0xb0/0xb0 [ 2964.626608] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2964.627073] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2964.627558] do_syscall_64+0x33/0x40 [ 2964.627882] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2964.628323] RIP: 0033:0x7fd311e28b19 [ 2964.628677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2964.630290] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2964.630993] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2964.631652] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2964.632263] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2964.632918] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2964.633633] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 [ 2964.634280] CPU: 1 PID: 14627 Comm: syz-executor.2 Not tainted 5.10.223 #1 [ 2964.634956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2964.635758] Call Trace: [ 2964.636019] dump_stack+0x107/0x167 [ 2964.636384] should_fail.cold+0x5/0xa [ 2964.636756] __alloc_pages_nodemask+0x182/0x600 [ 2964.637197] ? add_mm_counter_fast+0x220/0x220 [ 2964.637676] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2964.638227] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2964.638722] ? lock_downgrade+0x6d0/0x6d0 [ 2964.639120] ? mark_held_locks+0x9e/0xe0 [ 2964.639516] alloc_pages_vma+0xbb/0x410 [ 2964.639983] handle_mm_fault+0x152f/0x3500 [ 2964.640407] ? __pmd_alloc+0x5e0/0x5e0 [ 2964.641331] ? vmacache_find+0x55/0x2a0 [ 2964.641704] ? vmacache_update+0xce/0x140 [ 2964.642110] do_user_addr_fault+0x56e/0xc60 [ 2964.642523] exc_page_fault+0xa2/0x1a0 [ 2964.642920] asm_exc_page_fault+0x1e/0x30 [ 2964.643334] RIP: 0010:copy_user_generic_string+0x2c/0x40 [ 2964.643844] Code: cb 83 fa 08 72 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 48 a5 89 d1 f3 a4 31 c0 0f 01 ca e9 43 e9 1d 02 0f 1f 00 0f 01 [ 2964.645578] RSP: 0018:ffff88805809fab8 EFLAGS: 00050202 [ 2964.646103] RAX: 0000000000000001 RBX: 0000000000000291 RCX: 0000000000000052 [ 2964.646782] RDX: 0000000000000001 RSI: ffff88800fa56000 RDI: 0000000020000040 [ 2964.647465] RBP: 0000000020000040 R08: 0000000000000000 R09: ffff88800fa56290 [ 2964.648151] R10: ffffed1001f4ac52 R11: 0000000000000001 R12: ffff88800fa56000 [ 2964.648832] R13: 00000000200002d1 R14: 00007ffffffff000 R15: 0000000000000000 [ 2964.649530] copyout.part.0+0x10b/0x140 [ 2964.649918] _copy_to_iter+0x293/0x12d0 [ 2964.650323] ? slab_free_freelist_hook+0xa9/0x180 [ 2964.650796] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2964.651277] ? __virt_addr_valid+0x170/0x5d0 [ 2964.651691] ? __check_object_size+0x319/0x440 [ 2964.652133] seq_read_iter+0xdcb/0x12b0 [ 2964.652536] proc_reg_read_iter+0x20a/0x2e0 [ 2964.652954] new_sync_read+0x424/0x6f0 [ 2964.653343] ? ksys_lseek+0x1b0/0x1b0 [ 2964.653713] ? fsnotify_perm.part.0+0x22d/0x620 [ 2964.654159] ? security_file_permission+0xb1/0xe0 [ 2964.654680] vfs_read+0x4da/0x620 [ 2964.655028] __x64_sys_pread64+0x201/0x260 [ 2964.655445] ? ksys_pread64+0x1b0/0x1b0 [ 2964.655823] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2964.656318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2964.656815] do_syscall_64+0x33/0x40 [ 2964.657167] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2964.657655] RIP: 0033:0x7fbc1e2ccb19 [ 2964.658008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2964.659584] RSP: 002b:00007fbc1b842188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2964.660230] RAX: ffffffffffffffda RBX: 00007fbc1e3dff60 RCX: 00007fbc1e2ccb19 [ 2964.660867] RDX: 000000000000101e RSI: 0000000020000040 RDI: 0000000000000003 [ 2964.661527] RBP: 00007fbc1b8421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2964.662193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2964.662816] R13: 00007fff2fcffa3f R14: 00007fbc1b842300 R15: 0000000000022000 10:01:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001100)={0x0, 0x0, 0xa, 0x0, '\x00', [{0x3, 0x3ff, 0x4, 0x100, 0x4, 0x4}, {0x9, 0x6, 0xfe92, 0x1, 0x5, 0x5}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:01:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x11000000, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2968.818559] Bluetooth: hci3: command 0x0406 tx timeout 10:01:44 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 10:01:44 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 50) 10:01:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000001100)='./file0\x00', 0x88800) signalfd4(r2, &(0x7f0000001140)={[0x1]}, 0x8, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000001080)={0x7, 0x4d, 0x1}, 0x7) syz_io_uring_setup(0x5966, &(0x7f0000001180)={0x0, 0xb0, 0x0, 0x2, 0x174, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001200), &(0x7f0000001240)=0x0) r4 = eventfd(0x2) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x24000, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x10f) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000005c0)=ANY=[@ANYBLOB="01018a8c17131ae4e5128d7b240af77f4a400000210000001800000043429ef86abf762f1caaf090e4ceb0721ead61e5923e994fa734", @ANYRES32=r5, @ANYBLOB="000000004a0000001c2f66696cd330006d33220b43952e606a11f33fa0a608ce293e21915c1a4da48bea69e875dd1dfe85b4ab4d6df9d08a594c6ee92d7fc6df10b784db5e38926e559447b1d62a4054016ff874d2bcec02ffc3e08bd1c5171913ce22f2fb79"]) ftruncate(r6, 0x9) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r5) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20008044) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000001580)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001540)={&(0x7f0000001300)={0x238, r7, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x101000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x81}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x5e}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xffff}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xffffff29}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x401}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x20}, {0x5}, {0x6, 0x11, 0x401}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x400}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0xaf}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x20}}]}, 0x238}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) r8 = timerfd_create(0x5, 0x800) syz_io_uring_submit(0x0, r3, &(0x7f0000001280)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x6, 0x3ff, {0x0, r4}, 0xfffeffff, 0x21bb5875f3f7cc07, 0x0, {0x0, 0x0, r8}}, 0x1) 10:01:44 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) (fail_nth: 7) 10:01:44 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1e00) 10:01:44 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4007, @fd_index=0xfb89, 0xffff, 0x0, 0x0, 0x2, 0x1, {0x2}}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x1, r3}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x540a, 0x3) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x3, 0x1, {0x0, 0x0, r6}}, 0x5e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r7, 0x0, 0x0, 0x0, 0x800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:01:44 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001180)={0x5, 0x80, 0xff, 0x3f, 0x7f, 0x3, 0x0, 0x7c00df7c, 0x88000, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2, @perf_config_ext={0x10ffe720, 0x1}, 0x20, 0x8, 0x7, 0x4, 0x1ff, 0xffff, 0x100, 0x0, 0x3e7, 0x0, 0xff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001100)={0x4, 0x80, 0x6, 0x29, 0x7f, 0x2, 0x0, 0x3, 0x60418, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp, 0x1954, 0x20, 0x3, 0x9, 0x8000, 0x2, 0xfff, 0x0, 0x5, 0x0, 0xffffffffffffff20}, 0xffffffffffffffff, 0x4, r1, 0xa) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:01:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x52010000, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2981.210156] FAULT_INJECTION: forcing a failure. [ 2981.210156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2981.211294] CPU: 0 PID: 14649 Comm: syz-executor.2 Not tainted 5.10.223 #1 [ 2981.211943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2981.212708] Call Trace: [ 2981.212962] dump_stack+0x107/0x167 [ 2981.213307] should_fail.cold+0x5/0xa [ 2981.213837] _copy_to_user+0x2e/0x180 [ 2981.214270] simple_read_from_buffer+0xcc/0x160 [ 2981.214756] proc_fail_nth_read+0x198/0x230 [ 2981.215649] ? proc_sessionid_read+0x230/0x230 [ 2981.216725] ? security_file_permission+0xb1/0xe0 [ 2981.217873] ? proc_sessionid_read+0x230/0x230 [ 2981.218945] vfs_read+0x228/0x620 [ 2981.219762] ksys_read+0x12d/0x260 [ 2981.220586] ? vfs_write+0xb10/0xb10 [ 2981.221459] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2981.222692] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2981.223910] do_syscall_64+0x33/0x40 [ 2981.224782] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2981.225991] RIP: 0033:0x7fbc1e27f69c [ 2981.226860] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2981.231322] RSP: 002b:00007fbc1b842170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2981.233098] RAX: ffffffffffffffda RBX: 0000000000000291 RCX: 00007fbc1e27f69c [ 2981.234769] RDX: 000000000000000f RSI: 00007fbc1b8421e0 RDI: 0000000000000004 [ 2981.236566] RBP: 00007fbc1b8421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2981.238200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2981.240063] R13: 00007fff2fcffa3f R14: 00007fbc1b842300 R15: 0000000000022000 10:01:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x80ffffff, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:01:44 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 2981.299802] FAULT_INJECTION: forcing a failure. [ 2981.299802] name failslab, interval 1, probability 0, space 0, times 0 [ 2981.302820] CPU: 0 PID: 14655 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2981.304514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2981.306560] Call Trace: [ 2981.307184] dump_stack+0x107/0x167 [ 2981.308075] should_fail.cold+0x5/0xa [ 2981.308976] ? create_object.isra.0+0x3a/0xa20 [ 2981.310077] should_failslab+0x5/0x20 [ 2981.310981] kmem_cache_alloc+0x5b/0x310 [ 2981.311358] ? mark_held_locks+0x9e/0xe0 [ 2981.311790] create_object.isra.0+0x3a/0xa20 [ 2981.312195] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2981.312713] kmem_cache_alloc_bulk+0x168/0x320 [ 2981.313141] io_submit_sqes+0x6fe6/0x8610 [ 2981.313594] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2981.314057] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2981.314580] ? lock_downgrade+0x6d0/0x6d0 [ 2981.314975] ? find_held_lock+0x2c/0x110 [ 2981.315359] ? io_submit_sqes+0x8610/0x8610 [ 2981.315823] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2981.316276] ? wait_for_completion_io+0x270/0x270 [ 2981.316859] ? rcu_read_lock_any_held+0x75/0xa0 [ 2981.317303] ? vfs_write+0x354/0xb10 [ 2981.317716] ? fput_many+0x2f/0x1a0 [ 2981.318920] ? ksys_write+0x1a9/0x260 [ 2981.319283] ? __ia32_sys_read+0xb0/0xb0 [ 2981.319717] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2981.320200] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2981.320728] do_syscall_64+0x33/0x40 [ 2981.321073] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2981.321595] RIP: 0033:0x7fd311e28b19 [ 2981.321940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2981.323754] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2981.324507] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2981.325163] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2981.325864] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2981.326596] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2981.327277] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:01:44 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffe00}}, './file0\x00'}) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r8}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000040)={0x1, r9}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000005, 0x8010, r3, 0x8000000) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r10, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r10, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x7}, 0x1) 10:01:44 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2000) 10:01:44 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4a22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:01:44 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 51) 10:01:44 executing program 7: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001100)=""/74, 0x4a}, {&(0x7f0000001180)=""/109, 0x6d}, {&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001080)}], 0x5, &(0x7f0000001280)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x40}}, {{&(0x7f00000012c0), 0x6e, &(0x7f0000001900)=[{&(0x7f0000001340)=""/18, 0x12}, {&(0x7f0000001380)=""/221, 0xdd}, {&(0x7f0000001480)=""/134, 0x86}, {&(0x7f0000001540)=""/190, 0xbe}, {&(0x7f0000001600)=""/136, 0x88}, {&(0x7f00000016c0)=""/163, 0xa3}, {&(0x7f0000001780)=""/116, 0x74}, {&(0x7f0000001800)=""/236, 0xec}], 0x8, &(0x7f0000001980)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:01:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0x9effffff, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2981.686859] FAULT_INJECTION: forcing a failure. [ 2981.686859] name failslab, interval 1, probability 0, space 0, times 0 [ 2981.688217] CPU: 0 PID: 14679 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2981.688914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2981.689731] Call Trace: [ 2981.689994] dump_stack+0x107/0x167 [ 2981.690344] should_fail.cold+0x5/0xa [ 2981.692840] ? create_object.isra.0+0x3a/0xa20 [ 2981.693268] should_failslab+0x5/0x20 [ 2981.693704] kmem_cache_alloc+0x5b/0x310 [ 2981.694082] ? mark_held_locks+0x9e/0xe0 [ 2981.695333] create_object.isra.0+0x3a/0xa20 [ 2981.695808] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2981.696293] kmem_cache_alloc_bulk+0x168/0x320 [ 2981.696775] io_submit_sqes+0x6fe6/0x8610 [ 2981.697179] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2981.697711] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2981.698158] ? lock_downgrade+0x6d0/0x6d0 [ 2981.698594] ? find_held_lock+0x2c/0x110 [ 2981.699223] ? io_submit_sqes+0x8610/0x8610 [ 2981.699680] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2981.700127] ? wait_for_completion_io+0x270/0x270 [ 2981.700627] ? rcu_read_lock_any_held+0x75/0xa0 [ 2981.701057] ? vfs_write+0x354/0xb10 [ 2981.701468] ? fput_many+0x2f/0x1a0 [ 2981.701816] ? ksys_write+0x1a9/0x260 [ 2981.702167] ? __ia32_sys_read+0xb0/0xb0 [ 2981.702605] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2981.703116] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2981.703650] do_syscall_64+0x33/0x40 [ 2981.703996] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2981.704518] RIP: 0033:0x7fd311e28b19 [ 2981.704865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2981.706656] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2981.707382] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2981.708080] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2981.708787] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2981.709515] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2981.710184] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:02:00 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x44, 0x0) 10:02:00 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 52) 10:02:00 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x540a, 0x3) dup3(0xffffffffffffffff, r4, 0x80000) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:02:00 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) dup2(r1, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:02:00 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2400) 10:02:00 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000001140)={0x4, 0x1f, 0x7, 0x5, 0x7f}) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) r2 = accept4$inet(r0, &(0x7f0000001080), &(0x7f0000001100)=0x10, 0x80000) close_range(r1, r2, 0x2) perf_event_open(&(0x7f00000011c0)={0x5, 0x80, 0x3f, 0x8, 0x0, 0xff, 0x0, 0x6, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000001180), 0x9}, 0x10000, 0x7ff, 0x100, 0x2, 0x3, 0x6, 0xf9, 0x0, 0x0, 0x0, 0x63}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:02:00 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 10:02:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xf0ffffff, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:02:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xfcffffff, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2997.037962] FAULT_INJECTION: forcing a failure. [ 2997.037962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2997.039186] CPU: 0 PID: 14700 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2997.039892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2997.040691] Call Trace: [ 2997.040943] dump_stack+0x107/0x167 [ 2997.041280] should_fail.cold+0x5/0xa [ 2997.041686] _copy_to_iter+0x264/0x12d0 [ 2997.042059] ? chacha_block_generic+0x13e/0x200 [ 2997.042534] ? chacha_permute+0x6f0/0x6f0 [ 2997.042921] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2997.043477] get_random_bytes_user+0x173/0x3b0 [ 2997.043899] ? get_random_u32+0x670/0x670 [ 2997.044285] ? wait_for_random_bytes+0x91/0xe0 [ 2997.044787] ? security_file_permission+0xb1/0xe0 [ 2997.045236] ? get_random_bytes_user+0x3b0/0x3b0 [ 2997.045716] random_read_iter+0x65/0x140 [ 2997.046093] io_read+0x2dc/0x11e0 [ 2997.046474] ? kiocb_done+0xc90/0xc90 [ 2997.046832] ? mark_lock+0xf5/0x2df0 [ 2997.047207] ? lock_chain_count+0x20/0x20 [ 2997.047653] ? stack_trace_consume_entry+0x160/0x160 [ 2997.048129] ? lock_acquire+0x197/0x470 [ 2997.048572] ? __lock_acquire+0xbb1/0x5b00 [ 2997.048965] io_issue_sqe+0x2e8a/0x77b0 [ 2997.049340] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2997.049867] ? SOFTIRQ_verbose+0x10/0x10 [ 2997.050240] ? lock_chain_count+0x20/0x20 [ 2997.050669] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2997.051170] ? io_connect+0x610/0x610 [ 2997.051580] ? lock_acquire+0x197/0x470 [ 2997.051946] ? find_held_lock+0x2c/0x110 [ 2997.052327] ? __fget_files+0x2cf/0x520 [ 2997.052760] ? lock_downgrade+0x6d0/0x6d0 [ 2997.053147] __io_queue_sqe+0x90/0x9d0 [ 2997.053559] ? io_issue_sqe+0x77b0/0x77b0 [ 2997.053941] ? __fget_files+0x2f8/0x520 [ 2997.054310] ? io_prep_rw+0x7f5/0x1050 [ 2997.054721] io_submit_sqes+0x44aa/0x8610 [ 2997.055149] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2997.055659] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2997.056111] ? lock_downgrade+0x6d0/0x6d0 [ 2997.056564] ? find_held_lock+0x2c/0x110 [ 2997.056945] ? io_submit_sqes+0x8610/0x8610 [ 2997.057402] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2997.057858] ? wait_for_completion_io+0x270/0x270 [ 2997.058304] ? rcu_read_lock_any_held+0x75/0xa0 [ 2997.058783] ? vfs_write+0x354/0xb10 [ 2997.059149] ? fput_many+0x2f/0x1a0 [ 2997.059534] ? ksys_write+0x1a9/0x260 [ 2997.059886] ? __ia32_sys_read+0xb0/0xb0 [ 2997.060264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2997.060821] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2997.061299] do_syscall_64+0x33/0x40 [ 2997.061689] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2997.062160] RIP: 0033:0x7fd311e28b19 [ 2997.062554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2997.064285] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2997.065054] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2997.065751] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2997.066451] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2997.067129] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2997.067841] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:02:00 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000001e00)={{r0}, "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"}) 10:02:00 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x8c, 0x0) 10:02:00 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0xc, 0xf8, 0x1f, 0x10, 0x0, 0x6, 0x8108c, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x10001, 0x7}, 0x400, 0xc306, 0x240, 0x4, 0x4, 0x7, 0x8, 0x0, 0x6}, 0x0, 0x4, r0, 0x1) 10:02:00 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 10:02:00 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 53) 10:02:00 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2a00) 10:02:00 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1d49, &(0x7f0000000040)={0x0, 0x1d07, 0x0, 0x1, 0x3ad, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:02:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xfffff000, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 2997.694587] FAULT_INJECTION: forcing a failure. [ 2997.694587] name failslab, interval 1, probability 0, space 0, times 0 [ 2997.695730] CPU: 1 PID: 14728 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 2997.696306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2997.697058] Call Trace: [ 2997.697290] dump_stack+0x107/0x167 [ 2997.697697] should_fail.cold+0x5/0xa [ 2997.698022] ? create_object.isra.0+0x3a/0xa20 [ 2997.698456] should_failslab+0x5/0x20 [ 2997.698782] kmem_cache_alloc+0x5b/0x310 [ 2997.699145] ? mark_held_locks+0x9e/0xe0 [ 2997.699543] create_object.isra.0+0x3a/0xa20 [ 2997.699912] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2997.700339] kmem_cache_alloc_bulk+0x168/0x320 [ 2997.700782] io_submit_sqes+0x6fe6/0x8610 [ 2997.701160] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2997.701635] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2997.702046] ? lock_downgrade+0x6d0/0x6d0 [ 2997.702467] ? find_held_lock+0x2c/0x110 [ 2997.702826] ? io_submit_sqes+0x8610/0x8610 [ 2997.703217] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2997.703684] ? wait_for_completion_io+0x270/0x270 [ 2997.704102] ? rcu_read_lock_any_held+0x75/0xa0 [ 2997.704545] ? vfs_write+0x354/0xb10 [ 2997.704865] ? fput_many+0x2f/0x1a0 [ 2997.705189] ? ksys_write+0x1a9/0x260 [ 2997.705577] ? __ia32_sys_read+0xb0/0xb0 [ 2997.705927] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2997.706380] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2997.706871] do_syscall_64+0x33/0x40 [ 2997.707217] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2997.707728] RIP: 0033:0x7fd311e28b19 [ 2997.708051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2997.709746] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2997.710447] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 2997.711073] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2997.711760] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2997.712374] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2997.713018] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:02:01 executing program 7: ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000001080)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000010c0)={0x1, 'macvlan1\x00', {}, 0x8000}) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:02:01 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001100)={0x3, 0x80, 0x3, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x800, 0x0, 0x20000, 0x6, 0x7, 0x0, 0x7fff, 0x0, 0x6, 0x0, 0x2}, 0x0, 0x4, r0, 0x2) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 2997.729381] FAULT_INJECTION: forcing a failure. [ 2997.729381] name failslab, interval 1, probability 0, space 0, times 0 [ 2997.730479] CPU: 1 PID: 14735 Comm: syz-executor.6 Not tainted 5.10.223 #1 [ 2997.731199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2997.732032] Call Trace: [ 2997.732261] dump_stack+0x107/0x167 [ 2997.732616] should_fail.cold+0x5/0xa [ 2997.732945] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2997.737668] should_failslab+0x5/0x20 [ 2997.737990] kmem_cache_alloc_trace+0x55/0x320 [ 2997.738379] io_uring_alloc_task_context+0x99/0x6a0 [ 2997.738872] ? io_import_iovec+0x1120/0x1120 [ 2997.739258] ? find_held_lock+0x2c/0x110 [ 2997.739655] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2997.740064] __io_uring_add_tctx_node+0x2c6/0x520 [ 2997.740517] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2997.740986] __do_sys_io_uring_enter+0x1489/0x18c0 [ 2997.741449] ? lock_downgrade+0x6d0/0x6d0 [ 2997.741806] ? find_held_lock+0x2c/0x110 [ 2997.742153] ? io_submit_sqes+0x8610/0x8610 [ 2997.742596] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2997.743005] ? wait_for_completion_io+0x270/0x270 [ 2997.743481] ? rcu_read_lock_any_held+0x75/0xa0 [ 2997.743872] ? vfs_write+0x354/0xb10 [ 2997.744188] ? fput_many+0x2f/0x1a0 [ 2997.744549] ? ksys_write+0x1a9/0x260 [ 2997.744873] ? __ia32_sys_read+0xb0/0xb0 [ 2997.745219] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2997.745714] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2997.746149] do_syscall_64+0x33/0x40 [ 2997.746512] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2997.746951] RIP: 0033:0x7f6f59063b19 [ 2997.747276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2997.748911] RSP: 002b:00007f6f565b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2997.749636] RAX: ffffffffffffffda RBX: 00007f6f59177020 RCX: 00007f6f59063b19 [ 2997.750235] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005 [ 2997.750877] RBP: 00007f6f565b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2997.751574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2997.752172] R13: 00007ffccb8c7bff R14: 00007f6f565b8300 R15: 0000000000022000 10:02:01 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0xfb, 0x0) 10:02:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xffffff7f, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:02:01 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000001c0)=0x28) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r8}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000040)={0x1, r9}) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r10, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = dup(r3) syz_io_uring_submit(r10, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2000, @fd=r11, 0x30, 0x2, 0x64, 0x6, 0x0, {0x2}}, 0x2) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:02:01 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3000) 10:02:16 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 54) 10:02:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x14e, 0x0) 10:02:16 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 10:02:16 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3575, 0x0, 0x0, 0x1cf}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = signalfd4(r0, &(0x7f0000000040)={[0x6]}, 0x8, 0x800) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12344, 0x0, 0x0, 0x1, {0x0, r4}}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:02:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0x0, 0x7f, 0x0, 0xac, 0x0, 0x2, 0x20, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x6}, 0xd0, 0x3, 0x0, 0x5, 0x7fff, 0x1, 0x0, 0x0, 0x5, 0x0, 0xffffffff}, 0x0, 0x1, r0, 0x9) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) write$binfmt_elf64(r0, &(0x7f0000001180)={{0x7f, 0x45, 0x4c, 0x46, 0xfb, 0x80, 0xfc, 0x7, 0xe44, 0x2, 0x3, 0xcdd, 0x344, 0x40, 0x3d8, 0xff, 0x0, 0x38, 0x2, 0x800, 0x0, 0x4}, [{0x7, 0xf86, 0x100000001, 0x100000001, 0x6, 0xffffffffffffffff, 0x5, 0xffffffff7fffffff}], "3d95cae04bb9dd5407e98747384e16bf40fb7b7e2b447de876f4344d03e9fbd560a91b16426ed9a17ab65fb1552a3323544aa7dc7f39af6f35961d1e6af018b575d47ebc787f01201641e60a3b30453d8324f8702bd23e75aa2847e72d1f4addb6bd6e755a1dcbfe97b674088002e1dfbe75473a731246ec1887f2d3c8faa299c3d7ff5a7e20bd2893a371a57e843934ef74b51f68cd419719b290d938765894a54fad99651e28dad0351e9d71e3be04b22a93fab8c975dca23132d43d80f37b0bb5", ['\x00', '\x00']}, 0x33a) 10:02:16 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001280)=ANY=[@ANYBLOB="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"]) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x720c0, 0x0) r3 = accept4(r0, &(0x7f0000001100)=@rc={0x1f, @fixed}, &(0x7f0000001080)=0x80, 0x80000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000001180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write(r1, &(0x7f0000001e00)="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", 0x1000) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:02:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xffffff80, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:02:16 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3600) 10:02:17 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000001100)={{0x1, 0x1, 0x18, r0, {0xcd16}}, './file0\x00'}) openat(r2, &(0x7f0000001140)='./file0/file0\x00', 0x40080, 0x68) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000001180), 0xf8a, 0x2000) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000011c0)={'lo\x00'}) creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r4, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000001080)=ANY=[@ANYBLOB="04000000000000120000"]) [ 3013.758836] FAULT_INJECTION: forcing a failure. [ 3013.758836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3013.761759] CPU: 1 PID: 14769 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3013.763455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3013.765510] Call Trace: [ 3013.766108] dump_stack+0x107/0x167 [ 3013.767012] should_fail.cold+0x5/0xa [ 3013.767946] _copy_to_iter+0x264/0x12d0 [ 3013.768896] ? chacha_block_generic+0x13e/0x200 [ 3013.770007] ? chacha_permute+0x6f0/0x6f0 [ 3013.771024] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3013.772238] get_random_bytes_user+0x173/0x3b0 [ 3013.773328] ? get_random_u32+0x670/0x670 [ 3013.774326] ? wait_for_random_bytes+0x91/0xe0 [ 3013.775511] ? security_file_permission+0xb1/0xe0 [ 3013.776680] ? get_random_bytes_user+0x3b0/0x3b0 [ 3013.777797] random_read_iter+0x65/0x140 [ 3013.778766] io_read+0x2dc/0x11e0 [ 3013.779679] ? kiocb_done+0xc90/0xc90 [ 3013.780589] ? mark_lock+0xf5/0x2df0 [ 3013.781493] ? lock_chain_count+0x20/0x20 [ 3013.782502] ? stack_trace_consume_entry+0x160/0x160 [ 3013.783733] ? lock_acquire+0x197/0x470 [ 3013.784712] ? __lock_acquire+0xbb1/0x5b00 [ 3013.785730] io_issue_sqe+0x2e8a/0x77b0 [ 3013.786696] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3013.787965] ? SOFTIRQ_verbose+0x10/0x10 [ 3013.788962] ? lock_chain_count+0x20/0x20 [ 3013.789962] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3013.791147] ? io_connect+0x610/0x610 [ 3013.792046] ? lock_acquire+0x197/0x470 [ 3013.792977] ? find_held_lock+0x2c/0x110 [ 3013.793931] ? __fget_files+0x2cf/0x520 [ 3013.794835] ? lock_downgrade+0x6d0/0x6d0 [ 3013.795807] __io_queue_sqe+0x90/0x9d0 [ 3013.796711] ? io_issue_sqe+0x77b0/0x77b0 [ 3013.797671] ? __fget_files+0x2f8/0x520 [ 3013.798582] ? io_prep_rw+0x7f5/0x1050 [ 3013.803336] io_submit_sqes+0x44aa/0x8610 [ 3013.803718] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3013.804141] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3013.804556] ? lock_downgrade+0x6d0/0x6d0 [ 3013.804904] ? find_held_lock+0x2c/0x110 [ 3013.805252] ? io_submit_sqes+0x8610/0x8610 [ 3013.805631] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3013.806042] ? wait_for_completion_io+0x270/0x270 [ 3013.806455] ? rcu_read_lock_any_held+0x75/0xa0 [ 3013.806845] ? vfs_write+0x354/0xb10 [ 3013.807161] ? fput_many+0x2f/0x1a0 [ 3013.807508] ? ksys_write+0x1a9/0x260 [ 3013.807831] ? __ia32_sys_read+0xb0/0xb0 [ 3013.808178] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3013.808618] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3013.809053] do_syscall_64+0x33/0x40 [ 3013.809371] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3013.809801] RIP: 0033:0x7fd311e28b19 10:02:17 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x184, 0x0) [ 3013.810116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3013.811749] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3013.812404] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3013.813001] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3013.813599] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3013.814199] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3013.814797] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 [ 3013.824280] FAULT_INJECTION: forcing a failure. [ 3013.824280] name failslab, interval 1, probability 0, space 0, times 0 [ 3013.825351] CPU: 0 PID: 14779 Comm: syz-executor.6 Not tainted 5.10.223 #1 [ 3013.825985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3013.826757] Call Trace: [ 3013.831349] dump_stack+0x107/0x167 [ 3013.831691] should_fail.cold+0x5/0xa [ 3013.832049] ? create_object.isra.0+0x3a/0xa20 [ 3013.832476] should_failslab+0x5/0x20 [ 3013.832831] kmem_cache_alloc+0x5b/0x310 [ 3013.833213] create_object.isra.0+0x3a/0xa20 [ 3013.833624] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3013.834096] kmem_cache_alloc_trace+0x151/0x320 [ 3013.834536] io_uring_alloc_task_context+0x99/0x6a0 [ 3013.834999] ? io_import_iovec+0x1120/0x1120 [ 3013.835698] ? find_held_lock+0x2c/0x110 [ 3013.836530] ? percpu_ref_tryget_many+0x166/0x2d0 [ 3013.837540] __io_uring_add_tctx_node+0x2c6/0x520 [ 3013.838537] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3013.839431] __do_sys_io_uring_enter+0x1489/0x18c0 [ 3013.839890] ? lock_downgrade+0x6d0/0x6d0 [ 3013.840275] ? find_held_lock+0x2c/0x110 [ 3013.840656] ? io_submit_sqes+0x8610/0x8610 [ 3013.841066] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3013.841517] ? wait_for_completion_io+0x270/0x270 [ 3013.841969] ? rcu_read_lock_any_held+0x75/0xa0 [ 3013.842400] ? vfs_write+0x354/0xb10 [ 3013.842748] ? fput_many+0x2f/0x1a0 [ 3013.843088] ? ksys_write+0x1a9/0x260 [ 3013.843785] ? __ia32_sys_read+0xb0/0xb0 [ 3013.844586] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3013.845619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3013.846632] do_syscall_64+0x33/0x40 [ 3013.847304] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3013.847784] RIP: 0033:0x7f6f59063b19 [ 3013.848132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3013.849837] RSP: 002b:00007f6f565b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3013.850545] RAX: ffffffffffffffda RBX: 00007f6f59177020 RCX: 00007f6f59063b19 [ 3013.851250] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005 [ 3013.851913] RBP: 00007f6f565b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 3013.852570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3013.853230] R13: 00007ffccb8c7bff R14: 00007f6f565b8300 R15: 0000000000022000 10:02:17 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3c00) 10:02:17 executing program 7: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001080)=0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x71, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001040)}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/4126, 0x101e, 0x0) 10:02:32 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 10:02:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xffffff9e, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:02:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x100000, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:02:32 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x800000) 10:02:32 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x234e, &(0x7f0000000040)={0x0, 0x6f41, 0x20, 0x0, 0x216, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x1) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x540a, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:02:32 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 55) 10:02:32 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x1ba, 0x0) 10:02:32 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x1, r3}) getresuid(&(0x7f0000001080), &(0x7f0000001100), &(0x7f0000001140)=0x0) sendmsg$nl_generic(r1, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001180)={&(0x7f0000001e00)={0x1294, 0xe9ea, 0x2fb22c9cedc929ce, 0x70bd2a, 0x25dfdbfe, {0x10}, [@generic="1e8c52566cb49948f2eae02adc38e11583b578569e6d9f40f50b43ad6f06e06e1c179652dbd97d03e382ac9fb2f03a6c8d2f8bc094eeefea01771a2f0b702a49db9f46e32a3d32ea19c66f1381eaaddb027c770a373564fd47604dd156ddae564f50ec608bee884ec192447e142b8f9ee3300013ebbf4f17984b0bdb225cab4dd2c9066c186ddda54c34c410f998f53679f4f218ddead6c335d4c9d985b760deb542d9f02125547492b857b0ec6882a3ece09f787a0170143fa09f86eaa00b19aefbcde1b178f2911acb011161d3cdecd18f52c664ddef2b522eae03a082de8da0d2b76cf08712d9433351d8b408b8", @generic="14e7b7142e6afeb65c897b93fd9d71bc79fa61ec967543842715e5", @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@loopback}, @generic="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", @nested={0x82, 0x1d, 0x0, 0x1, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x38, 0x0, 0x0, @u32=0xfa1d}, @generic="7a43ec84d17cc3217a6931c5f416652f8d9392989e5180bd18724e2f516eaf44acae872a223c7d386cf32d43a687b8c58eac925af21c59c5d5360e819acf84bb76783850d1f6d2a9002ccce666b28b352219082d715c0dd3a2a0", @typed={0x8, 0x6d, 0x0, 0x0, @pid=r3}]}, @typed={0x8, 0x7b, 0x0, 0x0, @uid=r4}, @generic="3ad51c361fdd63c7f858d3451c948614029eb5b541e17826f351126f6e4e689436f1ea1eea0dff8dad1085cf5327483a6106883d8bf5e8e4b1245eeb073e51ad147dde208e39dadec39293b439f71b8591309956325b48a2cf58f85bd686a195ac7d656f5aab355caaf39ad2b537701dcc5c795afe0355cce5d2654807515b779382783c243df1534ad8f28e15edeeaa7c95462a669174c0dd3391a46207dcde60eeec343304cfca2939702354eede9a27e72f36baf024d338949319039c25f369fdba75995bdf95237c2ceade2ffddcf5bd1fcf51511edcb45dfc498820ae"]}, 0x1294}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:02:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xfffffff0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3029.549890] FAULT_INJECTION: forcing a failure. [ 3029.549890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3029.552962] CPU: 1 PID: 14811 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3029.554582] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3029.556521] Call Trace: [ 3029.557127] dump_stack+0x107/0x167 [ 3029.557957] should_fail.cold+0x5/0xa [ 3029.558855] _copy_from_user+0x2e/0x1b0 [ 3029.559804] iovec_from_user+0x141/0x400 [ 3029.560761] __import_iovec+0x67/0x590 [ 3029.561676] io_import_iovec+0x581/0x1120 [ 3029.562635] ? io_complete_rw+0x230/0x230 [ 3029.563609] ? kiocb_done+0x16b/0xc90 [ 3029.564478] io_read+0xe14/0x11e0 [ 3029.565253] ? kiocb_done+0xc90/0xc90 [ 3029.566155] ? mark_lock+0xf5/0x2df0 [ 3029.567026] ? lock_chain_count+0x20/0x20 [ 3029.567999] ? stack_trace_consume_entry+0x160/0x160 [ 3029.569171] ? lock_acquire+0x197/0x470 [ 3029.570116] ? __lock_acquire+0xbb1/0x5b00 [ 3029.571118] io_issue_sqe+0x2e8a/0x77b0 [ 3029.572145] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3029.573443] ? SOFTIRQ_verbose+0x10/0x10 [ 3029.574449] ? lock_chain_count+0x20/0x20 [ 3029.575486] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3029.576852] ? io_connect+0x610/0x610 [ 3029.577822] ? lock_acquire+0x197/0x470 [ 3029.578798] ? find_held_lock+0x2c/0x110 [ 3029.579813] ? __fget_files+0x2cf/0x520 [ 3029.580828] ? lock_downgrade+0x6d0/0x6d0 [ 3029.581794] __io_queue_sqe+0x90/0x9d0 [ 3029.582701] ? io_issue_sqe+0x77b0/0x77b0 [ 3029.583662] ? __fget_files+0x2f8/0x520 [ 3029.584588] ? io_prep_rw+0x7f5/0x1050 [ 3029.585494] io_submit_sqes+0x44aa/0x8610 [ 3029.586462] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3029.587627] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3029.588822] ? lock_downgrade+0x6d0/0x6d0 [ 3029.589769] ? find_held_lock+0x2c/0x110 [ 3029.590725] ? io_submit_sqes+0x8610/0x8610 [ 3029.591859] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3029.593077] ? wait_for_completion_io+0x270/0x270 [ 3029.594258] ? rcu_read_lock_any_held+0x75/0xa0 [ 3029.595415] ? vfs_write+0x354/0xb10 [ 3029.596367] ? fput_many+0x2f/0x1a0 [ 3029.597244] ? ksys_write+0x1a9/0x260 [ 3029.598204] ? __ia32_sys_read+0xb0/0xb0 [ 3029.599189] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3029.600492] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3029.601717] do_syscall_64+0x33/0x40 [ 3029.602600] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3029.603883] RIP: 0033:0x7fd311e28b19 [ 3029.604768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3029.609187] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3029.610980] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3029.612741] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3029.614472] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3029.616230] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3029.617912] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:02:33 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001e00)=""/4129, 0x1021, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xfffffffffffffffd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:02:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000001140)={0x3, 0x80, 0x2, 0x5, 0x4, 0x6b, 0x0, 0x1, 0x4, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f0000001100), 0xb}, 0x4818, 0x1, 0x0, 0x4, 0x8001, 0xe5, 0x0, 0x0, 0xff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) lseek(r1, 0x7fff, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x218081) openat$hpet(0xffffffffffffff9c, &(0x7f0000001080), 0x800, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000011c0)={0x4, 0x2, {0x0, 0xd85cbee93c99e236, 0x400, 0x1, 0x22ac66f9}, 0x40}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x540a, 0x3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x540a, 0x3) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0xffffffff) [ 3029.640772] FAULT_INJECTION: forcing a failure. [ 3029.640772] name failslab, interval 1, probability 0, space 0, times 0 [ 3029.642522] CPU: 0 PID: 14814 Comm: syz-executor.6 Not tainted 5.10.223 #1 [ 3029.644174] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3029.646120] Call Trace: [ 3029.646434] dump_stack+0x107/0x167 [ 3029.646845] should_fail.cold+0x5/0xa [ 3029.647275] ? create_object.isra.0+0x3a/0xa20 [ 3029.647823] should_failslab+0x5/0x20 [ 3029.648247] kmem_cache_alloc+0x5b/0x310 [ 3029.648719] create_object.isra.0+0x3a/0xa20 [ 3029.649213] kmemleak_alloc_percpu+0xa0/0x100 [ 3029.649812] pcpu_alloc+0x4e2/0x1240 [ 3029.650225] __percpu_counter_init+0x10d/0x2d0 [ 3029.650728] io_uring_alloc_task_context+0xcc/0x6a0 [ 3029.651272] ? io_import_iovec+0x1120/0x1120 [ 3029.651749] ? find_held_lock+0x2c/0x110 [ 3029.652190] ? percpu_ref_tryget_many+0x166/0x2d0 [ 3029.654171] __io_uring_add_tctx_node+0x2c6/0x520 [ 3029.655271] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3029.655785] __do_sys_io_uring_enter+0x1489/0x18c0 [ 3029.656249] ? lock_downgrade+0x6d0/0x6d0 [ 3029.656633] ? find_held_lock+0x2c/0x110 [ 3029.657014] ? io_submit_sqes+0x8610/0x8610 [ 3029.657423] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3029.657874] ? wait_for_completion_io+0x270/0x270 [ 3029.658323] ? rcu_read_lock_any_held+0x75/0xa0 [ 3029.658754] ? vfs_write+0x354/0xb10 [ 3029.659100] ? fput_many+0x2f/0x1a0 [ 3029.659486] ? ksys_write+0x1a9/0x260 [ 3029.659912] ? __ia32_sys_read+0xb0/0xb0 [ 3029.660368] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3029.660957] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3029.661539] do_syscall_64+0x33/0x40 [ 3029.661961] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3029.662542] RIP: 0033:0x7f6f59063b19 [ 3029.662966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3029.664748] RSP: 002b:00007f6f565b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3029.665456] RAX: ffffffffffffffda RBX: 00007f6f59177020 RCX: 00007f6f59063b19 [ 3029.666116] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005 [ 3029.666781] RBP: 00007f6f565b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 3029.667477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3029.668282] R13: 00007ffccb8c7bff R14: 00007f6f565b8300 R15: 0000000000022000 10:02:33 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x1f0, 0x0) 10:02:33 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x6000000) 10:02:33 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 56) 10:02:33 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x225, 0x0) 10:02:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xfffffffc, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3029.937855] FAULT_INJECTION: forcing a failure. [ 3029.937855] name failslab, interval 1, probability 0, space 0, times 0 [ 3029.939566] CPU: 1 PID: 14834 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3029.940477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3029.941458] Call Trace: [ 3029.941783] dump_stack+0x107/0x167 [ 3029.942219] should_fail.cold+0x5/0xa [ 3029.942658] ? create_object.isra.0+0x3a/0xa20 [ 3029.943101] should_failslab+0x5/0x20 [ 3029.943531] kmem_cache_alloc+0x5b/0x310 [ 3029.943926] ? find_held_lock+0x2c/0x110 [ 3029.944316] create_object.isra.0+0x3a/0xa20 [ 3029.944786] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3029.945280] __kmalloc_node+0x1ae/0x420 [ 3029.945723] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 3029.946222] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 3029.946762] kmem_cache_alloc_bulk+0x182/0x320 [ 3029.947219] io_submit_sqes+0x6fe6/0x8610 [ 3029.947713] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3029.948197] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3029.948712] ? lock_downgrade+0x6d0/0x6d0 [ 3029.949116] ? find_held_lock+0x2c/0x110 [ 3029.949568] ? io_submit_sqes+0x8610/0x8610 [ 3029.949996] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3029.950523] ? wait_for_completion_io+0x270/0x270 [ 3029.950994] ? rcu_read_lock_any_held+0x75/0xa0 [ 3029.951494] ? vfs_write+0x354/0xb10 [ 3029.951850] ? fput_many+0x2f/0x1a0 [ 3029.952197] ? ksys_write+0x1a9/0x260 [ 3029.952619] ? __ia32_sys_read+0xb0/0xb0 [ 3029.953013] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3029.953559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3029.954080] do_syscall_64+0x33/0x40 [ 3029.954489] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3029.954997] RIP: 0033:0x7fd311e28b19 [ 3029.955410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3029.957270] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3029.958047] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3029.958774] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3029.959494] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3029.960206] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3029.960888] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:02:48 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000c, 0x20010, r0, 0x8000000) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001a40), 0x180800, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000001a80)) r5 = syz_io_uring_complete(r3) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000001b00), 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x4007, @fd=r0, 0x6, &(0x7f0000001e00), 0x0, 0x0, 0x1, {0x0, r6}}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x10, 0x5, 0x1ffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x92) sendmmsg$sock(r8, &(0x7f00000019c0)=[{{&(0x7f0000000240)=@l2={0x1f, 0x81, @any, 0x40, 0x2}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)="67ac54f2e075b15859447074d42d8bad41c86adb488244307503c6d3b14adcd689eca85d3beb09208e87b04cb6bacf8fe7878767d27ee8c6d9640ffe8be1b71b29de7a2b7b367e1ddd45eec5337ea427e3cf510377635c0f4fc834ee59ce9a315ee828d607d16c201b1f8562f2d42c85c44e59fd8c86a4afa0f509a53fb7c387c56c66f711e4ae81662d4d7fb83c5fb42e3eec3f10f9046a92dcfcf446163dfc4e109e5cb273837c092503fc406ea808c6c9121da1238f90661d2d0e76643d9c5b3ba40470", 0xc5}, {&(0x7f0000000480)="a9a67a6706239544cded5b20151926848e6948932af87431f1c32ec2cf044e4164663a985c35f1b7ee7afe7bccd5d263631ae21198e4daed84654751103b0fb37f012150281a933f2069823317e05ddbcf2562a44a697d6c91eb57e2a9bb6196f98f38d4625b8f7bffdd26f9abbaeb05de272e8d4e5bb8d4cd93c922f519353215890fd240c0cd88e56881a5e3dc69e3e3bddb06f1bb1868f4a0e6e64704da0e3169146882d0364302e2b7a628ef608f2ef79e943fb4ed", 0xb7}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000540)="a75d2d9606a413e194a1082243dd04d2eb501a0db2a91f6356d1dea13f0e8846de844a10b14c55ac78f13966fa36396e8c1c44f8b4f251ad7d4b7f494d40db961a053837748ae5e0240e9292bb2bb93b9a5753de526759344782d664ba27fff4307d20e1b50dda279b0ba3863055218158f33a2e4ac7e660e5", 0x79}, {&(0x7f00000005c0)="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", 0xfc}], 0x5, &(0x7f0000000080)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x30}}, {{&(0x7f00000017c0)=@llc={0x1a, 0x336, 0x0, 0xf9, 0xdc, 0x1f, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001840)="04a87a1a5a2eacc65c1a0b6d205e5e6e9e0ee60dcc979139b1b16eca2a2a9ef0b9345d0e9ab7b6975e3e4523dd93c9734262f5c8055282f388ac9d5deab005438462352e6366b9ca1d5d010015e65d5c0cee060fdd20ac31f981374dd80d965892afe70fa561c617af986ff8e07934936906d2b92c30cb802d472d2e1846c357efd20aa8ce6d4ce22c289169c8b9b6bd701db57b41785bf497d8b5188859523c15ea50e46cc6441c9dc214d75473af663eb1d57875e92d828b8607dfeed129c717f4a5307fc955a772743c2a926582774177890b11d50e631abae68988ee13ab6efb86498263234475", 0xe9}], 0x1, &(0x7f0000001940)=[@mark={{0x14, 0x1, 0x24, 0xac}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x10000}}], 0x78}}], 0x2, 0x4000c000) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:02:48 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 10:02:48 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xc000000) 10:02:48 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendfile(r0, r2, &(0x7f0000001080)=0x9, 0x9) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000001140)={0xf7, 0x2, 0x7, 0x6c1, 0x800000}) pipe2(&(0x7f0000001100), 0x4000) pread64(r1, &(0x7f0000000040)=""/4117, 0xffffffffffffffa4, 0x6) 10:02:48 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7fff, &(0x7f0000000000)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x540a, 0x3) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) openat(r3, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) pipe(&(0x7f0000001200)={0xffffffffffffffff}) socketpair(0x5, 0x3, 0x4, &(0x7f00000012c0)={0xffffffffffffffff}) r6 = syz_open_dev$vcsu(&(0x7f0000001340), 0x2, 0x8000) r7 = accept(0xffffffffffffffff, &(0x7f00000013c0)=@ax25={{0x3, @default}, [@remote, @null, @null, @remote, @netrom, @default, @rose, @bcast]}, &(0x7f0000001440)=0x80) r8 = socket$netlink(0x10, 0x3, 0x13) r9 = openat$incfs(0xffffffffffffffff, &(0x7f0000001600)='.log\x00', 0x800, 0x2) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001680)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r11, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r11, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) io_submit(r1, 0x9, &(0x7f0000001940)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffffffffffff, &(0x7f0000001080)="005fe75a41e195b750d14031aa8ef0a74384cf0074b53943c20b6871b28b0e6a46d29619aae3a8f4a1e609f96ea0", 0x2e, 0xfff, 0x0, 0x6}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x7, 0x1, r2, &(0x7f0000001140)="d99434ad7bd306b85031b680987c3ccf004562130ec5d3f9de54a84bfed5e23779c4c0986a6362e68ee69875c54189ef83ff9d1387388baa2a1f061be1aaf0345c996b75425ac39b32f09fe22dc07425deaf14d840e72887ac89ad", 0x5b, 0xd0, 0x0, 0x3, r3}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x1, 0x1, r4, &(0x7f0000001240)="dba5", 0x2, 0x4000000000000, 0x0, 0x1}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x8, 0xaed4, r5, &(0x7f0000001300)="676aa5f5fc56f8a525cca196fe6d1f922fb5f1efb44bdeac3146c016bee6bd4f4e10d04492358c7f00e658", 0x2b, 0x0, 0x0, 0x1, r6}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x4, r7, &(0x7f0000001480)="1bf00acf1ae05b9cfafe62bdda5c5bc94895cac489eb0503428878640a2d4421d3798880fb0734fa1cd4305ae0597e03", 0x30, 0x22d, 0x0, 0x2}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f0000001e00)="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", 0x1000, 0x5, 0x0, 0x1}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x2, 0x1, r8, &(0x7f0000001540)="c77387ce29215c3f888c8bc9407df98fc8264e201b0caaa718860f7775d11bfd1d936e53939c2a60d08742cd5a1d3252a5a5f734a03192cc720e1934c8fa42b6cb0ad19b3d16033840d8c04f9ff3f2746e82ee342131f7f63ecfad4c97fc9a80527dba38b816ff2fc57ebefdd604325a00fa2e794329d7f097d8181dcb88a62c5f0444ea8eb30774d71e7cf8de30a464ba53cb2c2345ef7e15a7d5f681e1ae17ec33d96d8076", 0xa6, 0x59, 0x0, 0x3, r9}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x1, 0x4fa, r10, &(0x7f00000016c0)="d389e4373242d9fc995efaea6fe17ad0c290a385b1c3367017f99d7b76ccd3af53ee204868e4562958ee976937a118e87306456d32d6d9309838455683d29c4f91e088686340275a6c00d241948162dbca93e5e629456635e087ec831f8356237e7a1a0a9599db33cb323f891626790c75bb7b9d642ea6beeb26f74151b355aacf196eab6999b9e68ed7d7a1a44d5200fb66376fabf9d99ed57b83929fcb261e8ca4cf734e91520902196000ca8266e570e47d4818bd4c804267fb7b793f1d627477684cf43c125dfce963252acdd2f7ee87ffde23b1be6e4ef30aa9ea13fd258bbdb6", 0xe3, 0xffff000000, 0x0, 0x0, r11}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x78b594043ca4ac93, 0x3, r0, &(0x7f0000001800)="3079e11de344f6aad44462406c03b43ee88db83c3bb8cdefc43491c5b2fc6ed877bca54df5077b50a1c8ee12175a7b72ca47b7202ff55d0bf468898f048d258afcf7d411487b2ce8f539b9a0ab3d649e6dc80443b3e8d01631af4f9b28ac3454bb41fb843e7a22c6674d78730cb673de5bb26339fea9e3076e726cd3d1c0eac291a703260751fd4712e6a74181004332db16f639cd58f57395e1dc1e2b5c5aeead386b4e160feaa9f10e29146cf257330e823c925885c4b2544f24ce2e7e0be0c0bd26b3b023ea0a6d79f794638c12229960ef55", 0xd4, 0x0, 0x0, 0x6}]) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r12, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:02:48 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x25b, 0x0) 10:02:48 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 57) 10:02:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty=0xffffffff, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:02:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:02:48 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r3, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000001440)={{0x1, 0x1, 0x18, r0, {0xfffffff8}}, './file0\x00'}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000016c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) bind$bt_l2cap(r5, &(0x7f0000001700)={0x1f, 0x3, @none, 0x3ff, 0x1}, 0xe) ioctl$TCXONC(r4, 0x540a, 0x3) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) r7 = syz_open_dev$vcsu(&(0x7f0000001340), 0x2, 0x20000) r8 = syz_io_uring_complete(0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000001380)={0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, [{{r6}, 0xd4eb}, {{r7}, 0x7f}, {{r8}, 0x3}, {{r0}, 0x40}, {{r2}, 0x100000000}]}) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 3044.981979] FAULT_INJECTION: forcing a failure. [ 3044.981979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3044.983224] CPU: 0 PID: 14858 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3044.988141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3044.988919] Call Trace: [ 3044.989186] dump_stack+0x107/0x167 [ 3044.989542] should_fail.cold+0x5/0xa [ 3044.989919] _copy_to_iter+0x264/0x12d0 [ 3044.990317] ? chacha_block_generic+0x13e/0x200 [ 3044.990773] ? chacha_permute+0x6f0/0x6f0 [ 3044.991174] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3044.991696] get_random_bytes_user+0x173/0x3b0 [ 3044.992137] ? get_random_u32+0x670/0x670 [ 3044.992532] ? wait_for_random_bytes+0x91/0xe0 [ 3044.992972] ? security_file_permission+0xb1/0xe0 [ 3044.993423] ? get_random_bytes_user+0x3b0/0x3b0 [ 3044.993858] random_read_iter+0x65/0x140 [ 3044.994237] io_read+0x2dc/0x11e0 [ 3044.994573] ? kiocb_done+0xc90/0xc90 [ 3044.994927] ? mark_lock+0xf5/0x2df0 [ 3044.995280] ? lock_chain_count+0x20/0x20 [ 3044.995708] ? stack_trace_consume_entry+0x160/0x160 [ 3044.996187] ? lock_acquire+0x197/0x470 [ 3044.996562] ? __lock_acquire+0xbb1/0x5b00 [ 3044.996956] io_issue_sqe+0x2e8a/0x77b0 [ 3044.997335] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3044.997823] ? SOFTIRQ_verbose+0x10/0x10 [ 3044.998197] ? lock_chain_count+0x20/0x20 [ 3044.998584] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3044.999066] ? io_connect+0x610/0x610 [ 3044.999424] ? lock_acquire+0x197/0x470 [ 3044.999830] ? find_held_lock+0x2c/0x110 [ 3045.000214] ? __fget_files+0x2cf/0x520 [ 3045.000583] ? lock_downgrade+0x6d0/0x6d0 [ 3045.000970] __io_queue_sqe+0x90/0x9d0 [ 3045.001337] ? io_issue_sqe+0x77b0/0x77b0 [ 3045.001717] ? __fget_files+0x2f8/0x520 [ 3045.002087] ? io_prep_rw+0x7f5/0x1050 [ 3045.002452] io_submit_sqes+0x44aa/0x8610 [ 3045.002858] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3045.003318] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3045.003802] ? lock_downgrade+0x6d0/0x6d0 [ 3045.004195] ? find_held_lock+0x2c/0x110 [ 3045.004587] ? io_submit_sqes+0x8610/0x8610 [ 3045.004994] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3045.005444] ? wait_for_completion_io+0x270/0x270 [ 3045.005891] ? rcu_read_lock_any_held+0x75/0xa0 [ 3045.006321] ? vfs_write+0x354/0xb10 [ 3045.006668] ? fput_many+0x2f/0x1a0 [ 3045.007006] ? ksys_write+0x1a9/0x260 [ 3045.007359] ? __ia32_sys_read+0xb0/0xb0 [ 3045.007774] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3045.008258] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3045.008735] do_syscall_64+0x33/0x40 [ 3045.009079] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3045.009554] RIP: 0033:0x7fd311e28b19 [ 3045.009899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3045.011617] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3045.012319] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3045.012975] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3045.013632] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3045.014285] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 10:02:48 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x291, 0x0) [ 3045.014938] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 [ 3045.064796] FAULT_INJECTION: forcing a failure. [ 3045.064796] name failslab, interval 1, probability 0, space 0, times 0 [ 3045.066678] CPU: 0 PID: 14862 Comm: syz-executor.6 Not tainted 5.10.223 #1 [ 3045.068103] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3045.069616] Call Trace: [ 3045.070080] dump_stack+0x107/0x167 [ 3045.070725] should_fail.cold+0x5/0xa [ 3045.071404] ? create_object.isra.0+0x3a/0xa20 [ 3045.076465] should_failslab+0x5/0x20 [ 3045.077162] kmem_cache_alloc+0x5b/0x310 [ 3045.077908] create_object.isra.0+0x3a/0xa20 [ 3045.078717] kmemleak_alloc_percpu+0xa0/0x100 [ 3045.079550] pcpu_alloc+0x4e2/0x1240 [ 3045.079910] __percpu_counter_init+0x10d/0x2d0 [ 3045.080334] io_uring_alloc_task_context+0xcc/0x6a0 [ 3045.080798] ? io_import_iovec+0x1120/0x1120 [ 3045.081205] ? find_held_lock+0x2c/0x110 [ 3045.081590] ? percpu_ref_tryget_many+0x166/0x2d0 [ 3045.082037] __io_uring_add_tctx_node+0x2c6/0x520 [ 3045.082482] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3045.082975] __do_sys_io_uring_enter+0x1489/0x18c0 [ 3045.083430] ? lock_downgrade+0x6d0/0x6d0 [ 3045.083848] ? find_held_lock+0x2c/0x110 [ 3045.084231] ? io_submit_sqes+0x8610/0x8610 [ 3045.084635] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3045.085085] ? wait_for_completion_io+0x270/0x270 [ 3045.085532] ? rcu_read_lock_any_held+0x75/0xa0 [ 3045.085960] ? vfs_write+0x354/0xb10 [ 3045.086305] ? fput_many+0x2f/0x1a0 [ 3045.086645] ? ksys_write+0x1a9/0x260 [ 3045.086999] ? __ia32_sys_read+0xb0/0xb0 [ 3045.087379] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3045.087899] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3045.088380] do_syscall_64+0x33/0x40 [ 3045.088725] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3045.089201] RIP: 0033:0x7f6f59063b19 [ 3045.089548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3045.091236] RSP: 002b:00007f6f565b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3045.091974] RAX: ffffffffffffffda RBX: 00007f6f59177020 RCX: 00007f6f59063b19 [ 3045.092634] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005 [ 3045.093289] RBP: 00007f6f565b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 3045.093947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3045.094602] R13: 00007ffccb8c7bff R14: 00007f6f565b8300 R15: 0000000000022000 10:02:48 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 58) 10:02:48 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x12000000) 10:02:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x6}, 0x481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r1, &(0x7f00000014c0)=[{&(0x7f0000001100)="6e64770b2799f693b41d611ebf2fee3842c920c79bc756eb667ae47be82684058c36e3075894a7626d793e47d0be9e22a5ecf857b9f97eb1aded2633a49fb34f0be4c50f9c38a3f0cf5c9c702ec29913d455a5e1a1bc739f601517a20d8ecad9ff06e00de1502e90caed3c496530095f2988c5aef8cf22dc8445b98cfb", 0x7d}, {&(0x7f0000001180)="98853edf108f6395b4bd349d5d9759a849d3c5509d7c69e9e65d3bb03e346eb42e13ea3b1f7066e21d194358da8d76258827ba0d2467f9ecf044322384eb262b7c54cd719cb10d5863dfab5ef9714108871df6ed6b0214f8c490c851ce63bcc8c94563f2ce0dfad28567a5b105962412abb77466e7dee8d7c0f95a2d57c0021cef7eaeccba0ff7ead23b6dfaf6549460e1c39af484995290907fe72dfec30945f99abc371b7e728d0b3aaa5d5c060ac8fb360b276a9901aa17ac62ccff0dfa57ef95b02ce97fac7a1f8664e2d8f294bbcb5b868efdaf4ffe6c4127e4274ef18f71df4a0e", 0xe4}, {&(0x7f0000001680)="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", 0x10e}, {&(0x7f0000000000)="af756fca3ec6c504", 0x8}, {&(0x7f0000001080)="a4c653d1e0a5fdca8e9266d2891bfc7d77605c2638a70078e7b67a35136b29b54bd19163ef91658789", 0x29}, {&(0x7f0000001340)="9d823d40f1ef7c90be534105bf18e4fedcb185c779483b8b822e4bd4e3130e96edd6a3250b016f03204267ad28f343031bcd60e7141687335891a6e5d5c11c277ba966fa35fb25637ce9f054af6fe56ae634b02cc4eccb89df2997736e7c46a6bd380ca59a3bcf79a5cc6e89c4fb736b76a50248a99aaa69583132e3f42f10ad3fea4cfc717e3f3bc59183072112f1bc5462995a8a58738457e0aab56b0c1f179bff6bed9ad6b79abb5406566afd46d1bce4344bc5f4341299918a0fc27b2217ef3f558fbae63642f49d0fd24e4f468ea02801db931780c1", 0xd8}, {&(0x7f0000001540)="e285e4f70c55f7350b97f5aedff412a2bd460b300e494aea48f78f7b6fe9ec01c55be879543bb75a7dd92c72080c29f6763f84ad3443d716010d4833bae4a7efa4f736dfdc887c652a0930fa05e3dafee0d15bd19979a06151c7b236eb477984d38302fa5eab1d5b80ce15c8c263474e27612606a6003fc321998811000000002d5bd34e4223be006ebeecc4974777dc3622cfa35d21a5779f09000000e4167f3fbd5fd6fbb49ca87b7900f786f7240463867f19bb35e60f5b0178121ad9439e6d0c05840e725315fe1ce41948f88c68de489cbd91cedd8f842c516d3a5d8c84822e1182e15af3a6a1ca0e021b5401746926d2f3425c9781c0f4d3d25679a4ab663c93e6585930157bb895e29bd55f7b201fbd78d9561f68431f080b17b45f0f32c06f5d41f04f6323cd029f51394db5ae9f6ca328ef5b914c497d721766", 0x13e}, {&(0x7f0000001e00)="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", 0x1000}], 0x8) 10:02:48 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:02:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:02:49 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x10010, 0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="7c8efcc40aac5f77f972fe9297f08da87e77c6bfb6c99beeecaa40d34a5c74ba95018894426a20a8d3946f9d142f4b4f3d9475cec95c0bdec0f6d63e40cfd1b4e506172ee86bd7d6e049025c476a30bbd1716f1e8995ee7a6cebc67e5f7d23a68c6f8ee4904c3835cad303174971aaa72446f982ffba7d0163cfe7238e5ecfea05afca5f2b555e368eedf2492178a1921d0c1fc935dca7e1818977d191330aa4d689bf1dd7dca81fb740adfc997cfe086017f386ce7f7a40f3d3d242682e4b4ac6c36c7c9d736144318036d02c8f62b13a667c778940363ce43eaee0c24356133704984fcb4c216348978a69f67fcd8591c0aa", 0xf3, 0x8010, 0x1, {0x0, r1}}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r1}}, 0x3) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r2}}, 0x3) syz_io_uring_submit(r0, 0x0, &(0x7f0000001080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r2}}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r1}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 3045.750410] FAULT_INJECTION: forcing a failure. [ 3045.750410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3045.751649] CPU: 0 PID: 14883 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3045.752291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3045.753056] Call Trace: [ 3045.753311] dump_stack+0x107/0x167 [ 3045.753652] should_fail.cold+0x5/0xa [ 3045.754012] _copy_to_iter+0x264/0x12d0 [ 3045.754390] ? chacha_block_generic+0x13e/0x200 [ 3045.754824] ? chacha_permute+0x6f0/0x6f0 [ 3045.755210] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3045.755700] get_random_bytes_user+0x173/0x3b0 [ 3045.756127] ? get_random_u32+0x670/0x670 [ 3045.756519] ? wait_for_random_bytes+0x91/0xe0 [ 3045.756962] ? security_file_permission+0xb1/0xe0 [ 3045.757417] ? get_random_bytes_user+0x3b0/0x3b0 [ 3045.757860] random_read_iter+0x65/0x140 [ 3045.758242] io_read+0x2dc/0x11e0 [ 3045.758581] ? kiocb_done+0xc90/0xc90 [ 3045.758939] ? mark_lock+0xf5/0x2df0 [ 3045.759294] ? lock_chain_count+0x20/0x20 [ 3045.759717] ? stack_trace_consume_entry+0x160/0x160 [ 3045.760196] ? lock_acquire+0x197/0x470 [ 3045.760569] ? __lock_acquire+0xbb1/0x5b00 [ 3045.760963] io_issue_sqe+0x2e8a/0x77b0 [ 3045.761341] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3045.761826] ? SOFTIRQ_verbose+0x10/0x10 [ 3045.762200] ? lock_chain_count+0x20/0x20 [ 3045.762585] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3045.763067] ? io_connect+0x610/0x610 [ 3045.763423] ? lock_acquire+0x197/0x470 [ 3045.763807] ? find_held_lock+0x2c/0x110 [ 3045.764189] ? __fget_files+0x2cf/0x520 [ 3045.764557] ? lock_downgrade+0x6d0/0x6d0 [ 3045.764946] __io_queue_sqe+0x90/0x9d0 [ 3045.765312] ? io_issue_sqe+0x77b0/0x77b0 [ 3045.765693] ? __fget_files+0x2f8/0x520 [ 3045.766064] ? io_prep_rw+0x7f5/0x1050 [ 3045.766429] io_submit_sqes+0x44aa/0x8610 [ 3045.766834] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3045.767294] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3045.767760] ? lock_downgrade+0x6d0/0x6d0 [ 3045.768142] ? find_held_lock+0x2c/0x110 [ 3045.768524] ? io_submit_sqes+0x8610/0x8610 [ 3045.768931] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3045.769379] ? wait_for_completion_io+0x270/0x270 [ 3045.769826] ? rcu_read_lock_any_held+0x75/0xa0 [ 3045.770255] ? vfs_write+0x354/0xb10 [ 3045.770600] ? fput_many+0x2f/0x1a0 [ 3045.770939] ? ksys_write+0x1a9/0x260 [ 3045.771291] ? __ia32_sys_read+0xb0/0xb0 [ 3045.771690] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3045.772176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3045.772656] do_syscall_64+0x33/0x40 [ 3045.773002] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3045.773478] RIP: 0033:0x7fd311e28b19 [ 3045.773825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3045.775535] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3045.776240] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3045.776893] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3045.777545] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3045.778199] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3045.778853] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:03:05 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x1009, 0x0) 10:03:05 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x27201, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x3, 0xfff}, 0x200, 0x0, 0x80000000, 0x1, 0xc, 0x4, 0x8, 0x0, 0x7ff, 0x0, 0x80000001}, 0x0, 0x3, r1, 0x2) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:03:05 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="7c8efcc40aac5f77f972fe9297f08da87e77c6bfb6c99beeecaa40d34a5c74ba95018894426a20a8d3946f9d142f4b4f3d9475cec95c0bdec0f6d63e40cfd1b4e506172ee86bd7d6e049025c476a30bbd1716f1e8995ee7a6cebc67e5f7d23a68c6f8ee4904c3835cad303174971aaa72446f982ffba7d0163cfe7238e5ecfea05afca5f2b555e368eedf2492178a1921d0c1fc935dca7e1818977d191330aa4d689bf1dd7dca81fb740adfc997cfe086017f386ce7f7a40f3d3d242682e4b4ac6c36c7c9d736144318036d02c8f62b13a667c778940363ce43eaee0c24356133704984fcb4c216348978a69f67fcd8591c0aa", 0xf3, 0x8010, 0x1, {0x0, r3}}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r3}}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x2, 0x4000, @fd_index=0x5, 0x1bd2, &(0x7f0000000340)="8d72381b5f023f26f650d4a3c60d9e426a2689536ed25f07d8dd24a719809687ec710bf7ecc997b9ab6d1adbe53c4e696257524c4a9f3880ffba407b07d16be1568e79d24cde3151869eb5b2713d7dfd00e397fb5f0ec2e6b96c51d05940215a80ef3f9b95e405760bc6e29ac94a0ada360994862fe3c1019fae18a7bf6781a4109ec09f0a1d10a8a45aa1096d2a4c952e4125a6ddce02affa28bcd4c73d8dd0fd78f11d768a6884e84a873fe05e3848af0f745c757b7f8b", 0xb8, 0x11, 0x0, {0x0, r3}}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:03:05 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001500)) pread64(r0, &(0x7f0000001e00)=""/4126, 0x101e, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000001080)={0x1, 0x0, 0x17, 0x13, 0x31, &(0x7f0000001100)}) 10:03:05 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 10:03:05 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x18000000) 10:03:05 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 59) 10:03:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3062.561125] FAULT_INJECTION: forcing a failure. [ 3062.561125] name failslab, interval 1, probability 0, space 0, times 0 [ 3062.562206] CPU: 1 PID: 14917 Comm: syz-executor.6 Not tainted 5.10.223 #1 [ 3062.562798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3062.563519] Call Trace: [ 3062.563767] dump_stack+0x107/0x167 [ 3062.564084] should_fail.cold+0x5/0xa [ 3062.564417] ? io_wq_create+0xeb/0xc00 [ 3062.564749] should_failslab+0x5/0x20 [ 3062.565070] __kmalloc+0x72/0x390 [ 3062.565367] io_wq_create+0xeb/0xc00 [ 3062.565687] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3062.566113] ? io_import_iovec+0x1120/0x1120 [ 3062.566485] ? io_apoll_task_func+0x2d0/0x2d0 [ 3062.566861] ? __io_req_find_next+0x300/0x300 [ 3062.567242] ? percpu_ref_tryget_many+0x166/0x2d0 [ 3062.567662] __io_uring_add_tctx_node+0x2c6/0x520 [ 3062.568081] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3062.568537] __do_sys_io_uring_enter+0x1489/0x18c0 [ 3062.568954] ? lock_downgrade+0x6d0/0x6d0 [ 3062.569304] ? find_held_lock+0x2c/0x110 [ 3062.569651] ? io_submit_sqes+0x8610/0x8610 [ 3062.570022] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3062.570438] ? wait_for_completion_io+0x270/0x270 [ 3062.570849] ? rcu_read_lock_any_held+0x75/0xa0 [ 3062.571243] ? vfs_write+0x354/0xb10 10:03:06 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x1063, 0x0) 10:03:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3062.571558] ? fput_many+0x2f/0x1a0 [ 3062.587909] ? ksys_write+0x1a9/0x260 [ 3062.588236] ? __ia32_sys_read+0xb0/0xb0 [ 3062.588588] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3062.589037] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3062.589490] do_syscall_64+0x33/0x40 [ 3062.589804] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3062.590235] RIP: 0033:0x7f6f59063b19 [ 3062.590562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3062.592125] RSP: 002b:00007f6f565b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3062.592769] RAX: ffffffffffffffda RBX: 00007f6f59177020 RCX: 00007f6f59063b19 [ 3062.593369] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005 [ 3062.593967] RBP: 00007f6f565b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 3062.594565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3062.595166] R13: 00007ffccb8c7bff R14: 00007f6f565b8300 R15: 0000000000022000 10:03:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x1}, 0xc683, 0xd007, 0xfffffffe, 0x7, 0x0, 0x0, 0x2, 0x0, 0x400000, 0x0, 0xffffffffffffffff}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x320}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x1, 0x0, 0x1}, 0xa) syz_io_uring_submit(r1, 0x0, &(0x7f00000012c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000014c0)={&(0x7f0000001100)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000000)=""/41, 0x29}, {&(0x7f0000001180)=""/147, 0x93}, {&(0x7f0000001080)=""/21, 0x15}], 0x3, &(0x7f0000001280)=""/13, 0xd}, 0x0, 0x10102, 0x1, {0x3}}, 0x8) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001480)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001440)='./file0\x00', 0x400, 0x800, 0x0, {0x0, r4}}, 0x3f) [ 3062.623938] FAULT_INJECTION: forcing a failure. [ 3062.623938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3062.625127] CPU: 0 PID: 14918 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3062.625764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3062.626530] Call Trace: [ 3062.626784] dump_stack+0x107/0x167 [ 3062.627124] should_fail.cold+0x5/0xa [ 3062.632036] _copy_from_user+0x2e/0x1b0 [ 3062.632443] iovec_from_user+0x141/0x400 [ 3062.632869] __import_iovec+0x67/0x590 [ 3062.633280] io_import_iovec+0x581/0x1120 [ 3062.633709] ? io_complete_rw+0x230/0x230 [ 3062.634144] ? kiocb_done+0x16b/0xc90 [ 3062.634541] io_read+0xe14/0x11e0 [ 3062.634910] ? kiocb_done+0xc90/0xc90 [ 3062.635312] ? mark_lock+0xf5/0x2df0 [ 3062.639725] ? lock_chain_count+0x20/0x20 [ 3062.640157] ? stack_trace_consume_entry+0x160/0x160 [ 3062.640687] ? lock_acquire+0x197/0x470 [ 3062.641097] ? __lock_acquire+0xbb1/0x5b00 [ 3062.641521] io_issue_sqe+0x2e8a/0x77b0 [ 3062.641911] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3062.642450] ? SOFTIRQ_verbose+0x10/0x10 [ 3062.642859] ? lock_chain_count+0x20/0x20 [ 3062.643296] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3062.643839] ? io_connect+0x610/0x610 [ 3062.644228] ? lock_acquire+0x197/0x470 [ 3062.644640] ? find_held_lock+0x2c/0x110 [ 3062.645056] ? __fget_files+0x2cf/0x520 [ 3062.645475] ? lock_downgrade+0x6d0/0x6d0 [ 3062.645897] __io_queue_sqe+0x90/0x9d0 [ 3062.646298] ? io_issue_sqe+0x77b0/0x77b0 [ 3062.646732] ? __fget_files+0x2f8/0x520 [ 3062.647139] ? io_prep_rw+0x7f5/0x1050 [ 3062.647557] io_submit_sqes+0x44aa/0x8610 [ 3062.648023] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3062.648531] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3062.649054] ? lock_downgrade+0x6d0/0x6d0 [ 3062.649486] ? find_held_lock+0x2c/0x110 [ 3062.649915] ? io_submit_sqes+0x8610/0x8610 [ 3062.650362] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3062.650862] ? wait_for_completion_io+0x270/0x270 [ 3062.651350] ? rcu_read_lock_any_held+0x75/0xa0 [ 3062.651836] ? vfs_write+0x354/0xb10 [ 3062.652229] ? fput_many+0x2f/0x1a0 [ 3062.652607] ? ksys_write+0x1a9/0x260 [ 3062.653005] ? __ia32_sys_read+0xb0/0xb0 [ 3062.653418] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3062.653936] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3062.654469] do_syscall_64+0x33/0x40 [ 3062.654847] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3062.655370] RIP: 0033:0x7fd311e28b19 [ 3062.655772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3062.657557] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3062.658291] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3062.658946] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3062.659637] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3062.660350] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3062.661049] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:03:06 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1e000000) 10:03:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001080)='ns/time\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) pread64(r0, &(0x7f0000001e00)=""/4126, 0x7e7, 0x7) 10:03:06 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendto$unix(r3, &(0x7f00000007c0)="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", 0x1000, 0x50840, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:03:06 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 60) [ 3063.267472] FAULT_INJECTION: forcing a failure. [ 3063.267472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3063.268954] CPU: 1 PID: 14938 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3063.269600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3063.270321] Call Trace: [ 3063.270570] dump_stack+0x107/0x167 [ 3063.270914] should_fail.cold+0x5/0xa [ 3063.271257] _copy_to_iter+0x264/0x12d0 [ 3063.271623] ? chacha_block_generic+0x13e/0x200 [ 3063.272072] ? chacha_permute+0x6f0/0x6f0 [ 3063.272440] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3063.272887] get_random_bytes_user+0x173/0x3b0 [ 3063.273298] ? get_random_u32+0x670/0x670 [ 3063.273693] ? wait_for_random_bytes+0x91/0xe0 [ 3063.274133] ? security_file_permission+0xb1/0xe0 [ 3063.274602] ? get_random_bytes_user+0x3b0/0x3b0 [ 3063.275030] random_read_iter+0x65/0x140 [ 3063.275425] io_read+0x2dc/0x11e0 [ 3063.275774] ? kiocb_done+0xc90/0xc90 [ 3063.276142] ? mark_lock+0xf5/0x2df0 [ 3063.276516] ? lock_chain_count+0x20/0x20 [ 3063.276908] ? stack_trace_consume_entry+0x160/0x160 [ 3063.277405] ? lock_acquire+0x197/0x470 [ 3063.277778] ? __lock_acquire+0xbb1/0x5b00 [ 3063.278186] io_issue_sqe+0x2e8a/0x77b0 [ 3063.278571] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3063.279050] ? SOFTIRQ_verbose+0x10/0x10 [ 3063.279456] ? lock_chain_count+0x20/0x20 [ 3063.279850] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3063.280344] ? io_connect+0x610/0x610 [ 3063.280711] ? lock_acquire+0x197/0x470 [ 3063.281071] ? find_held_lock+0x2c/0x110 [ 3063.281485] ? __fget_files+0x2cf/0x520 [ 3063.281842] ? lock_downgrade+0x6d0/0x6d0 [ 3063.282239] __io_queue_sqe+0x90/0x9d0 [ 3063.282624] ? io_issue_sqe+0x77b0/0x77b0 [ 3063.282994] ? __fget_files+0x2f8/0x520 [ 3063.283387] ? io_prep_rw+0x7f5/0x1050 [ 3063.283795] io_submit_sqes+0x44aa/0x8610 [ 3063.284209] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3063.284690] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3063.285147] ? lock_downgrade+0x6d0/0x6d0 [ 3063.285551] ? find_held_lock+0x2c/0x110 [ 3063.285921] ? io_submit_sqes+0x8610/0x8610 [ 3063.286334] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3063.286790] ? wait_for_completion_io+0x270/0x270 [ 3063.287254] ? rcu_read_lock_any_held+0x75/0xa0 [ 3063.287706] ? vfs_write+0x354/0xb10 [ 3063.288057] ? fput_many+0x2f/0x1a0 [ 3063.288423] ? ksys_write+0x1a9/0x260 [ 3063.288775] ? __ia32_sys_read+0xb0/0xb0 [ 3063.289164] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3063.289650] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3063.290105] do_syscall_64+0x33/0x40 [ 3063.290499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3063.290963] RIP: 0033:0x7fd311e28b19 [ 3063.291318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3063.292999] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3063.293715] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3063.294379] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3063.295029] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3063.295713] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3063.296376] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:03:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:03:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x77d, 0xfffffffb}, 0x0, 0x2000000000000, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r1 = inotify_init() read(r1, &(0x7f0000001100)=""/143, 0x8f) 10:03:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000040)={0x1, r4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, r3, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r8 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f00000001c0)=[{r5}, {0xffffffffffffffff, 0x210}, {0xffffffffffffffff, 0x2101}, {r8, 0x1602}], 0x4, &(0x7f0000000280)={r9, r10+10000000}, &(0x7f0000000340)={[0x5]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:03:22 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 61) 10:03:22 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8811, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x0, 0x0, 0x3, 0x60}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001100)='()&\x93:-\\-#!-{\x00', 0x0, r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x1, r5}) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r3, &(0x7f0000001080)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x7ff) 10:03:22 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 10:03:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x20000000) 10:03:22 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x2000105e, 0x0) 10:03:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3078.955241] FAULT_INJECTION: forcing a failure. [ 3078.955241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3078.956798] CPU: 0 PID: 14965 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3078.957585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3078.958334] Call Trace: [ 3078.958632] dump_stack+0x107/0x167 [ 3078.958969] should_fail.cold+0x5/0xa [ 3078.959326] _copy_to_iter+0x264/0x12d0 [ 3078.959745] ? chacha_block_generic+0x13e/0x200 [ 3078.960187] ? chacha_permute+0x6f0/0x6f0 [ 3078.960616] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3078.961078] get_random_bytes_user+0x173/0x3b0 [ 3078.961551] ? get_random_u32+0x670/0x670 [ 3078.961939] ? wait_for_random_bytes+0x91/0xe0 [ 3078.962443] ? security_file_permission+0xb1/0xe0 [ 3078.962900] ? get_random_bytes_user+0x3b0/0x3b0 [ 3078.963335] random_read_iter+0x65/0x140 [ 3078.963761] io_read+0x2dc/0x11e0 [ 3078.964112] ? kiocb_done+0xc90/0xc90 [ 3078.964518] ? mark_lock+0xf5/0x2df0 [ 3078.964870] ? lock_chain_count+0x20/0x20 [ 3078.965275] ? stack_trace_consume_entry+0x160/0x160 [ 3078.965799] ? lock_acquire+0x197/0x470 [ 3078.966186] ? __lock_acquire+0xbb1/0x5b00 [ 3078.966638] io_issue_sqe+0x2e8a/0x77b0 [ 3078.967014] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3078.967569] ? SOFTIRQ_verbose+0x10/0x10 [ 3078.967966] ? lock_chain_count+0x20/0x20 [ 3078.968356] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3078.968885] ? io_connect+0x610/0x610 [ 3078.969241] ? lock_acquire+0x197/0x470 [ 3078.969655] ? find_held_lock+0x2c/0x110 [ 3078.970035] ? __fget_files+0x2cf/0x520 [ 3078.980182] ? lock_downgrade+0x6d0/0x6d0 [ 3078.980574] __io_queue_sqe+0x90/0x9d0 [ 3078.980940] ? io_issue_sqe+0x77b0/0x77b0 [ 3078.981433] ? __fget_files+0x2f8/0x520 [ 3078.981805] ? io_prep_rw+0x7f5/0x1050 [ 3078.982441] io_submit_sqes+0x44aa/0x8610 [ 3078.982846] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3078.983358] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3078.983817] ? lock_downgrade+0x6d0/0x6d0 [ 3078.984250] ? find_held_lock+0x2c/0x110 [ 3078.984629] ? io_submit_sqes+0x8610/0x8610 [ 3078.985034] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3078.985552] ? wait_for_completion_io+0x270/0x270 [ 3078.985998] ? rcu_read_lock_any_held+0x75/0xa0 [ 3078.986553] ? vfs_write+0x354/0xb10 [ 3078.986898] ? fput_many+0x2f/0x1a0 [ 3078.987237] ? ksys_write+0x1a9/0x260 [ 3078.987600] ? __ia32_sys_read+0xb0/0xb0 [ 3078.988003] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3078.988485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3078.988960] do_syscall_64+0x33/0x40 [ 3078.989303] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3078.989773] RIP: 0033:0x7fd311e28b19 [ 3078.990121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3078.991811] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3078.992523] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3078.993314] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3078.994103] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.994888] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3078.995678] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 [ 3079.011924] FAULT_INJECTION: forcing a failure. [ 3079.011924] name failslab, interval 1, probability 0, space 0, times 0 [ 3079.013330] CPU: 0 PID: 14968 Comm: syz-executor.6 Not tainted 5.10.223 #1 [ 3079.014029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3079.014803] Call Trace: [ 3079.015071] dump_stack+0x107/0x167 [ 3079.015414] should_fail.cold+0x5/0xa [ 3079.015793] ? create_object.isra.0+0x3a/0xa20 [ 3079.016234] should_failslab+0x5/0x20 [ 3079.016589] kmem_cache_alloc+0x5b/0x310 [ 3079.016968] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 3079.017452] create_object.isra.0+0x3a/0xa20 [ 3079.017861] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3079.018339] __kmalloc+0x16e/0x390 [ 3079.018676] io_wq_create+0xeb/0xc00 [ 3079.019028] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3079.019506] ? io_import_iovec+0x1120/0x1120 [ 3079.019937] ? io_apoll_task_func+0x2d0/0x2d0 [ 3079.020356] ? __io_req_find_next+0x300/0x300 [ 3079.020775] ? percpu_ref_tryget_many+0x166/0x2d0 [ 3079.021228] __io_uring_add_tctx_node+0x2c6/0x520 [ 3079.021679] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3079.022176] __do_sys_io_uring_enter+0x1489/0x18c0 [ 3079.022642] ? lock_downgrade+0x6d0/0x6d0 [ 3079.023025] ? find_held_lock+0x2c/0x110 [ 3079.023409] ? io_submit_sqes+0x8610/0x8610 [ 3079.023829] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3079.024286] ? wait_for_completion_io+0x270/0x270 [ 3079.024738] ? rcu_read_lock_any_held+0x75/0xa0 [ 3079.025173] ? vfs_write+0x354/0xb10 [ 3079.025520] ? fput_many+0x2f/0x1a0 [ 3079.025858] ? ksys_write+0x1a9/0x260 [ 3079.026213] ? __ia32_sys_read+0xb0/0xb0 [ 3079.026593] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3079.027078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3079.027557] do_syscall_64+0x33/0x40 [ 3079.027921] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3079.028407] RIP: 0033:0x7f6f59063b19 [ 3079.028756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3079.030449] RSP: 002b:00007f6f565b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3079.031153] RAX: ffffffffffffffda RBX: 00007f6f59177020 RCX: 00007f6f59063b19 [ 3079.031822] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005 [ 3079.032524] RBP: 00007f6f565b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 3079.033184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3079.033847] R13: 00007ffccb8c7bff R14: 00007f6f565b8300 R15: 0000000000022000 10:03:22 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x2) 10:03:22 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 62) 10:03:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x24000000) 10:03:22 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001140)={r0, 0x8001, 0x400, 0x401}) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000001080)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) 10:03:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:03:22 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x3) [ 3079.292706] FAULT_INJECTION: forcing a failure. [ 3079.292706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3079.294206] CPU: 1 PID: 14979 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3079.294934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3079.295899] Call Trace: [ 3079.296199] dump_stack+0x107/0x167 [ 3079.296596] should_fail.cold+0x5/0xa [ 3079.297013] _copy_to_iter+0x264/0x12d0 [ 3079.297455] ? chacha_block_generic+0x13e/0x200 [ 3079.297955] ? chacha_permute+0x6f0/0x6f0 [ 3079.298396] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3079.298940] get_random_bytes_user+0x173/0x3b0 [ 3079.299430] ? get_random_u32+0x670/0x670 [ 3079.299946] ? wait_for_random_bytes+0x91/0xe0 [ 3079.300427] ? security_file_permission+0xb1/0xe0 [ 3079.300915] ? get_random_bytes_user+0x3b0/0x3b0 [ 3079.301394] random_read_iter+0x65/0x140 [ 3079.301811] io_read+0x2dc/0x11e0 [ 3079.302154] ? kiocb_done+0xc90/0xc90 [ 3079.302533] ? mark_lock+0xf5/0x2df0 [ 3079.302909] ? lock_chain_count+0x20/0x20 [ 3079.303319] ? stack_trace_consume_entry+0x160/0x160 [ 3079.303944] ? lock_acquire+0x197/0x470 [ 3079.304333] ? __lock_acquire+0xbb1/0x5b00 [ 3079.304764] io_issue_sqe+0x2e8a/0x77b0 [ 3079.305168] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3079.305685] ? SOFTIRQ_verbose+0x10/0x10 [ 3079.306089] ? lock_chain_count+0x20/0x20 [ 3079.306476] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3079.307004] ? io_connect+0x610/0x610 [ 3079.307368] ? lock_acquire+0x197/0x470 [ 3079.307765] ? find_held_lock+0x2c/0x110 [ 3079.308254] ? __fget_files+0x2cf/0x520 [ 3079.308656] ? lock_downgrade+0x6d0/0x6d0 [ 3079.309073] __io_queue_sqe+0x90/0x9d0 [ 3079.309449] ? io_issue_sqe+0x77b0/0x77b0 [ 3079.309866] ? __fget_files+0x2f8/0x520 [ 3079.310247] ? io_prep_rw+0x7f5/0x1050 [ 3079.310643] io_submit_sqes+0x44aa/0x8610 [ 3079.311080] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3079.311559] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3079.312139] ? lock_downgrade+0x6d0/0x6d0 [ 3079.312554] ? find_held_lock+0x2c/0x110 [ 3079.312970] ? io_submit_sqes+0x8610/0x8610 [ 3079.313416] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3079.313903] ? wait_for_completion_io+0x270/0x270 [ 3079.314388] ? rcu_read_lock_any_held+0x75/0xa0 [ 3079.314855] ? vfs_write+0x354/0xb10 [ 3079.315223] ? fput_many+0x2f/0x1a0 [ 3079.315589] ? ksys_write+0x1a9/0x260 [ 3079.316068] ? __ia32_sys_read+0xb0/0xb0 [ 3079.316488] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3079.317016] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3079.317529] do_syscall_64+0x33/0x40 [ 3079.317903] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3079.318413] RIP: 0033:0x7fd311e28b19 [ 3079.318790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3079.320651] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3079.321425] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3079.322145] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3079.322864] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3079.323574] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3079.324327] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:03:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:03:22 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000006ebd648b2a394f2381003402fdfda1aceb18d9c10a2ed65dab18051b5f345777706511ce221d3b2d9958641638f1ceed8d", @ANYRES16=r1, @ANYBLOB="11d46a14742b361945fbffff7f00000000ec00040010"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001340), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=ANY=[@ANYBLOB="de3d3e4060fc0800000058c390c8e186f14315fbd83954800a6039e748fbb51177d73e7b8d899fe6a7dc7311a7333375003ee3e86c02b8920dd1926dc304730bc0ac86fb22894f50a05242536d6388b3f2adf8c44575e304e726091303d03783571cee91c3a0d991db0a932376b59d25d69996087853ebbb073168196265f2e8298de6bd87d963e71636d9550c3784e4f9d895c1649491ff654d0f4cda011fb1634d91216e49d51031bf105624e4ffc8fa3722835f75d30dbfcf70dfa4f151beeaee026fbdb6dba51a31877e11f580eeb5ee2182e8b6c368e291e565697937e4", @ANYRES16=r5, @ANYBLOB="01010000000000006fad4cff3100"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001480), r4) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000001440)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x14, r3, 0x400, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000810) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8694, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = eventfd(0x80000000) pwritev2(r6, &(0x7f00000012c0)=[{&(0x7f0000001100)="61b4d00a4b472de51de86ccb22320fa4a7519811a6d5973f43669444951617c7d54d0f885a1d08787a251c3742bd4e99b0a1370efe73175cf539842374e5ae53ea22e366bab1cc31cc99493e71321716c6e28f68880a0c7d18db802b481a15b99d9f3078fa3fc4b72411dbf4", 0x6c}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000000000)="db5559ce1156493d13b4ba17", 0xc}, {&(0x7f0000001180)="1d08e7010d3e20a813471a6576affd7fc1cfd8671d898abf0bc9132dc72171a2bb9b73a44be1d68f3949f9d5dfb304999ab2d63ef83a965d349f323e012dc63be22b62b3de7b0d3937f9094866449439a1f4347320089e796a35db95b241073f54c875", 0x63}, {&(0x7f0000001200)="3208a4eb12b74d284ff7d34235a358e1ccbf2ffee5c45e1fe6a7ef177bf3c480492f57e3e14f0eef2321af2237bcb4ebaab91d5a6085ca214b6a5b593cfdaf558912692b40de7e7c4427ae4194147559470432eda958b05eadc3419303dcd0a5e7487a38f7b79954e2dd8c093a86f16b2676bf0ce7e6336749a1f6ad2d152e545a06f9fd30d2325e0915f8abc06b0e29e6bfdba1", 0x94}], 0x5, 0x5, 0x8, 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001500), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000017c0)={&(0x7f00000016c0)={0xc4, r7, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auth_cache_t:s0\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x6008040}, 0x26040881) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:03:38 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 63) 10:03:38 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2a000000) 10:03:38 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x4) 10:03:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:03:38 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e26696c653000046dd8fbc7ded079d7c0c6abb28146bc0acc9b402c38254953ba2f8e2381b90d476f83694a20"]) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000001500)) ioctl$TCXONC(r2, 0x540a, 0x3) readv(r2, &(0x7f0000001400)=[{&(0x7f0000001080)=""/44, 0x2c}, {&(0x7f0000001100)=""/133, 0x85}, {&(0x7f00000011c0)=""/149, 0x95}, {&(0x7f0000001280)=""/116, 0x74}, {&(0x7f0000001300)=""/255, 0xff}], 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r1) syz_open_dev$vcsa(&(0x7f0000000000), 0x7f, 0x80441) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000001540)={0x0, 0xb6}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000014c0)=0x2) 10:03:38 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 10:03:38 executing program 4: perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0x74, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c22}, 0x0, 0x0, 0xffffffffffffffff, 0x1) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:03:38 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x1000187, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000480)={0x0, 0x3400, 0x2, 0x3, 0x263, 0x0, r4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000500)) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000) pwritev(r5, &(0x7f00000001c0)=[{&(0x7f0000000240)="a83629b840cb2b06c138627a963eaa8d19d017f276777160805b8319cc53db78842671f0800b978559fbf60f1cde8db9f825cc64c7caf1ddf22bb6d8914c8b781af20f68a71eb05a6cd28dd25689f6c1c1d072802381486da469", 0x5a}, {&(0x7f0000000080)="40132eca6a4a3f0cda83502d9467bd2ca9c6", 0x12}], 0x2, 0xffffffff, 0x3) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = mq_open(&(0x7f0000000340)='\x00', 0x40, 0x41, &(0x7f0000000380)={0x1ff, 0x3ff, 0x3f, 0x6}) r8 = syz_open_dev$mouse(&(0x7f00000005c0), 0x1, 0x200) syz_io_uring_setup(0x1f89, &(0x7f0000000600)={0x0, 0xcb7f, 0x0, 0x1, 0x282, 0x0, r8}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) sendfile(r7, r3, &(0x7f00000003c0)=0x3ff, 0x9) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:03:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x800, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) write$binfmt_elf64(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x540a, 0x3) sendfile(r4, r5, &(0x7f0000000140)=0x8, 0x7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) [ 3095.185332] FAULT_INJECTION: forcing a failure. [ 3095.185332] name failslab, interval 1, probability 0, space 0, times 0 [ 3095.186371] CPU: 1 PID: 15018 Comm: syz-executor.6 Not tainted 5.10.223 #1 [ 3095.186983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3095.187720] Call Trace: [ 3095.187985] dump_stack+0x107/0x167 [ 3095.188337] should_fail.cold+0x5/0xa [ 3095.188702] ? io_wq_create+0x6ef/0xc00 [ 3095.189066] should_failslab+0x5/0x20 [ 3095.189428] kmem_cache_alloc_node_trace+0x59/0x340 [ 3095.189908] io_wq_create+0x6ef/0xc00 [ 3095.190268] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3095.190731] ? io_import_iovec+0x1120/0x1120 [ 3095.191152] ? io_apoll_task_func+0x2d0/0x2d0 [ 3095.191567] ? __io_req_find_next+0x300/0x300 [ 3095.196001] ? percpu_ref_tryget_many+0x166/0x2d0 [ 3095.196464] __io_uring_add_tctx_node+0x2c6/0x520 [ 3095.196909] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3095.197393] __do_sys_io_uring_enter+0x1489/0x18c0 [ 3095.197859] ? lock_downgrade+0x6d0/0x6d0 [ 3095.198242] ? find_held_lock+0x2c/0x110 [ 3095.198637] ? io_submit_sqes+0x8610/0x8610 [ 3095.199042] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3095.199497] ? wait_for_completion_io+0x270/0x270 [ 3095.199946] ? rcu_read_lock_any_held+0x75/0xa0 [ 3095.200381] ? vfs_write+0x354/0xb10 [ 3095.200741] ? fput_many+0x2f/0x1a0 [ 3095.201070] ? ksys_write+0x1a9/0x260 [ 3095.201439] ? __ia32_sys_read+0xb0/0xb0 [ 3095.201818] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3095.202298] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3095.202776] do_syscall_64+0x33/0x40 [ 3095.203130] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3095.203620] RIP: 0033:0x7f6f59063b19 [ 3095.203958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3095.205630] RSP: 002b:00007f6f565b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3095.206323] RAX: ffffffffffffffda RBX: 00007f6f59177020 RCX: 00007f6f59063b19 [ 3095.206972] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005 [ 3095.207650] RBP: 00007f6f565b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 3095.208309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3095.208981] R13: 00007ffccb8c7bff R14: 00007f6f565b8300 R15: 0000000000022000 10:03:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3095.263468] FAULT_INJECTION: forcing a failure. [ 3095.263468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3095.264718] CPU: 1 PID: 15011 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3095.265347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3095.266138] Call Trace: [ 3095.266487] dump_stack+0x107/0x167 [ 3095.266825] should_fail.cold+0x5/0xa [ 3095.267183] _copy_to_iter+0x264/0x12d0 [ 3095.267630] ? chacha_block_generic+0x13e/0x200 [ 3095.268102] ? chacha_permute+0x6f0/0x6f0 [ 3095.268543] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3095.269004] get_random_bytes_user+0x173/0x3b0 [ 3095.269489] ? get_random_u32+0x670/0x670 [ 3095.269883] ? wait_for_random_bytes+0x91/0xe0 [ 3095.270322] ? security_file_permission+0xb1/0xe0 [ 3095.270852] ? get_random_bytes_user+0x3b0/0x3b0 [ 3095.271312] random_read_iter+0x65/0x140 [ 3095.271747] io_read+0x2dc/0x11e0 [ 3095.272101] ? kiocb_done+0xc90/0xc90 [ 3095.272514] ? mark_lock+0xf5/0x2df0 [ 3095.272870] ? lock_chain_count+0x20/0x20 [ 3095.273279] ? stack_trace_consume_entry+0x160/0x160 [ 3095.273816] ? lock_acquire+0x197/0x470 [ 3095.274189] ? __lock_acquire+0xbb1/0x5b00 [ 3095.274660] io_issue_sqe+0x2e8a/0x77b0 [ 3095.275043] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3095.275629] ? SOFTIRQ_verbose+0x10/0x10 [ 3095.276030] ? lock_chain_count+0x20/0x20 [ 3095.276490] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3095.276970] ? io_connect+0x610/0x610 [ 3095.277339] ? lock_acquire+0x197/0x470 [ 3095.277760] ? find_held_lock+0x2c/0x110 [ 3095.278155] ? __fget_files+0x2cf/0x520 [ 3095.278609] ? lock_downgrade+0x6d0/0x6d0 [ 3095.278997] __io_queue_sqe+0x90/0x9d0 [ 3095.279426] ? io_issue_sqe+0x77b0/0x77b0 [ 3095.279817] ? __fget_files+0x2f8/0x520 [ 3095.280211] ? io_prep_rw+0x7f5/0x1050 [ 3095.280640] io_submit_sqes+0x44aa/0x8610 [ 3095.281053] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3095.281578] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3095.282031] ? lock_downgrade+0x6d0/0x6d0 [ 3095.282508] ? find_held_lock+0x2c/0x110 [ 3095.282895] ? io_submit_sqes+0x8610/0x8610 [ 3095.283306] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3095.283825] ? wait_for_completion_io+0x270/0x270 [ 3095.284288] ? rcu_read_lock_any_held+0x75/0xa0 [ 3095.284782] ? vfs_write+0x354/0xb10 [ 3095.285129] ? fput_many+0x2f/0x1a0 [ 3095.285525] ? ksys_write+0x1a9/0x260 [ 3095.285893] ? __ia32_sys_read+0xb0/0xb0 [ 3095.286248] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3095.286788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3095.287275] do_syscall_64+0x33/0x40 [ 3095.287684] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3095.288186] RIP: 0033:0x7fd311e28b19 [ 3095.288585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3095.290323] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3095.291095] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3095.291819] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3095.292555] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3095.293199] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3095.293925] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:03:38 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x30000000) 10:03:38 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x180000) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:03:38 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 64) 10:03:38 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x5) 10:03:39 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) [ 3096.065538] FAULT_INJECTION: forcing a failure. [ 3096.065538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3096.066917] CPU: 0 PID: 15035 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3096.067648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3096.068525] Call Trace: [ 3096.068816] dump_stack+0x107/0x167 [ 3096.069262] should_fail.cold+0x5/0xa [ 3096.069658] _copy_to_iter+0x264/0x12d0 [ 3096.070075] ? chacha_block_generic+0x13e/0x200 [ 3096.070641] ? chacha_permute+0x6f0/0x6f0 [ 3096.071063] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3096.071697] get_random_bytes_user+0x173/0x3b0 [ 3096.072284] ? get_random_u32+0x670/0x670 [ 3096.072764] ? wait_for_random_bytes+0x91/0xe0 [ 3096.073321] ? security_file_permission+0xb1/0xe0 [ 3096.075729] ? get_random_bytes_user+0x3b0/0x3b0 [ 3096.076370] random_read_iter+0x65/0x140 [ 3096.076861] io_read+0x2dc/0x11e0 [ 3096.077322] ? __is_insn_slot_addr+0x14c/0x290 [ 3096.077917] ? kiocb_done+0xc90/0xc90 [ 3096.078369] ? mark_lock+0xf5/0x2df0 [ 3096.078818] ? register_lock_class+0xbb/0x17b0 [ 3096.079384] ? arch_stack_walk+0x99/0xf0 [ 3096.079864] ? lock_chain_count+0x20/0x20 [ 3096.080387] ? is_dynamic_key+0x1e0/0x1e0 [ 3096.080891] ? __lock_acquire+0x1657/0x5b00 [ 3096.081443] ? __lock_acquire+0xbb1/0x5b00 [ 3096.081934] io_issue_sqe+0x2e8a/0x77b0 [ 3096.082446] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3096.083031] ? SOFTIRQ_verbose+0x10/0x10 [ 3096.083543] ? lock_chain_count+0x20/0x20 [ 3096.084026] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3096.084626] ? io_connect+0x610/0x610 [ 3096.085076] ? lock_acquire+0x197/0x470 [ 3096.085578] ? find_held_lock+0x2c/0x110 [ 3096.086027] ? __fget_files+0x2cf/0x520 [ 3096.086516] ? lock_downgrade+0x6d0/0x6d0 [ 3096.086960] __io_queue_sqe+0x90/0x9d0 [ 3096.087483] ? io_issue_sqe+0x77b0/0x77b0 [ 3096.087947] ? __fget_files+0x2f8/0x520 [ 3096.088464] ? io_prep_rw+0x7f5/0x1050 [ 3096.088910] io_submit_sqes+0x44aa/0x8610 [ 3096.089454] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3096.089985] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3096.090585] ? lock_downgrade+0x6d0/0x6d0 [ 3096.091056] ? find_held_lock+0x2c/0x110 [ 3096.091571] ? io_submit_sqes+0x8610/0x8610 [ 3096.092072] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3096.092666] ? wait_for_completion_io+0x270/0x270 [ 3096.093254] ? rcu_read_lock_any_held+0x75/0xa0 [ 3096.093775] ? vfs_write+0x354/0xb10 [ 3096.094239] ? fput_many+0x2f/0x1a0 [ 3096.094660] ? ksys_write+0x1a9/0x260 [ 3096.095158] ? __ia32_sys_read+0xb0/0xb0 [ 3096.095606] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3096.096290] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3096.096859] do_syscall_64+0x33/0x40 [ 3096.097409] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3096.097981] RIP: 0033:0x7fd311e28b19 [ 3096.098463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3096.100554] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3096.101455] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3096.102346] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3096.103162] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3096.103913] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3096.104759] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 [ 3096.301122] FAULT_INJECTION: forcing a failure. [ 3096.301122] name failslab, interval 1, probability 0, space 0, times 0 [ 3096.303804] CPU: 1 PID: 15046 Comm: syz-executor.6 Not tainted 5.10.223 #1 [ 3096.305747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3096.307823] Call Trace: [ 3096.308513] dump_stack+0x107/0x167 [ 3096.309416] should_fail.cold+0x5/0xa [ 3096.310403] ? create_object.isra.0+0x3a/0xa20 [ 3096.311549] should_failslab+0x5/0x20 [ 3096.312545] kmem_cache_alloc+0x5b/0x310 [ 3096.313610] ? io_wq_create+0x114/0xc00 [ 3096.314608] create_object.isra.0+0x3a/0xa20 [ 3096.315697] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3096.316967] kmem_cache_alloc_node_trace+0x16d/0x340 [ 3096.318262] io_wq_create+0x6ef/0xc00 [ 3096.319218] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3096.320525] ? io_import_iovec+0x1120/0x1120 [ 3096.321647] ? io_apoll_task_func+0x2d0/0x2d0 [ 3096.322754] ? __io_req_find_next+0x300/0x300 [ 3096.323887] ? percpu_ref_tryget_many+0x166/0x2d0 [ 3096.325100] __io_uring_add_tctx_node+0x2c6/0x520 [ 3096.325741] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3096.326400] __do_sys_io_uring_enter+0x1489/0x18c0 [ 3096.327553] ? lock_downgrade+0x6d0/0x6d0 [ 3096.328081] ? find_held_lock+0x2c/0x110 [ 3096.329035] ? io_submit_sqes+0x8610/0x8610 [ 3096.330090] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3096.331236] ? wait_for_completion_io+0x270/0x270 [ 3096.332439] ? rcu_read_lock_any_held+0x75/0xa0 [ 3096.333528] ? vfs_write+0x354/0xb10 [ 3096.334420] ? fput_many+0x2f/0x1a0 [ 3096.335248] ? ksys_write+0x1a9/0x260 [ 3096.336166] ? __ia32_sys_read+0xb0/0xb0 [ 3096.337146] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3096.338442] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3096.339651] do_syscall_64+0x33/0x40 [ 3096.340545] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3096.341748] RIP: 0033:0x7f6f59063b19 [ 3096.342664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3096.349713] RSP: 002b:00007f6f565b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3096.351571] RAX: ffffffffffffffda RBX: 00007f6f59177020 RCX: 00007f6f59063b19 [ 3096.353244] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005 [ 3096.354949] RBP: 00007f6f565b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 3096.356706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3096.358397] R13: 00007ffccb8c7bff R14: 00007f6f565b8300 R15: 0000000000022000 10:03:55 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 10:03:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:03:55 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 65) 10:03:55 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x6) 10:03:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x1, 0x0, 0x1}, 0x7) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r8}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000040)={0x1, r9}) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) pipe2(&(0x7f0000001400), 0x1000) syz_io_uring_submit(r10, r7, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x8001) syz_io_uring_submit(r2, r7, &(0x7f00000013c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001080)={&(0x7f0000001180)=@nfc_llcp, 0x80, &(0x7f0000000000)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001200)=""/221, 0xdd}, {&(0x7f0000001300)=""/168, 0xa8}], 0x3}, 0x0, 0xc0, 0x1, {0x1}}, 0x10001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x1, r11}) perf_event_open(&(0x7f0000001100)={0x0, 0x80, 0x3f, 0x0, 0xff, 0xf5, 0x0, 0xc30a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x80, 0x1}, 0x10004, 0x39, 0x5, 0x8, 0xfffffffffffffd52, 0x0, 0x6, 0x0, 0x2, 0x0, 0x5}, r11, 0x7, 0xffffffffffffffff, 0x8) 10:03:55 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001c40)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendto$packet(r3, &(0x7f0000000040)="b3850c6ee6b887726c2f0af6d97e311c2dba5f298c", 0x15, 0x80, &(0x7f0000000080)={0x11, 0xd, 0x0, 0x1, 0x39, 0x6, @random="0733c0978e44"}, 0x14) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:03:55 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x36000000) 10:03:55 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x408043, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x30, 0xffffffffffffffff, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x44459cda, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0xfffffffffffeffff, 0x1a, 0xf34}) perf_event_open(&(0x7f0000000000)={0x6, 0x80, 0x7, 0x9, 0x81, 0x81, 0x0, 0x201, 0x10, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000, 0x5dc}, 0x200, 0xfff, 0x6, 0x1, 0x1, 0xffffffff, 0xfffc, 0x0, 0xb6b, 0x0, 0x800080000001}, 0x0, 0xc, r1, 0xa) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000200)={{}, "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"}) r4 = openat(0xffffffffffffffff, &(0x7f0000001200)='./file0\x00', 0xf3293ec22ad20707, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r5) perf_event_open(0x0, 0x0, 0x0, r4, 0x8) r6 = mq_open(&(0x7f0000000140)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x40, 0x0, 0x0) mq_timedreceive(r6, 0x0, 0x2000, 0x0, 0x0) r7 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) [ 3111.978896] FAULT_INJECTION: forcing a failure. [ 3111.978896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3111.980221] CPU: 0 PID: 15059 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3111.980884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3111.981669] Call Trace: [ 3111.981934] dump_stack+0x107/0x167 [ 3111.982285] should_fail.cold+0x5/0xa [ 3111.982656] _copy_to_iter+0x264/0x12d0 [ 3111.983047] ? chacha_block_generic+0x13e/0x200 [ 3111.983497] ? chacha_permute+0x6f0/0x6f0 [ 3111.983896] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3111.984407] get_random_bytes_user+0x173/0x3b0 [ 3111.984845] ? get_random_u32+0x670/0x670 [ 3111.985255] ? wait_for_random_bytes+0x91/0xe0 [ 3111.985709] ? security_file_permission+0xb1/0xe0 [ 3111.986165] ? get_random_bytes_user+0x3b0/0x3b0 [ 3111.986626] random_read_iter+0x65/0x140 [ 3111.987061] io_read+0x2dc/0x11e0 [ 3111.987466] ? kiocb_done+0xc90/0xc90 [ 3111.987900] ? mark_lock+0xf5/0x2df0 [ 3111.988304] ? lock_chain_count+0x20/0x20 [ 3111.988706] ? stack_trace_consume_entry+0x160/0x160 [ 3111.989188] ? lock_acquire+0x197/0x470 [ 3111.989565] ? __lock_acquire+0xbb1/0x5b00 [ 3111.989968] io_issue_sqe+0x2e8a/0x77b0 [ 3111.990416] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3111.991009] ? SOFTIRQ_verbose+0x10/0x10 [ 3111.991789] ? lock_chain_count+0x20/0x20 [ 3111.992572] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3111.993553] ? io_connect+0x610/0x610 [ 3111.994260] ? lock_acquire+0x197/0x470 [ 3111.994988] ? find_held_lock+0x2c/0x110 [ 3111.995737] ? __fget_files+0x2cf/0x520 [ 3111.996571] ? lock_downgrade+0x6d0/0x6d0 [ 3111.997335] __io_queue_sqe+0x90/0x9d0 [ 3111.998047] ? io_issue_sqe+0x77b0/0x77b0 [ 3111.998801] ? __fget_files+0x2f8/0x520 [ 3111.999529] ? io_prep_rw+0x7f5/0x1050 [ 3112.000287] io_submit_sqes+0x44aa/0x8610 [ 3112.001079] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3112.001985] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3112.002867] ? lock_downgrade+0x6d0/0x6d0 [ 3112.003628] ? find_held_lock+0x2c/0x110 [ 3112.004459] ? io_submit_sqes+0x8610/0x8610 [ 3112.005256] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3112.006139] ? wait_for_completion_io+0x270/0x270 [ 3112.007026] ? rcu_read_lock_any_held+0x75/0xa0 [ 3112.007885] ? vfs_write+0x354/0xb10 [ 3112.008698] ? fput_many+0x2f/0x1a0 [ 3112.009360] ? ksys_write+0x1a9/0x260 [ 3112.010057] ? __ia32_sys_read+0xb0/0xb0 [ 3112.010808] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3112.011779] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3112.012884] do_syscall_64+0x33/0x40 [ 3112.013561] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3112.014499] RIP: 0033:0x7fd311e28b19 [ 3112.015193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3112.017358] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3112.018084] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3112.018761] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3112.019422] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3112.020090] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3112.020761] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:03:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3112.096996] FAULT_INJECTION: forcing a failure. [ 3112.096996] name failslab, interval 1, probability 0, space 0, times 0 [ 3112.097901] CPU: 1 PID: 15066 Comm: syz-executor.6 Not tainted 5.10.223 #1 [ 3112.098419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3112.099009] Call Trace: [ 3112.099225] dump_stack+0x107/0x167 [ 3112.099508] should_fail.cold+0x5/0xa [ 3112.099786] ? __io_uring_add_tctx_node+0x15c/0x520 [ 3112.100180] should_failslab+0x5/0x20 [ 3112.100480] kmem_cache_alloc_trace+0x55/0x320 [ 3112.100808] ? percpu_ref_tryget_many+0x166/0x2d0 [ 3112.101181] __io_uring_add_tctx_node+0x15c/0x520 [ 3112.101548] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3112.101934] __do_sys_io_uring_enter+0x1489/0x18c0 [ 3112.102309] ? lock_downgrade+0x6d0/0x6d0 [ 3112.102623] ? find_held_lock+0x2c/0x110 [ 3112.102918] ? io_submit_sqes+0x8610/0x8610 [ 3112.103247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3112.103642] ? asm_sysvec_call_function_single+0x12/0x20 [ 3112.104029] ? trace_hardirqs_on+0x5b/0x180 [ 3112.104384] ? asm_sysvec_call_function_single+0x12/0x20 [ 3112.104776] ? fput_many+0x1c/0x1a0 [ 3112.105039] ? fput_many+0x23/0x1a0 [ 3112.105328] ? fput_many+0x2f/0x1a0 [ 3112.105611] ? ksys_write+0x1a9/0x260 [ 3112.105885] ? __ia32_sys_read+0xb0/0xb0 [ 3112.106196] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3112.106589] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3112.106962] do_syscall_64+0x33/0x40 [ 3112.107247] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3112.107630] RIP: 0033:0x7f6f59063b19 [ 3112.107899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3112.109257] RSP: 002b:00007f6f565b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3112.109822] RAX: ffffffffffffffda RBX: 00007f6f59177020 RCX: 00007f6f59063b19 [ 3112.110359] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005 [ 3112.110866] RBP: 00007f6f565b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 3112.111402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3112.111909] R13: 00007ffccb8c7bff R14: 00007f6f565b8300 R15: 0000000000022000 10:03:55 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 66) 10:03:55 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x7) 10:03:55 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x204002) r3 = fcntl$dupfd(r2, 0x0, r2) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4a}, 0xb610, 0x0, 0x7, 0x0, 0x8000000b7a, 0x1000000, 0x0, 0x0, 0xfffffc01}, 0xffffffffffffffff, 0x5, r3, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f00000001c0)) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xffffffffffffff94, 0x0}}], 0x200002dc) r4 = add_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="fa", 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0xd5070a348ca9e344, 0x80, 0x13, 0x0, 0xbd, 0x7f, 0x0, 0x0, 0x8022, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f00000000c0), 0xd}, 0x200, 0x5, 0x1, 0x4, 0x7fffffff, 0x0, 0x40, 0x0, 0xffff20ca, 0x0, 0x1}, 0xffffffffffffffff, 0xa, r0, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0) 10:03:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) lseek(r1, 0x0, 0x4) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:03:55 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3c000000) 10:03:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:03:55 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x34, 0x0, &(0x7f00000005c0)) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200"/27, @ANYRES32=r4, @ANYBLOB="040005000000000010000600000000002000050000000000"], 0x2c, 0x4) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x540a, 0x3) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 3112.359532] FAULT_INJECTION: forcing a failure. [ 3112.359532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3112.365022] CPU: 0 PID: 15080 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3112.365757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3112.366633] Call Trace: [ 3112.366941] dump_stack+0x107/0x167 [ 3112.367361] should_fail.cold+0x5/0xa [ 3112.367798] _copy_to_iter+0x264/0x12d0 [ 3112.368280] ? chacha_block_generic+0x13e/0x200 [ 3112.368797] ? chacha_permute+0x6f0/0x6f0 [ 3112.369264] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3112.369836] get_random_bytes_user+0x173/0x3b0 [ 3112.370341] ? get_random_u32+0x670/0x670 [ 3112.370779] ? wait_for_random_bytes+0x91/0xe0 [ 3112.371273] ? security_file_permission+0xb1/0xe0 [ 3112.371776] ? get_random_bytes_user+0x3b0/0x3b0 [ 3112.372283] random_read_iter+0x65/0x140 [ 3112.372706] io_read+0x2dc/0x11e0 [ 3112.373081] ? kiocb_done+0xc90/0xc90 [ 3112.373477] ? mark_lock+0xf5/0x2df0 [ 3112.373867] ? lock_chain_count+0x20/0x20 [ 3112.374306] ? stack_trace_consume_entry+0x160/0x160 [ 3112.374843] ? lock_acquire+0x197/0x470 [ 3112.375264] ? __lock_acquire+0xbb1/0x5b00 [ 3112.375713] io_issue_sqe+0x2e8a/0x77b0 [ 3112.376150] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3112.376696] ? SOFTIRQ_verbose+0x10/0x10 [ 3112.377117] ? lock_chain_count+0x20/0x20 [ 3112.377550] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3112.378090] ? io_connect+0x610/0x610 [ 3112.378494] ? lock_acquire+0x197/0x470 [ 3112.378908] ? find_held_lock+0x2c/0x110 [ 3112.379341] ? __fget_files+0x2cf/0x520 [ 3112.379756] ? lock_downgrade+0x6d0/0x6d0 [ 3112.380216] __io_queue_sqe+0x90/0x9d0 [ 3112.380628] ? io_issue_sqe+0x77b0/0x77b0 [ 3112.381055] ? __fget_files+0x2f8/0x520 [ 3112.381474] ? io_prep_rw+0x7f5/0x1050 [ 3112.381888] io_submit_sqes+0x44aa/0x8610 [ 3112.382349] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3112.382865] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3112.383372] ? lock_downgrade+0x6d0/0x6d0 [ 3112.383800] ? find_held_lock+0x2c/0x110 [ 3112.384244] ? io_submit_sqes+0x8610/0x8610 [ 3112.384699] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3112.385202] ? wait_for_completion_io+0x270/0x270 [ 3112.385706] ? rcu_read_lock_any_held+0x75/0xa0 [ 3112.386179] ? vfs_write+0x354/0xb10 [ 3112.386561] ? fput_many+0x2f/0x1a0 [ 3112.386941] ? ksys_write+0x1a9/0x260 [ 3112.387337] ? __ia32_sys_read+0xb0/0xb0 [ 3112.387766] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3112.388321] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3112.388862] do_syscall_64+0x33/0x40 [ 3112.389256] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3112.389787] RIP: 0033:0x7fd311e28b19 [ 3112.390177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3112.391937] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3112.392667] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3112.393296] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3112.393951] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3112.394603] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3112.395256] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:04:10 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x8) 10:04:10 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 10:04:10 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 10:04:10 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 67) 10:04:10 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x10000000000) 10:04:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000200)={0x0, 0x0, 0x1}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000006e80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="b8", 0x1}], 0x2b}}], 0x1, 0x40) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) sendfile(r0, r1, &(0x7f0000000080)=0x1337b045, 0x1fa) 10:04:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:04:10 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@random={0xdd, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x80000000}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fcdbdf251d00238008001a0002000000080017000300000006001b0080000000060400000008001a000300000005000e0003000000082003005988cd64f7de11468d4eb9d9721710fdd67b00000000000000", @ANYRES32=r5, @ANYBLOB="0c009900060000001b0000000c009900b7080000790000000c002380050005000a0000001c002380060010000300000008001500fb0000000500110000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x10000015}, 0x8000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001e00)={0x1668, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x5f}}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x33}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x957}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x184, 0x11d, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x56}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xbc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x6, 0x20, 0x7, 0xfffb, 0xd9b, 0x101, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0x1, 0x60]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x60, 0x7c, 0x30, 0x7a, 0x1b, 0x60, 0x18, 0x16, 0xb, 0x30, 0x6]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x8}, {0x3, 0x1}, {0x6, 0x2}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x7}, {0x6}, {0x2, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0xa}, {0x5, 0x4}, {0x2, 0x4}, {0x0, 0x5}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x1}, {0x6, 0x3}, {0x5, 0x2}, {0x0, 0xa}, {0x2, 0xa}, {0x1, 0xa}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0x2}, {0x2, 0x8}, {0x4, 0x9}, {0x6, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x1, 0x8001, 0x6, 0xfff, 0x6, 0xe709, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0xc, 0x0, 0x2, 0x6, 0x16, 0x30, 0x6c, 0xb, 0x24, 0x12, 0x6c, 0x3, 0x48, 0xb, 0x9, 0x1b, 0x1b, 0x1b, 0x18, 0xb, 0x1, 0x5, 0x1, 0x12]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x4}, {0x4, 0x7}, {0x6}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x6}, {0x0, 0x5}, {0x6, 0x2}, {0x7, 0x6}, {0x0, 0x5}, {0x5, 0x2}, {0x7, 0x4}, {0x4, 0x2}, {0x5}, {0x1, 0x9}, {0x4, 0x2}, {0x7, 0x3}, {0x2, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x97}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x41}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x46}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x70c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x674, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x16, 0x6c, 0xb, 0x60, 0x60, 0x12, 0x838a545f4c623c6e, 0x18, 0x30, 0x3, 0x12, 0x16, 0x6c, 0xc, 0x60, 0x2, 0x6, 0x48, 0x24, 0x5, 0x12, 0x6, 0x3, 0x1]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x1, 0xa}, {0x4, 0x3}, {0x0, 0x8}, {0x0, 0x2}, {0x7}, {0x4}, {0x5, 0x2}, {0x5, 0x5}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x0, 0x2}, {0x0, 0x3}, {0x4, 0x5}, {0x0, 0x8}, {0x5, 0x1}, {0x1, 0x2}, {0x6}, {0x5, 0x5}, {0x7, 0x3}, {0x1, 0x3}, {0x3, 0x5}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x5}, {0x3}, {0x7, 0x2}, {0x3, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x3, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x8}, {0x3, 0xa}, {0x2, 0x3}, {0x6, 0x7}, {0x4, 0x6}, {0x3}, {0x6, 0xa}, {0x2, 0x8}, {0x1, 0x2}, {0x1, 0x5}, {0x1, 0x8}, {0x1, 0x8}, {0x6, 0x4}, {0x4, 0x4}, {0x3, 0x4}, {0x1, 0x7}, {0x1, 0x7}, {0x6, 0x5}, {0x7}, {0x0, 0x9}, {0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x2, 0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0x2}, {0x0, 0x3}, {0x2, 0x4}, {0x2, 0x8}, {0x2, 0x8}, {0x6, 0x9}, {0x6, 0xa}, {0x1, 0x1}, {0x5, 0x9}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0x4}, {0x4, 0x8}, {0x1, 0x6}, {0x6, 0x5}, {0x0, 0x2}, {0x2, 0x1}, {0x4, 0x4}, {0x0, 0x9}, {0x2, 0xa}, {0x1, 0x7}, {}, {0x1, 0x9}, {0x0, 0x7}, {0x3, 0x7}, {0x4, 0xa}, {0x0, 0x7}, {0x7, 0x9}, {0x3, 0x3}, {0x1, 0x9}, {0x5, 0x8}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x3}, {0x4}, {0x5, 0x6}, {0x3, 0x6}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x100, 0x8, 0x8000, 0x10, 0x2, 0x400, 0xfffe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x7}, {0x3, 0x1}, {0x7, 0x8}, {0x5}, {0x7, 0x2}, {0x7, 0xa}, {0x0, 0x9}, {0x2, 0x2}, {0x7, 0x4}, {}, {0x4, 0x9}, {0x5, 0x6}, {0x3, 0x7}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x4}, {0x0, 0x8}, {0x7, 0x5}, {0x0, 0xa}, {0x2}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x5}, {0x7, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x0, 0x7}, {0x1, 0x1}, {0x6, 0xa}, {0x5, 0x1c}, {0x5, 0x1}, {0x0, 0x4}, {0x1, 0x2}, {0x7, 0x3}, {0x7, 0x4}, {0x5, 0x2}, {0x1, 0x4}, {0x3}, {0x1, 0x7}, {0x2, 0x7}, {0x2, 0x1}, {}, {0x1, 0x6}, {0x6, 0x2}, {0x3, 0x6}, {0x0, 0x2}, {0x3, 0xa}, {0x3, 0x3}, {0x5, 0x8}, {0x5, 0x6}, {0x5, 0x3}, {0x5}, {0x2, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x2}, {0x4, 0x3}, {0x0, 0x1}, {0x4}, {0x3, 0xa}, {0x2}, {0x7}]}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x2, 0x30, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x4}, {0x2, 0x5}, {0x5, 0x1}, {0x5, 0x6}, {0x2, 0x3}, {0x6, 0x7}, {0x3, 0xa}, {0x1, 0x6}, {0x4, 0x1}, {0x0, 0x2}, {0x4}, {0x7, 0x2}, {0x6, 0xa}, {0x3, 0x4}, {0x4, 0x7}, {0x0, 0x8}, {0x7, 0x1}, {0x1, 0x8}, {0x6, 0x5}, {0x5, 0x5}, {0x2, 0x2}, {0x3, 0x5}, {0x0, 0xa}, {0x2, 0x3}, {0x5}, {0x7, 0x7}, {0x2, 0x1}, {0x4, 0x4}, {0x4, 0x1}, {0x2, 0x6}, {0x4, 0x1}, {0x1, 0x2}, {0x1, 0x3}, {0x1, 0x5}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0x6}, {0x4, 0x5}, {0x5, 0x7}, {0x1, 0x2}, {0x5, 0x1}, {0x0, 0xa}, {0x0, 0x6}, {0x7, 0x8}, {0x6, 0x4}, {0x1, 0x5}, {0x3, 0x9}, {0x0, 0x1}, {0x1, 0x2}, {0x7, 0x6}, {0x4, 0x6}, {0x2, 0x1}, {0x4, 0x2}, {0x0, 0x4}, {0x0, 0xa}, {0x5, 0x4}, {0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x9}, {0x5, 0x6}, {0x2, 0x9}, {0x5, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x2, 0x3}, {0x0, 0x7}, {0x2, 0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x4, 0x934, 0x3, 0x20, 0x0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x2, 0x4, 0x318, 0x2143, 0x6, 0x1]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x0, 0x6c, 0x3, 0x75, 0x12, 0x1b, 0x18, 0x0, 0x3, 0xf, 0x4, 0x1b, 0x1b, 0x1f]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x8, 0x4, 0x2, 0xfffb, 0x2, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa7eb, 0x81, 0x400, 0xfffc, 0x8, 0x6, 0x6984, 0xf800]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1, 0xfff8, 0x2, 0x7, 0x5, 0x200, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x18, 0x5, 0xb, 0x12, 0x16, 0x5, 0x6, 0x16, 0x24, 0x12, 0xb, 0x6c, 0xb, 0xc, 0x3, 0x6, 0xb, 0x12, 0x3, 0x36, 0x1d, 0x7, 0x9, 0xb, 0x6c, 0x2, 0x48, 0xb]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3f, 0x9, 0x20, 0x1, 0x0, 0x8, 0xfff8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x9c27, 0x800, 0xe97, 0x9d3c, 0xdac, 0x77, 0x4c1f]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x2, 0x0, 0x38, 0x3, 0x9, 0x1b, 0x2, 0x48, 0x6c, 0x16, 0x30, 0x4, 0xc, 0x30]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x2, 0xb, 0x48, 0x6, 0xb, 0x16, 0x48, 0x6, 0xb, 0x16, 0x48, 0x4, 0xc, 0x24, 0x1b, 0x60, 0x1, 0x6c, 0x2, 0xb, 0x1b, 0x30, 0x12, 0xc, 0xc, 0x60, 0x48, 0x3, 0x18, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0xd9, 0x4, 0xdeb, 0xde24, 0xe89, 0xff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xc, 0x4, 0x60, 0x3, 0x16, 0x24, 0x24, 0x5, 0x6]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x7}, {0x1, 0x7}, {0x4, 0x7}, {0x7, 0x9}, {0x4, 0x1}, {0x4, 0x5}, {0x2, 0x7}, {0x4, 0xa}, {0x2, 0x7}, {0x4, 0x1}, {0x5, 0x8}, {0x4, 0x5}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x4}, {0x1, 0xa}, {0x1, 0x8}, {0x1, 0x4}, {0x5, 0x3}, {0x1, 0x9}, {0x3, 0x7}, {0x6, 0x9}, {0x7, 0xa}, {0x5, 0x8}, {0x7, 0x5}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfb, 0xffff, 0x3, 0x6, 0x0, 0x0, 0xecbd, 0x81]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x6c, 0x36, 0x6f, 0x6, 0x24, 0x1b, 0x6, 0x30, 0x4, 0x24, 0xb, 0x60, 0x3, 0x36]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x6, 0x9, 0x2, 0xb, 0x60, 0x3c, 0x9, 0x60, 0x4, 0x16, 0x60, 0x5, 0x36, 0x1, 0x2, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x200, 0xfff7, 0x200, 0x40, 0x9, 0x20, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x6, 0xfff, 0x1, 0x1, 0x7f, 0x7fff]}}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0xc, 0x4, 0x2, 0x2, 0x3, 0x5, 0x12, 0x1b, 0x6, 0x6c, 0x4, 0x9, 0x5, 0x30, 0x18, 0x30, 0x3, 0x5, 0x5, 0x4, 0xb, 0x24, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x16, 0xa4, 0x0, 0xff37, 0x3f, 0x0, 0x2, 0x8]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x7, 0x9}, {0x6, 0x2}, {0x2, 0x2}, {0x1, 0x8}, {0x5, 0x2}, {0x6, 0x7}, {0x0, 0x3}, {0x2, 0x4}, {0x5, 0x9}, {0x7, 0x9}, {0x3, 0x9}, {0x0, 0x7}, {0x7, 0x4}, {0x3, 0x1}, {0x0, 0x3}, {0x1, 0x6}, {0x7, 0x7}, {}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x4}, {0x2, 0x4}, {0x4, 0x3}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x9}, {}, {0x7, 0x1}, {0x1}, {0x2, 0x8}, {0x5, 0x6}, {0x2, 0x1}, {0x2, 0x2}, {0x3, 0x5}, {0x3, 0x3}, {0x6, 0x4}, {0x7, 0x1}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x2}, {0x1, 0x2}, {0x2, 0x3}, {0x6, 0x5}, {0x4, 0xa}, {0x6}, {0x1, 0x6}, {0x0, 0x2}, {0x2, 0x7}, {0x1, 0x9}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x3}, {0x4, 0x5}, {0x3, 0x4}, {0x1, 0x2}, {0x6, 0xa}, {0x5, 0x8}, {0x5, 0x2}, {}, {0x6, 0x1}, {0x2, 0x4}, {0x1, 0x5}, {0x1, 0x1}, {0x5, 0x6}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x48, 0x3, 0x48, 0x1, 0x24, 0x36, 0x3, 0x3, 0x5, 0x6c, 0x6c, 0x3, 0x60, 0x30, 0x1b, 0x36, 0x0, 0x3, 0x16, 0x48, 0x60, 0x9, 0x30, 0x1, 0x0, 0xb]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0xb, 0x5, 0xb, 0x30, 0x30, 0x30, 0xc, 0x166101842bb8af87, 0x6, 0x16, 0xb, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0x2, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x5, 0x7ff, 0x0, 0x1000, 0x6, 0x20]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x3, 0x30, 0x3, 0x30, 0x30, 0xb, 0xc, 0x3, 0x4, 0x1, 0x5, 0x0, 0x12, 0x16, 0x16, 0x9, 0x2, 0x48, 0x60, 0x2, 0x3, 0x3, 0x6c, 0x6c, 0x6c, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x88, 0x4, 0x7, 0x7, 0x9, 0x61e7, 0x0, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1f, 0xe000, 0x7, 0xf800, 0x2, 0x5, 0xff14]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x1, 0x48, 0x3f, 0xb, 0x2, 0x6, 0x18, 0x6c, 0xb, 0x6e, 0x6c, 0x9, 0x15, 0xc, 0x4, 0x3, 0xc, 0x18, 0x24, 0x36, 0x3, 0x4, 0xc, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x5, 0x1b, 0x3, 0x16, 0x3, 0x1, 0x18, 0x16, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x14, 0x12, 0x2, 0x9, 0x24, 0x4, 0x0]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2ec0, 0x77, 0xfffb, 0x7, 0x7, 0x5, 0x2f, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x747b, 0x800, 0x8, 0x400, 0x7ec, 0x8, 0x7fff, 0x3f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6345, 0x9, 0x9, 0x3, 0x4, 0x8, 0x3f, 0x7fff]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x3, 0x7}, {0x0, 0x4}, {0x3, 0x8}, {0x4, 0x3}, {0x6, 0x3}, {0x4, 0x2}, {0x1, 0x2}, {0x4, 0x1}, {0x0, 0x4}, {0x6, 0x8}, {0x7, 0x7}, {0x3, 0x9}, {0x0, 0x3}, {0x1, 0xa}, {0x4, 0x5}, {0x4, 0x2}, {0x1, 0x6}, {0x1, 0x5}, {0x6, 0x1}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x6}, {0x5, 0x9}, {0x4, 0x9}, {0x7, 0x4}, {0x5, 0x2}, {0x4, 0x4}, {0x6, 0x9}, {0x4}, {0x5, 0x7}, {0x5, 0x3}, {0x4, 0x4}, {0x6, 0x4}, {0x4, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x9, 0x5, 0x9, 0x1, 0x6, 0xfff8, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x7, 0x6, 0x2, 0x3, 0x81, 0x1]}}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x5, 0x8}, {0x4, 0x6}, {0x1, 0x2}, {0x1, 0x9}, {0x5, 0xa}, {0x5, 0x7}, {0x3, 0x3}, {0x6, 0x5}, {}, {0x3, 0x5}, {0x6, 0x5}, {0x7, 0x6}, {0x5, 0x8}, {0x3, 0xa}, {0x5, 0x7}, {0x6, 0x4}, {0x0, 0x3}, {0x2}, {0x4, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x1, 0x9}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x2}, {0x1, 0x9}, {0x2, 0x1}, {0x1, 0x9}, {0x7, 0x3}, {0x4, 0x1}, {0x5, 0x9}, {0x6, 0x2}, {0x2, 0x9}, {0x4, 0x5}, {0x7, 0x3}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0xa}, {0x5, 0xa}, {0x6, 0x1}, {0x5, 0x9}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x6}, {0x0, 0x6}, {0x1, 0x5}, {0x6, 0x5}, {0x5, 0x2}, {0x7, 0x2}, {0x0, 0x4}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x2}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xffff, 0x8, 0xe5, 0x6, 0x2, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x3, 0xb, 0x18, 0x30, 0x36, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x0, 0x401, 0x40, 0x8, 0x9b0, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x34}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdb}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x52}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x13c, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x1, 0x7, 0x9, 0x6, 0x7fff, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x38}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x4}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x74}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}]}]}, @NL80211_ATTR_TID_CONFIG={0xa08, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x77}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa60}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x2}, {0x1, 0x4}, {0x7, 0x4}, {0x4, 0x9}, {0x2, 0x1}, {0x6, 0x8}, {0x5}, {0x6}, {0x0, 0xa}, {0x6, 0x2}, {0x2}, {0x0, 0x3}, {0x4, 0x5}, {0x7, 0x9}, {0x0, 0x6}, {0x2, 0x1}, {0x0, 0x9}, {0x4, 0x2}, {0x0, 0x6}, {0x1}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x3}, {0x4, 0x8}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x2}, {0x4, 0x9}, {0x6, 0x6}, {}, {0x3, 0x3}, {0x4}, {0x7, 0x8}, {0x7, 0x5}, {0x5, 0x7}, {0x2, 0x2}, {0x0, 0x7}, {0x7, 0x9}, {0x0, 0x4}, {0x5, 0x7}, {0x7, 0x4}, {0x0, 0x5}, {0x4, 0x7}, {0x3, 0x6}, {0x3, 0x6}, {0x6, 0x3}, {0x7, 0x5}, {0x3, 0x9}, {0x7}, {0x3, 0x6}, {0x5, 0x7}, {0x4, 0x9}, {0x1, 0x7}, {0x6, 0x6}, {0x2, 0x6}, {0x4, 0x2}, {0x6}, {0x4, 0xa}, {0x3, 0x4}, {0x2, 0x7}, {0x2, 0x3}, {0x1, 0x9}, {0x3, 0x8}, {0x1, 0x4}, {0x2}, {0x7, 0x5}, {0x6, 0x3}, {0x5, 0xa}, {0x2, 0x9}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x4}, {0x5, 0xa}, {0x6, 0x7}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x8}, {0x0, 0x7}, {0x7, 0x4}, {}, {0x7}, {0x5, 0x6}, {0x5, 0x6}, {0x7, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x7, 0x2}, {0x4}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x4, 0x7}, {0x0, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x6, 0x36, 0x6c, 0x2, 0x2, 0x3, 0x21, 0x3, 0x18, 0x6, 0x48, 0x6c, 0x1b, 0x2, 0x18, 0x18, 0x60, 0x1b, 0x60, 0xb, 0x1, 0xc, 0x30]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0x7}, {0x4, 0x7}, {0x3, 0x2}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x6}, {0x3, 0x3}, {0x1, 0x9}, {0x5}, {0x5, 0x2}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x36, 0xc, 0x30, 0x1b, 0xc, 0x30, 0x0, 0xb]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x9}, {0x5}, {0x2}, {0x3, 0x7}, {0x7, 0x8}, {0x5, 0x2}, {0x1, 0x7}, {0x1, 0xa}, {0x3, 0x7}, {0x0, 0x9}, {0x0, 0x4}, {0x1, 0x3}, {0x6, 0x10}, {0x7, 0x5}, {0x7, 0xa}, {0x7, 0x9}, {0x3, 0x5}, {0x3, 0x8}, {0x0, 0x7}, {0x4, 0x8}, {0x5, 0x6}, {0x6, 0x6}, {0x0, 0xa}, {0x6, 0x2}, {0x0, 0x4}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xfff, 0x2, 0x5, 0x4972, 0x800, 0xbf4d, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000001}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x68}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xef}]}, {0x204, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x5, 0x6}, {0x6, 0x8}, {0x7, 0xa}, {0x7, 0x5}, {0x3, 0x9}, {0x3, 0x3}, {0x1, 0x1}, {0x5, 0x6}, {0x0, 0x2}, {0x6}, {0x0, 0x6}, {0x4, 0x8}, {0x3, 0x1}, {0x5, 0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x6, 0x7}, {0x2}, {0x6, 0x9}, {0x4, 0x3}, {0x7, 0x8}, {0x3, 0x7}, {0x5}, {0x5, 0x1}, {0x0, 0x8}, {0x1, 0x9}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x8}, {0x1, 0x6}, {0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x2a5, 0xda9, 0x4e, 0x5, 0x582b, 0xf898]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x3}, {0x5, 0x3}, {0x6, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x3, 0x2}, {0x0, 0x8}, {0x7, 0x9}, {0x4, 0x3}, {0x2, 0x8}, {0x2}, {0x0, 0x4}, {0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x5}, {0x0, 0x6}, {0x6, 0x5}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0xa}, {0x2, 0x6}, {0x4, 0x3}, {0x1, 0x5}, {0x0, 0x8}, {0x6, 0x1}, {0x0, 0x3}, {0x6, 0x7}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x36, 0x1, 0x4, 0x5, 0x6, 0x30, 0x1, 0x4, 0x6, 0x16, 0x6, 0x18, 0x48, 0x30]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x48, 0x12, 0x30, 0x48, 0x72, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x20, 0x7ff, 0x5, 0x7, 0xffff, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff, 0x0, 0x48e9, 0x4, 0x40, 0x8001, 0x8]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x2, 0x6c, 0x1, 0x18, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x4}, {0x5, 0x5}, {0x1, 0xa}, {0x5, 0x7}, {0x5, 0x6}, {0x1, 0x2}, {0x3, 0x3}, {0x2, 0xa}, {0x1, 0x5}, {0x2, 0x3}, {0x0, 0x2}, {0x1, 0x1}, {0x3, 0x8}, {0x7, 0x3}, {0x5, 0x3}, {0x3, 0x3}, {0x1, 0x6}, {0x3, 0xa}, {0x2, 0x5}, {0x6, 0x4}, {0x0, 0x9}, {0x6, 0x7}, {0x0, 0xa}, {0x2, 0x7}, {0x6, 0x1}, {0x0, 0x7}, {0x7, 0x7}, {0x2, 0x2}, {0x2, 0xa}, {0x1, 0x5}, {0x2, 0x8}, {0x6}, {0x1, 0x6}, {0x3, 0x5}, {0x0, 0x7}, {0x3, 0x4}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x6}, {0x0, 0x7}, {0x4, 0x8}, {0x1, 0x8}, {0x0, 0x6}, {0x6, 0x7}, {0x2, 0xa}, {0x6, 0x4}, {0x0, 0x1}, {0x0, 0x6}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x6}, {0x1, 0xa}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x4}, {0x0, 0x3}, {0x2, 0x5}, {0x2, 0xa}, {0x5, 0xa}, {0x2, 0x8}, {0x3, 0x9}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0x5}]}]}, @NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x9}, {0x7, 0x2}, {0x4, 0x6}, {0x5, 0x8}, {0x5, 0x2}, {0x7, 0x5}, {0x6, 0x1}, {0x6, 0x9}, {0x4, 0x2}, {0x5, 0x4}, {0x2, 0x2}, {0x5, 0x2}, {}, {0x1, 0x6}, {0x7, 0x1}, {0x4, 0xa}, {0x4, 0x2}, {0x1}, {0x3, 0x3}, {0x6, 0x3}, {0x0, 0x8}, {0x6}, {0x4, 0x3}, {0x5, 0x4}, {0x1, 0x2}, {0x5, 0x3}, {0x0, 0x3}, {0x4, 0x1}, {0x6, 0x9}, {0x2, 0x4}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x4, 0x3}, {0x1, 0x2}, {0x7, 0x1}, {0x0, 0x2}, {0x7, 0x3}, {0x7, 0x9}, {0x5, 0x7}, {0x2, 0x9}, {0x0, 0x3}, {0x3, 0x4}, {0x1, 0x2}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x2}, {0x0, 0x3}, {0x7, 0x2}, {0x4, 0x2}, {0x1, 0x7}, {0x1, 0x5}, {0x2, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x6}, {}, {0x0, 0x1}, {0x2, 0x7}, {0x2, 0x5}, {0x6, 0x2}, {0x7, 0x7}, {0x1, 0xa}, {0x4, 0xa}, {0x6, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x0, 0x1}, {0x7, 0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x7f, 0xfff, 0x61c, 0xd36f, 0x400, 0x9]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0xb, 0x18, 0x30, 0x12, 0x12, 0x12, 0xc, 0x1b, 0x30, 0x16, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x1, 0x5, 0x101, 0x9, 0x40, 0xb64]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff5e, 0x4, 0xe1d, 0x7, 0x8000, 0x0, 0x6, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7fff, 0x9, 0x8001, 0x2, 0x5239, 0x5, 0x1e]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8b}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x11a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x5b4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0xf990, 0x200, 0x0, 0xf3, 0x40, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xda, 0x3b8, 0x20, 0x1000, 0x5, 0x8, 0x80, 0x3]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0xa}, {0x6, 0x4}, {0x7, 0x2}, {0x3, 0x5}, {0x3, 0x6}, {0x1, 0x7}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x5}, {0x7}, {0x4, 0xa}, {0x4, 0x8}, {0x6, 0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x6}, {0x6, 0x7}, {0x2}, {0x7, 0x8}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x8, 0x34, 0x48, 0x5, 0x6, 0x30, 0x4, 0x6c, 0x1, 0x3, 0x12, 0x60, 0x60, 0x12, 0x9, 0x36, 0x18, 0x4, 0x9, 0xaaf75a1c79753ac0]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x4}, {0x4, 0x6}, {0x4, 0x3}, {0x3, 0x2}, {0x1}, {0x0, 0x8}, {0x2, 0xa}, {0x3, 0x4}, {0x1}, {0x7, 0x9}, {0x3, 0x5}, {0x2, 0x5}, {0x2, 0x1}]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0xa}, {0x2, 0x1}, {0x6, 0x8}, {0x2, 0x4}, {0x5, 0x1}, {0x3, 0x7}, {0x2, 0x1}, {0x0, 0x8}, {0x0, 0x4}, {0x5, 0x3}, {0x0, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x5, 0x9}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x1}, {0x7, 0x9}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x3}, {0x2, 0x1}, {0x7, 0x9}, {0x5, 0x6}, {0x2, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x4, 0x1}, {0x0, 0x2}, {0x1, 0x2}, {0x0, 0x2}, {0x4, 0x3}, {0x5, 0x1}, {0x3, 0x8}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x7}, {0x0, 0x9}, {}, {0x2, 0x7}, {0x2, 0x6}, {0x4, 0x6}, {0x1, 0x8}, {0x6, 0xa}, {0x1, 0x2}, {0x3, 0x9}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0xa}, {}, {0x5, 0x4}, {0x7, 0x7}, {0x1}, {0x2, 0x3}, {0x5, 0x8}, {0x7, 0x3}, {0x0, 0x1}, {0x4, 0x2}, {0x5, 0x1}, {0x3, 0x7}, {0x0, 0x7}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x144, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0x3}, {0x3, 0x8}, {0x2, 0x2}, {0x1, 0xa}, {0x4, 0xa}, {0x3, 0x4}, {0x2}, {0x1, 0x2}, {0x6, 0x6}, {0x2, 0x1}, {0x7, 0x8}, {0x6, 0x1}, {0x7, 0x9}, {0x0, 0x1}, {0x0, 0x9}, {0x5, 0x8}, {0x6, 0x4}, {0x3, 0x4}, {0x0, 0x2}, {0x3, 0x1}, {0x3, 0x5}, {0x4, 0x3}, {0x7}, {0x1, 0x8}, {0x3, 0x6}, {0x0, 0x6}, {0x6, 0x6}, {0x1}, {0x6, 0xa}, {0x2, 0x4}, {0x0, 0x4}, {0x1, 0xa}, {0x2, 0xa}, {0x6}, {0x3, 0x8}, {0x0, 0x9}, {0x4, 0x1}, {0x6, 0x2}, {0x2, 0x1}, {0x0, 0x2}, {0x4, 0x2}, {0x7, 0x5}, {0x5, 0x2}, {0x1, 0xa}, {0x5, 0xa}, {0x7, 0x4}, {0x5, 0x3}, {0x3, 0x8}, {0x0, 0x8}, {0x6}, {0x5, 0x9}, {0x7, 0x9}, {0x5}, {0x3}, {0x7}, {0x0, 0x6}, {0x4, 0x4}, {0x2, 0x8}, {}, {0x1, 0x6}, {0x3, 0x9}, {0x5, 0x2}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0x9}, {0x2, 0x4}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x20, 0x1, 0x4, 0x6c, 0x5, 0x18]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x7}, {0x7, 0x2}, {0x1, 0x3}, {0x7}, {0x4, 0x9}, {0x0, 0xa}, {0x0, 0xa}, {0x7, 0x5}, {0x1, 0x7}, {0x7, 0xa}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0x5}, {0x2, 0x7}, {0x4, 0x8}, {0x5, 0xa}, {0x4, 0xa}, {0x1, 0x3}, {0x3, 0xa}, {0x0, 0x8}, {0x0, 0x9}, {0x3, 0x2}, {0x6, 0x5}, {0x2, 0x4}, {0x2, 0x8}, {0x7, 0x1}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0x5}, {0x3, 0x3}, {0x6, 0x1}, {0x1, 0x7}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x4}, {0x5}, {0x6, 0x3}, {0x4, 0x1}, {0x2, 0x9}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x9}, {0x3, 0x5}, {0x4, 0x9}, {0x4, 0x4}, {0x0, 0x6}, {0x1, 0x5}, {0x0, 0x2}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x5}, {0x1, 0x8}, {0x5, 0x3}, {0x0, 0x5}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x3}, {0x1, 0x6}, {0x0, 0x6}, {0x2}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x2, 0x5}, {0x0, 0x2}, {0x4, 0x9}, {0x6, 0x4}, {0x6, 0x5}, {0x4, 0xa}, {0x7}, {0x2, 0xa}, {0x5, 0x9}, {0x2, 0x2}, {0x7, 0x5}, {0x7}, {0x1, 0x6}, {0x2, 0x7}, {0x2, 0x8}, {0x6, 0x1}, {0x4, 0x1}, {0x1, 0x2}, {0x1, 0x9}, {0x4, 0x6}, {0x3, 0x2}, {0x3, 0x4}, {0x7, 0x4}, {0x2, 0x3}, {0x4, 0x7}, {0x6, 0x1}, {0x7, 0x3}, {}, {0x0, 0x6}, {0x6}, {}, {0x1, 0x2}, {0x0, 0x2}, {0x7, 0x4}, {0x3, 0x2}, {0x0, 0x1}, {0x4}, {}, {0x5, 0x3}, {0x6, 0x7}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x1}, {0x3, 0x4}, {}, {0x2}, {0x0, 0x1}, {0x1, 0x6}, {0x7, 0x3}, {0x0, 0x3}, {0x0, 0x8}, {0x7, 0xa}, {0x6, 0x8}, {0x1, 0x4}, {0x7, 0x6}, {0x6, 0x6}, {0x1, 0xa}, {0x7, 0x8}, {0x5, 0x9}, {0x1, 0x9}, {0x2, 0x2}, {0x7, 0x3}, {0x1, 0x4}, {0x4, 0xa}, {0x5, 0x1}, {0x3, 0x7}, {0x3, 0x4}, {0x4}, {0x7, 0xa}, {0x0, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x4, 0xb, 0xb, 0x30, 0x48]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x1}, {0x0, 0x6}, {0x6, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x5, 0x1}, {}, {0x0, 0x2}, {0x0, 0x4}, {0x6, 0x3}, {0x6, 0x8}, {0x3, 0x4}, {0x0, 0x7}, {0x2, 0x8}, {0x1, 0x8}, {0x5, 0x7}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x4, 0x9}, {0x4, 0x4}, {0x2, 0x1}, {0x3, 0x6}, {0x3, 0x9}, {0x6, 0xa}, {0x5, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x0, 0x8}, {0x6, 0x8}, {0x3, 0x4}, {0x3, 0xa}, {0x1, 0x4}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0x5}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x22f8, 0xf5, 0x3ff, 0x1f15, 0x800, 0x5, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x6}, {0x0, 0x7}, {0x6}, {0x1, 0x4}, {0x2, 0x5}, {0x5, 0x3}, {0x0, 0x7}, {0x3, 0x8}, {0x4, 0x6}, {0x6, 0x3}, {0x4}, {0x3, 0x2}, {0x1, 0x9}, {0x2, 0x2}, {0x4, 0x6}, {0x0, 0x1}, {0x6, 0x2}, {0x5, 0x5}, {0x2, 0x4}, {0x0, 0x5}, {0x6, 0x5}, {0x3, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x6, 0x1}, {0x6, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x4}, {0x6, 0x1}, {0x5, 0x9}, {0x0, 0x3}, {0x4, 0x8}, {0x0, 0x8}, {0x7, 0x9}, {0x7}, {0x0, 0x1}, {0x2}, {0x2, 0x7}, {0x6}, {0x3, 0xa}, {0x2, 0x3}, {0x3, 0x5}, {0x3, 0x5}, {0x5, 0x1}, {0x5, 0x3}, {0x3, 0x3}, {0x7, 0x1}, {0x1, 0x4}, {0x4, 0x6}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x0, 0x5}, {0x4, 0x3}, {0x7, 0x6}, {0x3, 0x4}, {0x2, 0x2}, {0x3, 0x8}, {0x2, 0x6}, {0x0, 0xa}, {0x6, 0x5}, {0x7}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x9}, {0x1, 0x1}, {0x1, 0x5}, {0x2}, {0x7, 0x8}, {0x4, 0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x2}, {0x5, 0x5}, {0x7, 0x4}, {0x5, 0x6}, {0x3, 0x6}, {0x3, 0x3}, {0x6, 0x8}, {0x5, 0x8}, {0x4, 0x2}, {0x2, 0x9}, {0x5, 0x4}, {0x2, 0x6}, {0x3, 0x7}, {0x5, 0x4}, {0x2, 0x8}, {0x2, 0x6}, {0x4, 0x6}, {0x5, 0x8}, {0x7, 0x3}, {0x0, 0x3}, {0x3, 0x2}, {0x5, 0x9}, {0x0, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x9}, {0x1, 0x5}, {0x4, 0x4}, {0x2, 0x7}, {0x6, 0x5}, {0x1, 0x7}, {0x7, 0x4}, {0x6}, {0x0, 0x8}, {0x5, 0x1}, {0x2, 0x2}, {0x7, 0x4}, {0x0, 0x4}, {0x2, 0x8}, {0x3, 0x7}, {0x4, 0x2}, {0x4, 0xa}, {0x0, 0x2}, {0x3, 0x6}, {0x4, 0xa}, {0x7, 0x5}, {0x1, 0xa}, {0x1, 0x6}, {0x4, 0xa}, {0x0, 0x1}, {0x5, 0x4}, {0x2, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x3}, {0x4, 0x2}, {0x2, 0xa}, {0x6, 0x6}, {0x6, 0x8}, {0x3, 0x7}, {0x6, 0x1}, {}, {0x1, 0x3}, {0x4, 0x5}, {0x7, 0x4}, {0x4, 0xa}, {0x7, 0x3}, {0x6}, {0x0, 0x1}, {0x6, 0xa}, {0x3, 0xa}, {0x0, 0x6}, {0x6, 0x6}, {0x3, 0x3}, {0x6, 0x3}, {0x2, 0x2}, {0x0, 0x2}, {0x6, 0x1}, {}, {0x2, 0x7}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x4}, {0x2, 0x9}, {0x7, 0x1}, {0x7, 0x8}, {0x1, 0x5}, {0x0, 0x5}, {0x3}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x7}]}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x6}, {0x5, 0x3}, {0x6, 0x4}, {0x4, 0xa}, {0x6, 0x2}, {0x2, 0x9}, {0x4, 0x7}, {0x4, 0x4}, {0x1, 0x2}, {0x1, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x3, 0x4, 0x16, 0x18, 0x16, 0x16, 0x30, 0x18, 0x6, 0x4, 0xc, 0xe6637fe87cdef5bf, 0x1, 0x1b, 0x1, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x4, 0x5}, {0x2, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x4, 0x2}, {0x7, 0x3}, {0x1, 0xa}, {0x5, 0x3}, {0x0, 0xa}, {0x1, 0xa}, {0x5, 0xa}, {0x7, 0x9}, {0x3, 0x9}, {0x4, 0x8}, {0x0, 0x5}, {0x7, 0x2}, {0x7, 0x1}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0x1}, {0x6, 0x2}, {0x7, 0x6}, {0x0, 0x6}, {0x7, 0x2}, {0x0, 0x5}, {0x0, 0x6}, {0x4}, {0x2, 0x7}, {0x1, 0x9}, {0x1, 0xa}, {0x4, 0x3}, {0x3, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x7, 0x5}, {0x3}, {0x7, 0x5}, {0x7, 0x6}, {0x6, 0x8}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x7}, {0x5, 0x7}, {0x4, 0x4}, {0x2}, {0x0, 0x2}, {0x1}, {0x2, 0x6}, {0x0, 0xa}, {0x0, 0xa}, {0x6, 0x4}, {0x7, 0x6}, {0x3, 0x4}, {0x1, 0x8}, {0x0, 0x4}, {0x5, 0x7}, {0x0, 0x2}, {0x6, 0x6}, {0x0, 0xa}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0x10, 0x4, 0x0, 0x16, 0x3, 0x18, 0x24, 0x4, 0x36, 0x6c, 0x36]}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x66a7, 0x100, 0x100, 0xd6f7, 0x1, 0x6, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x6, 0xc8f5, 0xe2, 0x3, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x4, 0x6, 0x9, 0x36, 0x48, 0x6, 0x48, 0x36, 0xb, 0x18, 0x36, 0x5, 0x48, 0x5, 0x1b, 0xc, 0x0, 0x36, 0x36, 0x2, 0x1, 0x16, 0xc, 0x36, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{}, {0x7, 0x6}, {0x6, 0x2}, {0x5, 0x5}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x8}, {0x5, 0x4}, {0x1, 0x6}, {0x2, 0x2}, {0x5, 0x6}, {0x7, 0x3}, {0x4, 0x8}, {0x4, 0x9}, {0x3, 0x2}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0x6}, {0x4, 0xa}, {0x0, 0x6}, {0x3, 0x8}, {0x4, 0x6}, {0x2, 0x3}, {0x0, 0x5}, {0x6, 0x1}, {0x6, 0xa}, {0x0, 0x5}, {0x5, 0xa}, {0x1}, {0x0, 0x2}, {0x7}, {0x7, 0x9}, {0x7, 0x8}, {0x5, 0x6}, {0x6, 0xa}, {0x4, 0x3}, {0x0, 0x5}, {0x0, 0x5}, {0x3, 0x1}, {0x0, 0x9}, {0x6, 0x7}, {0x2}, {0x3, 0xa}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x6, 0x3}, {0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x1}, {}, {0x0, 0xa}, {0x6}, {0x3, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x7, 0x6}, {0x4, 0x9}, {0x7, 0x7}, {0x5, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x6, 0x7}, {0x0, 0x9}, {0x4, 0x4}, {0x6, 0x9}, {0x5, 0x2}, {0x7, 0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x3, 0x1, 0x6, 0x57aa, 0x0, 0x400]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x9, 0xc, 0x1, 0x5, 0x6, 0xb, 0x18, 0x4, 0x5, 0x60, 0x6c, 0xb, 0x12, 0x2, 0x3, 0x24, 0x0, 0x6, 0x48, 0xc, 0x4, 0x1, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7ff, 0x3f, 0x8, 0x5, 0x800, 0x20, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x789a, 0x1a6d, 0x40, 0x1f8, 0x8001, 0x3, 0x0, 0x2]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xf801, 0x3, 0x91, 0x6, 0x8, 0x9, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x100, 0x2, 0x1000, 0x1000, 0xc7, 0x4]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x2}, {0x4, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0x8}, {0x1}, {0x6, 0x8}, {0x6, 0x8}, {0x5}, {0x5, 0x6}, {0x6, 0x8}, {0x2}, {0x3, 0x8}, {0x7, 0x3}, {0x7, 0xa}, {0x1, 0x8}, {0x0, 0x1}, {0x1, 0x7}, {0x1}, {0x3, 0xa}, {0x5, 0x6}, {0x2, 0x9}, {0x6, 0x7}, {0x2}, {0x0, 0x6}, {0x4, 0x9}, {0x1, 0x8}, {0x2, 0x1}, {0x4, 0x7}, {0x4, 0x8}, {0x0, 0x1}, {0x3, 0x9}, {0x1, 0x2}, {0x3, 0x6}, {0x7, 0xa}, {0x0, 0xa}, {0x1, 0x3}, {0x7, 0x8}, {0x6, 0x1}, {0x1, 0x7}, {0x7, 0x6}, {0x5, 0xa}, {0x3, 0x9}, {0x1, 0x3}, {0x3, 0xa}, {0x7, 0x2}, {0x2, 0x3}, {0x0, 0x7}, {0x5, 0x6}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x9}, {0x5, 0x2}, {0x7, 0x5}, {0x6, 0x2}, {0x7, 0x7}, {0x5}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x6}, {0x5, 0x6}, {0x2, 0x1}, {0x5, 0x8}, {}, {0x7, 0x8}, {0x2, 0x3}, {0x3, 0x7}, {0x5, 0x3}, {0x1, 0x5}, {0x6, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x6}, {0x7, 0x9}, {0x7}, {0x3}, {0x3, 0x6}, {0x0, 0x1}, {0x2, 0x5}, {0x1, 0x4}, {0x6, 0x6}, {0x4, 0x2}, {0x1, 0x3}, {0x6, 0x2}, {0x0, 0x5}, {0x5, 0x1}, {0x3, 0x9}, {0x2, 0x1}, {0x5, 0x2}, {0x4, 0x5}, {0x5, 0x6}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x7, 0xa}, {0x6, 0x5}, {0x4}, {0x4, 0x4}, {0x1}, {0x7, 0x9}, {0x1, 0x6}, {0x7, 0x7}, {0x7, 0x1}, {0x2, 0x9}, {0x3, 0x5}, {0x1, 0x2}, {0x6, 0x9}, {0x1, 0x6}, {0x1, 0x2}, {0x1, 0x9}, {0x6, 0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x5, 0x8}, {0x0, 0x8}, {0x1}, {0x0, 0x5}, {0x5, 0xa}, {0x3}, {0x5, 0x1}, {0x2, 0x6}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0x3}, {0x6, 0x9}, {0x3, 0x9}, {0x4, 0xa}, {0x6, 0x2}, {0x6}, {0x5, 0x1}, {0x1}, {0x4, 0x9}, {0x6}, {0x0, 0xa}, {0x7, 0x4}, {0x4, 0x6}, {0x5, 0x1}, {0x5, 0x3}, {0x4, 0x4}, {0x6, 0x5}, {0x5, 0x5}, {0x0, 0x1}, {0x6, 0x6}, {0x4, 0x7}, {0x3, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6b}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6939}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x208, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x24}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x42}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x198, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x180, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x0, 0x5, 0x18, 0x6, 0x1b, 0x0, 0x6, 0x36, 0x36, 0xc, 0x5, 0x74, 0x3, 0x5, 0x5, 0x36, 0x1b, 0x9, 0x16, 0x1, 0x3, 0xc, 0x60, 0x30, 0x18, 0x0]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x5, 0x7}, {0x6}, {0x7, 0x3}, {0x2, 0x4}, {0x1}, {0x1, 0x6}, {0x4, 0x3}, {0x1, 0x9}, {0x7, 0x4}, {0x5, 0x6}, {0x3, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x7, 0x5}, {0x4, 0x6}, {0x5, 0x6}, {0x3, 0x4}, {0x5, 0x9}, {0x7, 0x8}, {0x1, 0x7}, {0x2, 0x9}, {0x5, 0x2}, {0x6, 0x3}, {0x1, 0x3}, {0x6, 0x4}, {0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x0, 0x2}, {0x6, 0x6}, {0x7, 0x5}, {0x4, 0x7}, {0x3, 0x8}, {0x6, 0x6}, {0x1, 0x6}, {0x4, 0x6}, {0x1, 0x7}, {0x7, 0x7}, {0x0, 0x4}, {0x0, 0x1}, {0x1}, {0x2, 0x4}, {0x7, 0x3}, {0x0, 0x8}, {0x7, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x4, 0x4}, {0x2, 0x4}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x6, 0x4}, {0x1}, {0x3, 0x4}, {0x3, 0x8}, {0x5, 0xa}, {0x1, 0x4}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x6}, {0x7, 0x3}, {0x0, 0x4}, {0x6, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0x5}, {0x3, 0xa}, {0x1}, {0x6}, {0x3, 0x4}, {0x4, 0x9}, {0x5, 0x6}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0xa}, {0x5, 0x5}, {0x6, 0x7}, {0x7, 0x5}, {0x0, 0x3}, {0x4, 0x1}, {0x5, 0x2}, {0x7, 0x5}, {0x2}, {0x4, 0x5}, {0x5, 0xa}, {0x7, 0xa}, {0x5, 0x7}, {0x7, 0xa}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0x8}]}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6c, 0x36, 0xc, 0x16, 0x5, 0x1, 0x1b, 0x1, 0x12, 0x3, 0x60, 0x32, 0x75]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x415f, 0x800, 0x1, 0xff, 0x1f, 0x3, 0xff]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3, 0x48, 0x2, 0x16, 0x48, 0xb, 0x5, 0x36, 0x18, 0x18, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5700, 0x4, 0x5, 0x5, 0x20, 0xfff8]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x7}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0x9}, {0x0, 0x8}, {0x3, 0x1}, {0x4, 0x2}, {0x2, 0x2}, {0x0, 0x1}, {0x5, 0x7}, {0x6, 0x7}, {0x1, 0x4}, {0x6, 0x2}, {0x7, 0x6}, {0x1, 0x1}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x3}, {0x2, 0x9}, {0x5}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x3}, {0x4}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x2}, {0x0, 0x3}, {0x7, 0xa}, {0x0, 0x7}, {0x7, 0x3}, {0x3, 0x3}, {0x0, 0x3}, {0x4}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x9}, {0x1, 0x5}, {0x5, 0x9}, {0x5, 0x2}, {0x1, 0x1}, {0x5, 0x4}, {0x1}, {0x7, 0x5}, {0x0, 0x7}, {0x1, 0x7}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x3}, {0x3, 0xa}, {0x4, 0x2}, {0x2, 0x8}, {}, {0x5, 0xa}, {0x4, 0x5}, {0x7, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x5, 0x9}, {0x2, 0xa}, {0x0, 0x6}, {0x2, 0x5}, {0x2, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5d, 0xd67b, 0x1000, 0x7f, 0xfff, 0x8, 0x3, 0x3ff]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x0, 0x0, 0x82f, 0x9, 0x8, 0x9, 0x200]}}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0xa}, {0x1}, {0x1, 0x1}, {0x3, 0x3}, {0x6, 0x5}, {0x0, 0x9}, {0x2, 0x8}, {0x0, 0x3}, {0x1, 0x3}, {0x2, 0xa}, {0x7, 0x2}, {0x5, 0x2}, {0x2}, {0x2, 0x5}, {0x3, 0x8}, {0x7, 0x9}, {0x2, 0x7}, {0x2, 0x2}]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x1668}}, 0x20) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r6, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:04:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:04:10 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@isdn={0x22, 0x1, 0x9, 0x6, 0x1f}}, 0x6) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = dup3(r2, r0, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0)=0x2, 0x4) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000040), 0x4) sendmsg$802154_dgram(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x24, @short}, 0x14, &(0x7f00000007c0)={0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) bind$802154_dgram(r4, &(0x7f0000000180)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14) 10:04:11 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x80000000000000) [ 3127.595854] FAULT_INJECTION: forcing a failure. [ 3127.595854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3127.597396] CPU: 0 PID: 15116 Comm: syz-executor.6 Not tainted 5.10.223 #1 [ 3127.598091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3127.598916] Call Trace: [ 3127.599194] dump_stack+0x107/0x167 [ 3127.599567] should_fail.cold+0x5/0xa [ 3127.599974] _copy_to_user+0x2e/0x180 [ 3127.600386] simple_read_from_buffer+0xcc/0x160 [ 3127.601955] proc_fail_nth_read+0x198/0x230 [ 3127.602401] ? proc_sessionid_read+0x230/0x230 [ 3127.602856] ? security_file_permission+0xb1/0xe0 [ 3127.603365] ? proc_sessionid_read+0x230/0x230 [ 3127.603824] vfs_read+0x228/0x620 [ 3127.604198] ksys_read+0x12d/0x260 [ 3127.604575] ? vfs_write+0xb10/0xb10 [ 3127.604957] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3127.605499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3127.606017] do_syscall_64+0x33/0x40 [ 3127.606412] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3127.606924] RIP: 0033:0x7f6f5901669c [ 3127.607316] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3127.609158] RSP: 002b:00007f6f565b8170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3127.609939] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f6f5901669c [ 3127.610668] RDX: 000000000000000f RSI: 00007f6f565b81e0 RDI: 0000000000000006 [ 3127.612464] RBP: 00007f6f565b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 3127.613138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3127.613795] R13: 00007ffccb8c7bff R14: 00007f6f565b8300 R15: 0000000000022000 [ 3127.624791] FAULT_INJECTION: forcing a failure. [ 3127.624791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3127.629197] CPU: 1 PID: 15109 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3127.629783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3127.630483] Call Trace: [ 3127.630716] dump_stack+0x107/0x167 [ 3127.631027] should_fail.cold+0x5/0xa [ 3127.631359] _copy_from_user+0x2e/0x1b0 [ 3127.631700] iovec_from_user+0x141/0x400 [ 3127.632050] __import_iovec+0x67/0x590 [ 3127.632418] io_import_iovec+0x581/0x1120 [ 3127.632776] ? io_complete_rw+0x230/0x230 [ 3127.633132] ? kiocb_done+0x16b/0xc90 [ 3127.633459] io_read+0xe14/0x11e0 [ 3127.633765] ? kiocb_done+0xc90/0xc90 [ 3127.634089] ? mark_lock+0xf5/0x2df0 [ 3127.634410] ? lock_chain_count+0x20/0x20 [ 3127.634770] ? stack_trace_consume_entry+0x160/0x160 [ 3127.635207] ? lock_acquire+0x197/0x470 [ 3127.635548] ? __lock_acquire+0xbb1/0x5b00 [ 3127.635910] io_issue_sqe+0x2e8a/0x77b0 [ 3127.640286] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3127.640728] ? SOFTIRQ_verbose+0x10/0x10 [ 3127.641070] ? lock_chain_count+0x20/0x20 [ 3127.641423] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3127.641862] ? io_connect+0x610/0x610 [ 3127.642191] ? lock_acquire+0x197/0x470 [ 3127.642526] ? find_held_lock+0x2c/0x110 [ 3127.642875] ? __fget_files+0x2cf/0x520 [ 3127.643211] ? lock_downgrade+0x6d0/0x6d0 [ 3127.643564] __io_queue_sqe+0x90/0x9d0 [ 3127.643897] ? io_issue_sqe+0x77b0/0x77b0 [ 3127.648274] ? __fget_files+0x2f8/0x520 [ 3127.648613] ? io_prep_rw+0x7f5/0x1050 [ 3127.648948] io_submit_sqes+0x44aa/0x8610 [ 3127.649319] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3127.649739] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3127.650149] ? lock_downgrade+0x6d0/0x6d0 [ 3127.650495] ? find_held_lock+0x2c/0x110 [ 3127.650842] ? io_submit_sqes+0x8610/0x8610 [ 3127.651215] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3127.651623] ? wait_for_completion_io+0x270/0x270 [ 3127.652031] ? rcu_read_lock_any_held+0x75/0xa0 [ 3127.652443] ? vfs_write+0x354/0xb10 [ 3127.652757] ? fput_many+0x2f/0x1a0 [ 3127.653066] ? ksys_write+0x1a9/0x260 [ 3127.653390] ? __ia32_sys_read+0xb0/0xb0 [ 3127.653735] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3127.654177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3127.654611] do_syscall_64+0x33/0x40 [ 3127.654926] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3127.655357] RIP: 0033:0x7fd311e28b19 [ 3127.655673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3127.657231] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3127.657872] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3127.658469] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3127.659064] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3127.659659] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3127.660305] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:04:11 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) fallocate(r0, 0x42, 0xfffffffffffffffa, 0x7f6) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x10) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) accept(r3, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) fcntl$setflags(r5, 0x2, 0x0) 10:04:11 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0xa) 10:04:11 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001100)={0x394, 0x16, 0x800, 0x70bd29, 0x25dfdbfc, {0xa}, [@nested={0x22c, 0x0, 0x0, 0x1, [@typed={0x14, 0x12, 0x0, 0x0, @ipv6=@private2}, @generic="5c021565329ec3cc109a7606666aa343e7d5d58750e519c1c93eef0dccc2fb82851e3cd51a73c4da0ceab9c41a3b58157e81caa81c9487e296fb0ff569ded46eadb6ac214e9ba23fe3a10aa49ed2830c9ef18fe27289f29da7bed24d93c7694349d359b2cf5150f3b87512b53d24d5123540053f5c6a1e2236d86a", @generic="2236b0b05097d12c6420b05c5f303a712fdf9e3673ecd366b44ca882f72a7cc19525eaebb2b844fc96026ed1ea4068624c39427598ef3809aaccee11fa45b7e1dc3700140ef5c4f5283bf1c87896ea2d9f91667091ff7fbdbcd51c9c9fb3f9f855830b5b04445f2c041c938144777af11fffbf4e7c3b89c3b22a1b3931aafcbae2729024275c7ef269962752bb06c79e0e1a731722404eb566647595", @generic="c0fde252e2f6ce84891b7d3a5941c3e74383c4c7693f21bee34a8594b23396e04e4b16ad4243f1eafe04f34f36996775fb5a6052e25be8ae397bb40ad1475b62938de123bc906ed1b45dde72690160dd4a32812896a91d36557123e1084d740113067d3557ee25d392dd15173ceb6d3170aca863d9ec295cec41315b4857723e0e6505eae9428e75542f7b744bda32d20980fb08fdf0821b4c9b1913fd8c97b90283a76e49c0fff25cba862797f27f8b3240", @generic="c5f79a7f77aed9c134c280588843ca11b6580b71a2d7111b0a0b57f0a661c5d2bfe9b446562fec4eca76af63df8e9472f5dc5d94fefd12cf6fc9283a3c54c901e701fbf5dbfddbefd390b8"]}, @generic="24b1ba3b616ee15a2f2c9e49e52ac01a05157736d0b7241c8c3c63ae7d1eef6dc740c8b321c1b9d5aeffe3a3ebcd6f98404da4d17ba94413c3fd6f76b76368478d8672058c4f80d8aec606d775b7f944e054eb76261d6176ce23d9cdb89f646cc391fa307d0e9bcc68b0592885feff000aba5b7474112732554b05de595f10fa3ac4fe2b24d365ecf545c11b03f67acbb41767f1d63a47986efa3c4dc9ce61afbfd36b3f548f25b2cabb8f15b9e874891c69117ef15f915b151cad68f082", @generic="24fea0280a38f26e33b03827793dfd89bfc0bd4a5a084686cded16904d788b04e54b48c501d68e32d8fb9d22032c622ee50861ec0e0d1527ab05723d68d8f7abf62330ccc65486bdbd577b039e45e43de26e8f57fd0d955427822155412f057a311993ca51fb9b967d5c636dcc9b2af78bf2f2ce5bf264d168e2563410f4cc1732b73af9cd654bda620c89eace85a89643edd77b21c4"]}, 0x394}, 0x1, 0x0, 0x0, 0x48804}, 0x20000080) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:04:11 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:04:11 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 68) 10:04:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3128.213393] FAULT_INJECTION: forcing a failure. [ 3128.213393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3128.214838] CPU: 0 PID: 15133 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3128.215500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3128.216257] Call Trace: [ 3128.216551] dump_stack+0x107/0x167 [ 3128.216944] should_fail.cold+0x5/0xa [ 3128.217362] _copy_to_iter+0x264/0x12d0 [ 3128.217780] ? chacha_block_generic+0x13e/0x200 [ 3128.218289] ? chacha_permute+0x6f0/0x6f0 [ 3128.218740] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3128.219361] get_random_bytes_user+0x173/0x3b0 [ 3128.219828] ? get_random_u32+0x670/0x670 [ 3128.220311] ? wait_for_random_bytes+0x91/0xe0 [ 3128.220805] ? security_file_permission+0xb1/0xe0 [ 3128.221303] ? get_random_bytes_user+0x3b0/0x3b0 [ 3128.221824] random_read_iter+0x65/0x140 [ 3128.222265] io_read+0x2dc/0x11e0 [ 3128.222647] ? kiocb_done+0xc90/0xc90 [ 3128.223072] ? mark_lock+0xf5/0x2df0 [ 3128.223489] ? lock_chain_count+0x20/0x20 [ 3128.223930] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3128.224512] ? lock_acquire+0x197/0x470 [ 3128.224932] ? __lock_acquire+0xbb1/0x5b00 [ 3128.225353] io_issue_sqe+0x2e8a/0x77b0 [ 3128.225776] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3128.226288] ? SOFTIRQ_verbose+0x10/0x10 [ 3128.226698] ? lock_chain_count+0x20/0x20 [ 3128.227150] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3128.227665] ? io_connect+0x610/0x610 [ 3128.228048] ? lock_acquire+0x197/0x470 [ 3128.228452] ? find_held_lock+0x2c/0x110 [ 3128.228853] ? __fget_files+0x2cf/0x520 [ 3128.229241] ? lock_downgrade+0x6d0/0x6d0 [ 3128.229646] __io_queue_sqe+0x90/0x9d0 [ 3128.230046] ? io_issue_sqe+0x77b0/0x77b0 [ 3128.230445] ? __fget_files+0x2f8/0x520 [ 3128.230862] ? io_prep_rw+0x7f5/0x1050 [ 3128.231279] io_submit_sqes+0x44aa/0x8610 [ 3128.231700] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3128.232184] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3128.232711] ? lock_downgrade+0x6d0/0x6d0 [ 3128.233152] ? find_held_lock+0x2c/0x110 [ 3128.233602] ? io_submit_sqes+0x8610/0x8610 [ 3128.234066] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3128.234589] ? wait_for_completion_io+0x270/0x270 [ 3128.235120] ? rcu_read_lock_any_held+0x75/0xa0 [ 3128.235608] ? vfs_write+0x354/0xb10 [ 3128.236002] ? fput_many+0x2f/0x1a0 [ 3128.236442] ? ksys_write+0x1a9/0x260 [ 3128.236826] ? __ia32_sys_read+0xb0/0xb0 [ 3128.237265] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3128.237852] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3128.238390] do_syscall_64+0x33/0x40 [ 3128.238795] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3128.239327] RIP: 0033:0x7fd311e28b19 [ 3128.239744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3128.241668] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3128.242535] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3128.243277] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3128.244040] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3128.244805] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3128.245579] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:04:11 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x10) 10:04:11 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x1b, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:04:11 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 10:04:27 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:04:27 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x600000000000000) 10:04:27 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x6, r0, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)) r3 = dup2(0xffffffffffffffff, r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x40015) r4 = socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x2, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000001734a0001000000", @ANYRES32=r5], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$unix(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@private, @empty}, &(0x7f00000000c0)=0xc) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)=ANY=[@ANYBLOB="e2ff00000000000000008fd8", @ANYRES32=r1, @ANYBLOB="87000009000000000000006c6530004d48e0525b7ca56fc5f1d1e041871e9100baeb6ed2b6264c5381966fd4041144496edb9adfe8cb6b2a7d3c79751f0f9ffecdc6758d32db1570548b6a2f958274b382e27cc98f36075b3d169c6b09ea97d25d4aeb42c482c30ca82b35bb3f2082e4588624b181ac432e884bc48d64815487c089effb6b2f50986adc905e92334fe5d1c814a0addf12f2cf40008da8635c49377db0c4"]) ioctl$SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, 0x0) 10:04:27 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 69) 10:04:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:04:27 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r4, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 10:04:27 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x34, 0x0, &(0x7f00000005c0)) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020100ff010000000000000002000200845875eb180711363acfc5", @ANYRES32=r2, @ANYBLOB="040005000000000010000600000000002000050000000000"], 0x2c, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001940)=@broute={'broute\x00', 0x20, 0x6, 0x83c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001100], 0x0, &(0x7f0000000000), &(0x7f0000001100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000050000005f000000060074756e6c30000000000000000000000076657468305f746f5f6261746164760076657468315f746f5f687372000000007663616e300000000000000000000000bbbbbbbbbbbb00ffffffff00ffffffffffff000000ff00006e0000009e000000ce000000434f4e4e5345434d41524b00000000000000000000000000000000000000000008000000000000000100000000000000434f4e4e5345434d41524b0000000000000000000000000000000000000000000800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff02000000110000000000000088ca7663616e30000000000000000000000073797a6b616c6c65723100000000000065727370616e3000000000000000000062726964676530000000000000000000aaaaaaaaaabbff00ff00ffffffffffffffff0000ffff00009e0000001e0100004e020000706b74747970650000000000000000000000000000000000000000000000000008000000000000000600000000000000434c4153534946590000000000000000000000000000000000000000000000000800000000000000fe030000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a30000000000000000000000000000000000000000000000001d00000004d000000000000005345434d41524b000000000000000000000000000000000000000000000000000801000000000000010000008000000073797374656d5f753a6f626a6563745f723a6d6e745f743a733000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000010000000890d6e65747063693000000000000000000076657468305f746f5f626f6e640000007465616d5f736c6176655f310000000069703667726574617030000000000000bbbbbbbbbbbb000000ffff00aaaaaaaaaa27ffffff0000fff600000056010000a60100007265616c6d0000000000000000000000000000000000000000000000000000001000000000000000010000000500000000000000000000006e66616363740000000000000000000000000000000000000000000000000000280000000000000073797a3000000000000000000000000000000000000000000000000000000000020000000000000072656469726563740000000000000000000000000000000000000000000000000800000000000000fcffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3100000000000000000000000000000000000000000000000107000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000ffffffff010000000300000001000000600473797a5f74756e000000000000000000626174616476300000000000000000006d61637674617030000000000000000076657468315f746f5f627269646765000000000000000000ff0000013112074cbad400ff0000ff006e0000006e000000be00000049444c4554494d4552000000000000000000000000000000000000000000000028000000000000000000008073797a31000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000feffffff020000001100000020000000900073797a6b616c6c657231000000000000776730000000000000000000000000007369743000000000000000000000000076657468305f6d616376746170000000ffffffffffff0000ffff0000aaaaaaaaaabb0000ff0000009e0000009e000000ee00000063707500000000000000000000000000000000000000000000000000000000000800000000000000ffffff7f010000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a300000000000000000000000000000000000000000000000019d000000080000000000000009000000320000008864677265300000000000000000000000006272696467655f736c6176655f3100006d6163767461703000000000000000006d6163766c616e3000000000000000000000000000000000ff00ffff00000000000000ff000000ffde000000de0000000e010000706b747479706500000000000000000000000000000000000000000000000000080000000000000007000000000000006f776e65720000000000000000000000000000000000000000000000000000001800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="0000000000000000cdc6444954100000000000000000000000000000000000000000000043bd0d7cb8"]}, 0x8a5) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 10:04:27 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x48) 10:04:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:04:28 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xc00000000000000) [ 3144.704253] FAULT_INJECTION: forcing a failure. [ 3144.704253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3144.705573] CPU: 1 PID: 15172 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3144.706281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3144.707119] Call Trace: [ 3144.707399] dump_stack+0x107/0x167 [ 3144.707791] should_fail.cold+0x5/0xa [ 3144.708212] _copy_to_iter+0x264/0x12d0 [ 3144.708692] ? chacha_block_generic+0x13e/0x200 [ 3144.709169] ? chacha_permute+0x6f0/0x6f0 [ 3144.709591] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3144.710122] get_random_bytes_user+0x173/0x3b0 [ 3144.710583] ? get_random_u32+0x670/0x670 [ 3144.711028] ? wait_for_random_bytes+0x91/0xe0 [ 3144.711519] ? security_file_permission+0xb1/0xe0 [ 3144.712037] ? get_random_bytes_user+0x3b0/0x3b0 [ 3144.712534] random_read_iter+0x65/0x140 [ 3144.712983] io_read+0x2dc/0x11e0 [ 3144.713377] ? kiocb_done+0xc90/0xc90 [ 3144.713780] ? mark_lock+0xf5/0x2df0 [ 3144.714193] ? lock_chain_count+0x20/0x20 [ 3144.714632] ? stack_trace_consume_entry+0x160/0x160 [ 3144.715173] ? lock_acquire+0x197/0x470 [ 3144.715581] ? __lock_acquire+0xbb1/0x5b00 [ 3144.716028] io_issue_sqe+0x2e8a/0x77b0 [ 3144.716472] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3144.716963] ? SOFTIRQ_verbose+0x10/0x10 [ 3144.717339] ? lock_chain_count+0x20/0x20 [ 3144.717709] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3144.718204] ? io_connect+0x610/0x610 [ 3144.718560] ? lock_acquire+0x197/0x470 [ 3144.718918] ? find_held_lock+0x2c/0x110 [ 3144.719311] ? __fget_files+0x2cf/0x520 [ 3144.719674] ? lock_downgrade+0x6d0/0x6d0 [ 3144.720057] __io_queue_sqe+0x90/0x9d0 [ 3144.720437] ? io_issue_sqe+0x77b0/0x77b0 [ 3144.720813] ? __fget_files+0x2f8/0x520 [ 3144.721189] ? io_prep_rw+0x7f5/0x1050 [ 3144.721573] io_submit_sqes+0x44aa/0x8610 [ 3144.721989] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3144.722466] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3144.722919] ? lock_downgrade+0x6d0/0x6d0 [ 3144.723307] ? find_held_lock+0x2c/0x110 [ 3144.723710] ? io_submit_sqes+0x8610/0x8610 [ 3144.724128] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3144.724606] ? wait_for_completion_io+0x270/0x270 [ 3144.725060] ? rcu_read_lock_any_held+0x75/0xa0 [ 3144.725493] ? vfs_write+0x354/0xb10 [ 3144.725858] ? fput_many+0x2f/0x1a0 [ 3144.726217] ? ksys_write+0x1a9/0x260 [ 3144.726581] ? __ia32_sys_read+0xb0/0xb0 [ 3144.726986] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3144.727474] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3144.727978] do_syscall_64+0x33/0x40 [ 3144.728332] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3144.729908] RIP: 0033:0x7fd311e28b19 [ 3144.730371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3144.732192] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3144.732951] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3144.733745] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3144.734488] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3144.735171] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3144.735854] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:04:44 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x4c) 10:04:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r1 = fork() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x50, r2, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) r3 = gettid() ptrace$cont(0x18, r3, 0x6, 0x5) perf_event_open(&(0x7f0000001180)={0x5, 0x80, 0xb5, 0x80, 0x9, 0x4b, 0x0, 0x80, 0x190, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0xa2e7, 0xfffffffffffffffd}, 0x2084, 0x100, 0xfffffffc, 0x9, 0x3, 0x6e5e, 0x100, 0x0, 0x1, 0x0, 0x4}, r1, 0xf, r2, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) perf_event_open(&(0x7f0000001100)={0x3, 0x80, 0xff, 0x2, 0x40, 0x3, 0x0, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x5}, 0x10, 0xffffffff, 0x5, 0x7, 0x4, 0x8, 0x7, 0x0, 0xffffffff, 0x0, 0x6}, 0xffffffffffffffff, 0x2, r4, 0x2) 10:04:44 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1200000000000000) 10:04:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:04:44 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x2, 0x0, 0x0, 0x0) 10:04:44 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 70) 10:04:44 executing program 3: ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = socket$inet(0x2, 0x6, 0x7500000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000240)={0x3, 'syzkaller1\x00', {0xfffffffe}, 0x2}) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9}, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000440)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x1, 0x0, 0x1}, 0x7) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x1, 0x8c, 0xff, 0x0, 0x7, 0x89100, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000480), 0xb}, 0x80c, 0x10001, 0x1, 0x2, 0x81, 0x6, 0xfffc, 0x0, 0x4, 0x0, 0x81}, 0x0, 0x3, r5, 0x8) syz_io_uring_submit(r7, r2, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x5, 0x0, r3, &(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x20, 0x100, 0x1}, 0x8) 10:04:44 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) fsync(0xffffffffffffffff) ioctl$VT_WAITACTIVE(r1, 0x5607) r2 = gettid() pidfd_open(r2, 0x0) prlimit64(0x0, 0x1, &(0x7f00000015c0)={0x0, 0x3}, &(0x7f0000001600)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/tcp\x00') ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x7, 0x0, 0x400, 0x0, 0x5, "020d413cc96c2d23ccc5963c1b539e66b59a9f", 0x7}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) readv(r3, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000300)=""/231) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) readv(0xffffffffffffffff, 0x0, 0x30) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x5, 0x7f8, 0x9089}}) write(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/auth_rpcgss', 0x200, 0x0) unshare(0x48020200) [ 3160.751347] FAULT_INJECTION: forcing a failure. [ 3160.751347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3160.752736] CPU: 1 PID: 15199 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3160.753341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3160.754033] Call Trace: [ 3160.754271] dump_stack+0x107/0x167 [ 3160.754587] should_fail.cold+0x5/0xa [ 3160.754916] _copy_to_iter+0x264/0x12d0 [ 3160.755273] ? chacha_block_generic+0x13e/0x200 [ 3160.755675] ? chacha_permute+0x6f0/0x6f0 [ 3160.756029] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3160.756467] get_random_bytes_user+0x173/0x3b0 [ 3160.756885] ? get_random_u32+0x670/0x670 [ 3160.757252] ? wait_for_random_bytes+0x91/0xe0 [ 3160.757660] ? security_file_permission+0xb1/0xe0 [ 3160.758087] ? get_random_bytes_user+0x3b0/0x3b0 [ 3160.758490] random_read_iter+0x65/0x140 [ 3160.758838] io_read+0x2dc/0x11e0 [ 3160.759150] ? kiocb_done+0xc90/0xc90 [ 3160.759475] ? mark_lock+0xf5/0x2df0 [ 3160.759800] ? lock_chain_count+0x20/0x20 [ 3160.760165] ? stack_trace_consume_entry+0x160/0x160 [ 3160.760624] ? lock_acquire+0x197/0x470 [ 3160.760972] ? __lock_acquire+0xbb1/0x5b00 [ 3160.761351] io_issue_sqe+0x2e8a/0x77b0 [ 3160.761703] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3160.762154] ? SOFTIRQ_verbose+0x10/0x10 [ 3160.762509] ? lock_chain_count+0x20/0x20 [ 3160.762872] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3160.763330] ? io_connect+0x610/0x610 [ 3160.763673] ? lock_acquire+0x197/0x470 [ 3160.764013] ? find_held_lock+0x2c/0x110 [ 3160.764373] ? __fget_files+0x2cf/0x520 [ 3160.764739] ? lock_downgrade+0x6d0/0x6d0 [ 3160.765106] __io_queue_sqe+0x90/0x9d0 [ 3160.765446] ? io_issue_sqe+0x77b0/0x77b0 [ 3160.765810] ? __fget_files+0x2f8/0x520 [ 3160.766160] ? io_prep_rw+0x7f5/0x1050 [ 3160.766497] io_submit_sqes+0x44aa/0x8610 [ 3160.766882] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3160.767325] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3160.767739] ? lock_downgrade+0x6d0/0x6d0 [ 3160.768094] ? find_held_lock+0x2c/0x110 [ 3160.768450] ? io_submit_sqes+0x8610/0x8610 [ 3160.768847] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3160.769266] ? wait_for_completion_io+0x270/0x270 [ 3160.769681] ? rcu_read_lock_any_held+0x75/0xa0 [ 3160.770082] ? vfs_write+0x354/0xb10 [ 3160.770407] ? fput_many+0x2f/0x1a0 [ 3160.770721] ? ksys_write+0x1a9/0x260 [ 3160.771051] ? __ia32_sys_read+0xb0/0xb0 [ 3160.771403] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3160.771848] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3160.772290] do_syscall_64+0x33/0x40 [ 3160.772624] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3160.773062] RIP: 0033:0x7fd311e28b19 [ 3160.773388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3160.774949] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3160.775604] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3160.776208] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3160.776832] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3160.777438] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3160.778043] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:04:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:04:44 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x68) 10:04:44 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1800000000000000) 10:04:44 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) fsync(0xffffffffffffffff) ioctl$VT_WAITACTIVE(r1, 0x5607) r2 = gettid() pidfd_open(r2, 0x0) prlimit64(0x0, 0x1, &(0x7f00000015c0)={0x0, 0x3}, &(0x7f0000001600)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/tcp\x00') ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x7, 0x0, 0x400, 0x0, 0x5, "020d413cc96c2d23ccc5963c1b539e66b59a9f", 0x7}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) readv(r3, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000300)=""/231) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) readv(0xffffffffffffffff, 0x0, 0x30) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x5, 0x7f8, 0x9089}}) write(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/auth_rpcgss', 0x200, 0x0) unshare(0x48020200) 10:04:44 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000006c0)=""/211, 0xd3}, {&(0x7f0000000100)=""/75, 0x4b}, {&(0x7f00000007c0)=""/202, 0xca}, {&(0x7f00000002c0)=""/70, 0x46}, {&(0x7f00000005c0)=""/111, 0x6f}, {&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f0000000940)=""/84, 0x54}], 0x7, &(0x7f0000000a40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x160}, 0x40004061) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x90000, 0x27e}, 0x0, 0x0, 0x0, 0x0, 0x2}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="cc00000004000000090000010000000000000086435ab530e11edf361d4ea9fc5fe53696f0ab2362050d6c0c0b4cfddf153bcde619096ff3d0a848d4f8a85529f80c7f153c04f12bbec71ca03a65b92003000000000000006241f4553fcf8decc33704f1b52eb907d5a0a09ec070b5deb8431053b84d77373e2645e3efc1e3b87629e51cc6df0d6ee411163f5f4242ea9b8490bcf2cb82c656ae7cc3e70198ff4dc55515a7887eec022394efef13f5971430f26f74914cbc34739988ba89c8240e292b3a7f0a248400a5a3"]) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x40b, 0x7, 0x7f}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000bc0)="c76ce3b47d179226f12d5e288425e3f3350bc7e3120b3a812bd88fd381f101868f9b468ecf9da2a176aeef04b07a027501dd52546768129f63bde2d8a2cf644f4c38522b3ec9472d59260449be90d7ea990d232d4ad39de4e4826b6e59bcd5aad29d6d6a4bc21c42870110882992bf1ae1af519e22864a263f289f634a90767fac87500fc2ceb771e687c50180602256e582b41f32e92671df868d5a30bf561b09f5f8bba37bdcad79c96177a30f3982d6f2de50e68f290b301de1509fc9e6768975601289e79d6ae6ef588e6b8e5b149262a81a4e3e4f47969761a8da7abe1f40bb519c5a703b091c6ac873e5ded44c306156fe", 0xf4, r3) r4 = syz_io_uring_setup(0x55db, &(0x7f0000000640), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x2, &(0x7f0000000540)="c62387fe640d3f7b65532da8726e7c5f51000cc4c4ac8ce945c0d4e4f1d8e73d6eab0ddba87490bea15cadad06fd94249c0c0415486268d17723c760ac1c25c1e5314352fd6812ffab4ea23d96ece417e3f68e5261b0ae85ca905d1614661b5fd0bf26319a", 0x3, 0x0, 0x1, {0x3, r7}}, 0xf69) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x2000003) 10:04:44 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000440)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x1, 0x0, 0x1}, 0x7) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4007, @fd_index=0x4, 0x5, 0x80, 0x8c7, 0x0, 0x0, {0x1}}, 0xffffffc1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r7, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) sendmsg$unix(r7, &(0x7f0000000080)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000340)="68bc60833dd2bf6ab45380cc0bdb43c51619ada1e216f37ae13d2839b61864bb980f301dfd2757faced01ab04f353d7eef5376a852ff68476c1003b9eb37fd02570942e3c032", 0x46}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000480)="090d7a5c8078066ba71bb51d24033a7e4ed332eda1c983816c75468bbd5723436e23c564c4eaba5746b4c1d393b71c53b85b25ac5c014945232ddb55475a2045be5ccedc24497b305de43f148cb30382afb6f632f458b6c744b3f0c9a4f61f19d9c84826c5dd6c34b4ea02349717d2970ef2661f1d3bd54bed7ac1d91cf22942744c541c693d6ca609b7e521e5d2faa351a8855f1847abfdec229a11ee2749457c605ecf63343f9d14dc8c45b26b183ea35c5fc56669e5a2e45a023961c5b723fb05750984fc6f1e71e73b13767189a344024f7c061c43f7d9a7aae3a3b239a9970012abda38e2cbfca7918dfddc57b9314f5d708e52196b92", 0xf9}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000000580)="f85f1d44fe22598c99ac1292dec6c7f1bcf0a4c15eb38dd65bc059b748507f92fc17acafd9891c9303f504c764c9a58b3ebbd1a2b03f16d195105b0f9727c9d16c5a43adcc5032ebc2c80862274d8bb0111abd291e7eb887649c034debc26ff82abc0c647d58f236e47c3072cef57844cac7f677", 0x74}], 0x5, 0x0, 0x0, 0xa0}, 0x2000080) 10:04:44 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 71) 10:04:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:04:44 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x6c) 10:04:44 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1e00000000000000) 10:04:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:04:44 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x74) [ 3161.213765] FAULT_INJECTION: forcing a failure. [ 3161.213765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3161.215173] CPU: 0 PID: 15234 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3161.215877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3161.216751] Call Trace: [ 3161.217009] dump_stack+0x107/0x167 [ 3161.217409] should_fail.cold+0x5/0xa [ 3161.217783] _copy_from_user+0x2e/0x1b0 [ 3161.218174] iovec_from_user+0x141/0x400 [ 3161.218619] __import_iovec+0x67/0x590 [ 3161.219013] io_import_iovec+0x581/0x1120 [ 3161.219505] ? io_complete_rw+0x230/0x230 [ 3161.219915] ? kiocb_done+0x16b/0xc90 [ 3161.220289] io_read+0xe14/0x11e0 [ 3161.220740] ? kiocb_done+0xc90/0xc90 [ 3161.221112] ? mark_lock+0xf5/0x2df0 [ 3161.221515] ? lock_chain_count+0x20/0x20 [ 3161.221909] ? stack_trace_consume_entry+0x160/0x160 [ 3161.222384] ? lock_acquire+0x197/0x470 [ 3161.222756] ? __lock_acquire+0xbb1/0x5b00 [ 3161.223150] io_issue_sqe+0x2e8a/0x77b0 [ 3161.223616] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3161.224099] ? SOFTIRQ_verbose+0x10/0x10 [ 3161.224472] ? lock_chain_count+0x20/0x20 [ 3161.224878] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3161.225362] ? io_connect+0x610/0x610 [ 3161.225719] ? lock_acquire+0x197/0x470 [ 3161.226089] ? find_held_lock+0x2c/0x110 [ 3161.226473] ? __fget_files+0x2cf/0x520 [ 3161.226841] ? lock_downgrade+0x6d0/0x6d0 [ 3161.227228] __io_queue_sqe+0x90/0x9d0 [ 3161.227679] ? io_issue_sqe+0x77b0/0x77b0 [ 3161.228061] ? __fget_files+0x2f8/0x520 [ 3161.228431] ? io_prep_rw+0x7f5/0x1050 [ 3161.228813] io_submit_sqes+0x44aa/0x8610 [ 3161.229218] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3161.229679] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3161.230128] ? lock_downgrade+0x6d0/0x6d0 [ 3161.230512] ? find_held_lock+0x2c/0x110 [ 3161.230895] ? io_submit_sqes+0x8610/0x8610 [ 3161.231303] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3161.231837] ? wait_for_completion_io+0x270/0x270 [ 3161.232286] ? rcu_read_lock_any_held+0x75/0xa0 [ 3161.232736] ? vfs_write+0x354/0xb10 [ 3161.233083] ? fput_many+0x2f/0x1a0 [ 3161.233420] ? ksys_write+0x1a9/0x260 [ 3161.233773] ? __ia32_sys_read+0xb0/0xb0 [ 3161.234153] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3161.234636] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3161.235115] do_syscall_64+0x33/0x40 [ 3161.235549] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3161.236023] RIP: 0033:0x7fd311e28b19 [ 3161.236443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3161.238176] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3161.238880] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3161.239623] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3161.240282] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3161.240955] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3161.241612] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:05:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:05:01 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$KIOCSOUND(r1, 0x4b2f, 0x9) fstat(r0, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 10:05:01 executing program 4: signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a644", 0x2}], 0x1}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a644", 0x2}], 0x1}}, 0x0) connect$inet6(r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 10:05:01 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x6, 0x0, 0x0, 0x0) 10:05:01 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000040)={0x1, r8}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r9, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r9, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)="b21d05d270b062ff198f43261f5783df6e3f38dfae15a43c4caf290b8409c05991c8b7f895f740b50ea968dbb27945797979f4a1e83137a7825f694a67bca88ccca2ee2b503e65947798e0f1defa52cf7b08a55478b0bae8406d189fdcd85779bf05003c00ab1c9c9c4417a974e368a3e2e9725c7caba5b1f4166f246a24908e9340e32504aec543100b27d515e7f13a7044a7d5aee2f6d7911ed934ca785443b28969acc5b4d2e6f8e57a31d5cea496bff0d028", 0xb4}, {&(0x7f0000000480)="5704af80750c2717fab698a1ea046ff9bbcbc38a0df939b0c5c48b1a6c2bb0a179cc3a8b01784710b378836dcbe99163f29b332e2c2f1fd1b08fd31ea171c3f1c1fd96b666c8ef9f2eb53b0dfbea988ef7b905b089b19637ce48eaca669c7492e6af32d0ab8b21a4632c017ad6d7e0419c94b441602bd8ce4c001fbab3874004424b8e7d5b2f56d19b2a7d1e540be9cbc92f8b8965d1c6afe3ac5e3c833c436ba510a3d2a37f697e5af11547e54aca5ed46fbd18e21202acc92666f5c80275fa9c1c0c2617de64b1a4ecf1b773c63e8247ac00fb1a0c787925b158e5afa9b16970990d62daa08c", 0xe7}, {&(0x7f0000000580)="1d3fd12d413ff66bb1c1bdbc8886f77d3f3a6b17e74d05f539d4e03fda630ac79a5f30f2d25ae4f4da0a7ab6354e49eb1ad67cb842fe2fb4a75b5cb28c0229d466f1f81e48de456e5bcf7aba5f3d122a7337b2a23083e8c48c9641a0fbe12e2f6fca84b4ec9114c9ccb3674695880523232d494715a083e9e59e3162d4a1bd7c9a751c290d5fef76b2c4d27c86eff9bfdf6534f2a40a016aba2c5819fa", 0x9d}, {&(0x7f0000000040)="995e56e6e4bea829494d4b49b07b585a640988ace1617d0b817cd890527a6200b131ac349e42843553caf2fa0349ed9929f5f6fbef06aa8498c99cebd35b3d92de5e8ac0422a094584e8d99023de2a1ee192a0a4fde505a7164a62d7b40545c8a08335ee0e45e1087aff41d5f35b87cd4271b881e729806384", 0x79}, {&(0x7f0000000640)="140246fd7d7c3b163383e94a0ce248c4a77e46f439f6dcdc97844efb63ff759e46c4e28ace40db2b7e860f3adb7c7043a4c7726e7c3c9fdb141f6f64489099f30fa2f09b941ffc6674177bce3ebe6b104492a11fff985ca89c4395c44941bf8f5e903e9dc50e32b840d06b4674f3976a129a66489706a0cccb872b2a01b33c198d39687c2caa4fc65697a53499e75b77eaaa763c973b", 0x96}, {&(0x7f00000007c0)="a6bc3fe0b0153ae8de31936760f3203bd91a83bb0a2d6fc820c34ccb18cd20c684f2b705fe55149f6775ee1300cdd63c8c9a5fc5f9f475ba205c5c4d91e5cac4857597c3e0182f61be08a83d369e8970c71490317c1c288797b1a40524bf7859b45685db1d7eaa534d4c9c1527bc82e0bb993d7b6664a043de28acf2457eb011d09ff57024c1ad754c6a37acacbd1a5edf314ef67e0bed186c763a6f7ee98c94ee201c9db61dfd4f69648fad4d69e01a0a8b2125064c227a061f30d6ff37e3b37a0db5a21ffd46734f593b7e308a2f0281376fcec3f7f5de", 0xd8}, {&(0x7f0000000240)="7442c675b7708513a2d1a6246c3c6ecc3a8f25e8aa11f586f97c6e9b57a064dbb4de4c7f493e5b32cada87575919dae5061befbcaaec6f88f247f6aac3ee0254c1b0a708c1bec3ff21ec6d0110859c5dc2e742db7fb6faa57b", 0x59}], 0x7, &(0x7f0000000940)=[{0x68, 0x107, 0xffffffff, "8b1d13ef5c2299f6bba377c9886daebee50e2ac8aaba196db1c5e380eaedd3950c090c6ea3e99863d6b1585dbbdee9a94fcd1882f440e776910c23ab888b403206185237fc8170060a7c05c1da1a1624dd49b4e48b"}, {0x98, 0x101, 0x2, "47995956bff25d3516bda46cf8d275f79b1bde8b1059d737a70065ce500a9b6e0f73c39c6124c0049dac12156b679dc41a97ebe3a4c4ba4493325b0c22b3517c9b6f44613ebac0324a994f6d45fcc6ab609013144aebdfabea09d96a39081a753e16936f7d3e483bf8fbb145c197c50d9af036ebcce9fa38d97d63c48c0040b1b8c9b2d6543a"}, {0x48, 0x29, 0xfffffffd, "f2b957809b76ce336462b40d62abe0fc59b8f108156c1553ffa30e48098672903ce795fd99d25e31318bbc4f7045ac8f6efa4913a6dc4e80"}, {0x50, 0x88, 0x8, "78d48e6736637ba4d21fe2ae96efa8a4e1b7e9692ffb775ee25f3822ea052cfb8e0c5759debd98f047ca4650b2d905f57916a39348a88368d5"}, {0x68, 0x3a, 0x0, "a4023a3a7d1dc6ac28fad2b89a89df5ea6744dcfbde7ae0ca3d8ea76d764df3f4d6df7e22bc2263b0692353e589859f02ff1f040f0756a01e49f731a7a3179aa30faa1c883dc01341ce34817ad1064b34f6e583872ba85"}, {0x70, 0x103, 0x8, "7812f83295f93ba47aafbaed7d5e1c4236b70a0892c70d37b0807cc1a8b5fcb65b000a296920585e41a80998ddc3bc0a4308c3894b5f1f5831da78c75349a87948c9324c23578765b93d6bc43eee1773b7644d2148673ce0cd9fd665a50c"}, {0xa8, 0x6, 0x401, "7b0e3b895a2bc4f84bbd7f52d5dd5311c72380e54f0fbf834369d0c39d2f7776233feaea2ff14f9a6010bacf38f50f97e830bd24d1bc01fa6e66e8c0b055aa01c0d02326c7ef07d8ec93dbd8a596d249a0d11d7d20461d0659f2686f3a4dd6df03c80e6060af547773e8ec9d41512b707ef33d23f95c7cbc3c92ab75ce872c39cd703a24d7e047b846357bae772bb7ff27a2"}, {0xc8, 0x119, 0x91, "a2af5ee1c4daaa88fb25240d9efc9600be129b9e92421960d66912162a461889d31fc4ddff62752f01f44f776f66e603bfd1bb1ee2c9a267f44ce12ec253799496486de8449191e472437b770eba1d94ffaa74569128e84f4d35c811ad48a7ed999752adbae00e8d7194049a5c87d4e255f84cd28ed600285e285bffcbe2fdb6daacc9b92c96516562bf2652b2da4a10bfb45eb83d83bd8d2281261c5f2a15e5847e92314364001f3dce9f548542c521e44a3a"}], 0x3e0}, 0x0, 0x40010}, 0x5) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:05:01 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 72) 10:05:01 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x7a) 10:05:01 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2000000000000000) 10:05:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3178.145263] FAULT_INJECTION: forcing a failure. [ 3178.145263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3178.147068] CPU: 0 PID: 15257 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3178.147902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3178.148915] Call Trace: [ 3178.149250] dump_stack+0x107/0x167 [ 3178.149702] should_fail.cold+0x5/0xa [ 3178.150183] _copy_to_iter+0x264/0x12d0 [ 3178.150672] ? chacha_block_generic+0x13e/0x200 [ 3178.151242] ? chacha_permute+0x6f0/0x6f0 [ 3178.151752] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3178.152362] get_random_bytes_user+0x173/0x3b0 [ 3178.152934] ? get_random_u32+0x670/0x670 [ 3178.153432] ? wait_for_random_bytes+0x91/0xe0 [ 3178.154551] ? security_file_permission+0xb1/0xe0 [ 3178.155163] ? get_random_bytes_user+0x3b0/0x3b0 [ 3178.156323] random_read_iter+0x65/0x140 [ 3178.157333] io_read+0x2dc/0x11e0 [ 3178.157771] ? kiocb_done+0xc90/0xc90 [ 3178.158698] ? mark_lock+0xf5/0x2df0 [ 3178.159169] ? lock_chain_count+0x20/0x20 [ 3178.160179] ? stack_trace_consume_entry+0x160/0x160 [ 3178.160812] ? lock_acquire+0x197/0x470 [ 3178.161784] ? __lock_acquire+0xbb1/0x5b00 [ 3178.162314] io_issue_sqe+0x2e8a/0x77b0 [ 3178.163282] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3178.163922] ? SOFTIRQ_verbose+0x10/0x10 [ 3178.164908] ? lock_chain_count+0x20/0x20 [ 3178.165428] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3178.166697] ? io_connect+0x610/0x610 [ 3178.167166] ? lock_acquire+0x197/0x470 [ 3178.168131] ? find_held_lock+0x2c/0x110 [ 3178.168642] ? __fget_files+0x2cf/0x520 [ 3178.169608] ? lock_downgrade+0x6d0/0x6d0 [ 3178.170120] __io_queue_sqe+0x90/0x9d0 [ 3178.171071] ? io_issue_sqe+0x77b0/0x77b0 [ 3178.171582] ? __fget_files+0x2f8/0x520 [ 3178.172546] ? io_prep_rw+0x7f5/0x1050 [ 3178.173054] io_submit_sqes+0x44aa/0x8610 [ 3178.174083] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3178.174707] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3178.175876] ? lock_downgrade+0x6d0/0x6d0 [ 3178.176392] ? find_held_lock+0x2c/0x110 [ 3178.177427] ? io_submit_sqes+0x8610/0x8610 [ 3178.178489] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3178.179655] ? wait_for_completion_io+0x270/0x270 [ 3178.180267] ? rcu_read_lock_any_held+0x75/0xa0 [ 3178.181397] ? vfs_write+0x354/0xb10 [ 3178.181858] ? fput_many+0x2f/0x1a0 [ 3178.182747] ? ksys_write+0x1a9/0x260 [ 3178.183235] ? __ia32_sys_read+0xb0/0xb0 [ 3178.184216] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3178.184853] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3178.186108] do_syscall_64+0x33/0x40 [ 3178.186572] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3178.187817] RIP: 0033:0x7fd311e28b19 [ 3178.188275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3178.192787] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3178.193722] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3178.195476] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3178.197254] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3178.198991] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3178.200790] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:05:01 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x300) 10:05:01 executing program 4: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x20a, 0x0, 0x0, 0x0, 0x1839}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5", 0x23) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400001a3304863d6191a1cef7d42f26005d00210e0000000097cf8650301d6d4b"], 0x14}}, 0x0) r2 = syz_open_dev$vcsu(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7781, &(0x7f0000000500)={0x0, 0x69e9, 0x10, 0x0, 0x3aa, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x101000, 0x80) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000000000a00000000000000ff010000000000000000000000000001000000ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000ff01000000000000000000000000000100"/202], 0x110) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000180)={0x2, 0x7e850000, 0x5, 0x0, 0x0, [{{r0}, 0x8e}, {{}, 0x2}, {{r3}, 0x20f}, {{r4}, 0x800}, {{r0}, 0x1ff}]}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r1, r5, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000000c0)=0x1) unshare(0x48020200) 10:05:01 executing program 7: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038679de021f8c801000000000000009d1fa459d07100000000bc7ae631f7a54805ff070000000000093393d0e1c7391515c7ab7c8e0600", 0x27}, 0xffffff93, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000005c0)='{N$\x0f[\xc9UY\xb1y\x9a\x03\r\xc8y8\xb5\x15\xb2\xa6\x11\x9e\xaf\xd3bj\xd0\xee0%`\xf7\xd6\xf3\xf3\x03\x8da7\xa6\x95\x85\xbc\xfc\xae%~V\x8c\x90C\x13\xba\x1c0q3\tET(_\xa8\xbb\x9c\xd9e\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffc) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) add_key$user(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000080)="a3", 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000780)='dns_resolver\x00', &(0x7f0000000740)=@chain={'key_or_keyring:', r1}) request_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolve\xc8C', 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x4000001) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x530a, &(0x7f0000000580)={0x92, 0x1, 0x3, 0x5}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:05:01 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2400000000000000) 10:05:01 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 73) 10:05:01 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 3178.537417] FAULT_INJECTION: forcing a failure. [ 3178.537417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3178.539303] CPU: 1 PID: 15285 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3178.540983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3178.542212] Call Trace: [ 3178.542681] dump_stack+0x107/0x167 [ 3178.543024] should_fail.cold+0x5/0xa [ 3178.543449] _copy_to_iter+0x264/0x12d0 [ 3178.544263] ? chacha_block_generic+0x13e/0x200 [ 3178.545315] ? chacha_permute+0x6f0/0x6f0 [ 3178.545701] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3178.546165] get_random_bytes_user+0x173/0x3b0 [ 3178.546959] ? get_random_u32+0x670/0x670 [ 3178.547875] ? wait_for_random_bytes+0x91/0xe0 [ 3178.548993] ? security_file_permission+0xb1/0xe0 [ 3178.550052] ? get_random_bytes_user+0x3b0/0x3b0 [ 3178.551095] random_read_iter+0x65/0x140 [ 3178.551994] io_read+0x2dc/0x11e0 [ 3178.552901] ? kiocb_done+0xc90/0xc90 [ 3178.553739] ? mark_lock+0xf5/0x2df0 [ 3178.554559] ? lock_chain_count+0x20/0x20 [ 3178.555453] ? stack_trace_consume_entry+0x160/0x160 [ 3178.556408] ? lock_acquire+0x197/0x470 [ 3178.557305] ? __lock_acquire+0xbb1/0x5b00 [ 3178.558231] io_issue_sqe+0x2e8a/0x77b0 [ 3178.559103] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3178.560331] ? SOFTIRQ_verbose+0x10/0x10 [ 3178.561231] ? lock_chain_count+0x20/0x20 [ 3178.562142] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3178.563288] ? io_connect+0x610/0x610 [ 3178.564211] ? lock_acquire+0x197/0x470 [ 3178.565099] ? find_held_lock+0x2c/0x110 [ 3178.565991] ? __fget_files+0x2cf/0x520 [ 3178.566859] ? lock_downgrade+0x6d0/0x6d0 [ 3178.567770] __io_queue_sqe+0x90/0x9d0 [ 3178.568719] ? io_issue_sqe+0x77b0/0x77b0 [ 3178.569638] ? __fget_files+0x2f8/0x520 [ 3178.570494] ? io_prep_rw+0x7f5/0x1050 [ 3178.571157] io_submit_sqes+0x44aa/0x8610 [ 3178.572142] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3178.573334] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3178.574445] ? lock_downgrade+0x6d0/0x6d0 [ 3178.575381] ? find_held_lock+0x2c/0x110 [ 3178.576149] ? io_submit_sqes+0x8610/0x8610 [ 3178.577110] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3178.578174] ? wait_for_completion_io+0x270/0x270 [ 3178.579229] ? rcu_read_lock_any_held+0x75/0xa0 [ 3178.580335] ? vfs_write+0x354/0xb10 [ 3178.581165] ? fput_many+0x2f/0x1a0 [ 3178.581968] ? ksys_write+0x1a9/0x260 [ 3178.582803] ? __ia32_sys_read+0xb0/0xb0 [ 3178.583696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3178.584943] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3178.586078] do_syscall_64+0x33/0x40 [ 3178.586898] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3178.588023] RIP: 0033:0x7fd311e28b19 [ 3178.588950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3178.593104] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3178.594772] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3178.596398] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3178.597829] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3178.599381] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3178.600548] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:05:24 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0xc, 0x0, 0x0, 0x0) 10:05:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:05:24 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x442, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0xa}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') perf_event_open(&(0x7f00000014c0)={0x1, 0x80, 0x28, 0x56, 0x9, 0x40, 0x0, 0x2607, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f2, 0x2, @perf_config_ext={0x10b, 0x401}, 0x18, 0x7, 0x10000000, 0x2, 0x4, 0x0, 0x9, 0x0, 0x401, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x8) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001980)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x53000, 0x0) openat(r2, &(0x7f0000000340)='./file0/../file0\x00', 0x800, 0x8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r3, 0x0, 0x0, 0x401, 0x0) getresuid(&(0x7f00000015c0), &(0x7f0000001800), &(0x7f0000001840)) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x300020, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@euid_lt={'euid<', r4}}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_eq}, {@audit}]}}) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x301000, &(0x7f0000000440)=ANY=[]) unshare(0x48020200) 10:05:24 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2a00000000000000) 10:05:24 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x500) 10:05:24 executing program 7: ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x988c0) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) pwrite64(r1, &(0x7f0000000180)="990845932412c40ba9a2a889ab73898e3466e8ac998a2b8e35455f37f459d0a89ddf8393fec303da4179ed21e3be48408b1491cf07ce675a50c961e52901c1515d4f22a82fa3f099a27b3f5e190c9b201173f932e8a48945237d1c94c39164f9dfd0bdcfd8f17738db4ca55b669f4c6d92fe1890b9864d", 0x77, 0x5) syz_open_procfs(0x0, &(0x7f0000000100)='net\x00') r5 = getpgid(0xffffffffffffffff) perf_event_open(0x0, r5, 0x1, 0xffffffffffffffff, 0x0) prlimit64(r5, 0x0, &(0x7f0000000300)={0x7, 0x2}, &(0x7f0000000340)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x10, 0x0, &(0x7f0000001100)) socket$inet_tcp(0x2, 0x1, 0x0) openat(r0, &(0x7f0000000280)='./file0\x00', 0x202580, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000500)) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000380)={'nat\x00', 0x0, 0x0, 0x0, [0xf2e00000, 0x3ff, 0x5, 0x2, 0x4], 0x2, &(0x7f00000002c0)=[{}], 0x0, [{}, {}]}, 0x98) 10:05:24 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x6adb, &(0x7f0000000040)={0x0, 0x88e1, 0x1, 0x1, 0x1c, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r5, r2, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x4000, @fd, 0x9, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:05:24 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 74) 10:05:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3200.887985] FAULT_INJECTION: forcing a failure. [ 3200.887985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3200.889640] CPU: 1 PID: 15311 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3200.890218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3200.890915] Call Trace: [ 3200.891146] dump_stack+0x107/0x167 [ 3200.891467] should_fail.cold+0x5/0xa [ 3200.891792] _copy_to_iter+0x264/0x12d0 [ 3200.892141] ? chacha_block_generic+0x13e/0x200 [ 3200.892547] ? chacha_permute+0x6f0/0x6f0 [ 3200.892896] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3200.893967] get_random_bytes_user+0x173/0x3b0 [ 3200.894354] ? get_random_u32+0x670/0x670 [ 3200.894722] ? wait_for_random_bytes+0x91/0xe0 [ 3200.895120] ? security_file_permission+0xb1/0xe0 [ 3200.895530] ? get_random_bytes_user+0x3b0/0x3b0 [ 3200.895940] random_read_iter+0x65/0x140 [ 3200.896284] io_read+0x2dc/0x11e0 [ 3200.896589] ? kiocb_done+0xc90/0xc90 [ 3200.897891] ? mark_lock+0xf5/0x2df0 [ 3200.898214] ? lock_chain_count+0x20/0x20 [ 3200.898574] ? stack_trace_consume_entry+0x160/0x160 [ 3200.899021] ? lock_acquire+0x197/0x470 [ 3200.899367] ? __lock_acquire+0xbb1/0x5b00 [ 3200.899730] io_issue_sqe+0x2e8a/0x77b0 [ 3200.900084] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3200.900528] ? SOFTIRQ_verbose+0x10/0x10 [ 3200.900871] ? lock_chain_count+0x20/0x20 [ 3200.901254] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3200.901696] ? io_connect+0x610/0x610 [ 3200.902034] ? lock_acquire+0x197/0x470 [ 3200.902375] ? find_held_lock+0x2c/0x110 [ 3200.902737] ? __fget_files+0x2cf/0x520 [ 3200.903086] ? lock_downgrade+0x6d0/0x6d0 [ 3200.903441] __io_queue_sqe+0x90/0x9d0 [ 3200.903776] ? io_issue_sqe+0x77b0/0x77b0 [ 3200.905214] ? __fget_files+0x2f8/0x520 [ 3200.905558] ? io_prep_rw+0x7f5/0x1050 [ 3200.905893] io_submit_sqes+0x44aa/0x8610 [ 3200.906278] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3200.907338] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3200.907748] ? lock_downgrade+0x6d0/0x6d0 [ 3200.908102] ? find_held_lock+0x2c/0x110 [ 3200.908461] ? io_submit_sqes+0x8610/0x8610 [ 3200.908832] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3200.909263] ? wait_for_completion_io+0x270/0x270 [ 3200.909685] ? rcu_read_lock_any_held+0x75/0xa0 [ 3200.910079] ? vfs_write+0x354/0xb10 [ 3200.910396] ? fput_many+0x2f/0x1a0 [ 3200.910716] ? ksys_write+0x1a9/0x260 [ 3200.911039] ? __ia32_sys_read+0xb0/0xb0 [ 3200.911391] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3200.911841] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3200.912278] do_syscall_64+0x33/0x40 [ 3200.913683] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3200.914122] RIP: 0033:0x7fd311e28b19 [ 3200.914438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3200.915987] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3200.916629] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3200.917250] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3200.917858] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3200.918454] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3200.919058] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:05:24 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x600) 10:05:24 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3000000000000000) 10:05:24 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a644", 0x2}], 0x1}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_batadv\x00', {0x3}, 0x2}) 10:05:24 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000040)={0x1, r5}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x7f, 0x0, 0x3f, 0x6, 0x0, 0x24000000000, 0x8, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x8}, 0x8, 0x8, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, 0x3, 0x0, 0x7}, r5, 0x2, 0xffffffffffffffff, 0xa) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:05:24 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 75) 10:05:24 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/102, 0x66}], 0x2, 0x8, 0x6aa12b08) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BLKRRPART(r0, 0x125f, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/213, 0xd5}], 0x1) dup2(r3, r2) socket$inet6_udplite(0xa, 0x2, 0x88) readv(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f0000000580)=""/88, 0x58}], 0x2) ioctl$SG_IO(r4, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x1040) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, &(0x7f0000000340)={&(0x7f0000000500)=""/126, 0x7e}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fork() ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 10:05:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:05:25 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x12, 0x0, 0x0, 0x0) [ 3202.110318] FAULT_INJECTION: forcing a failure. [ 3202.110318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3202.111508] CPU: 0 PID: 15342 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3202.112146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3202.112910] Call Trace: [ 3202.121187] dump_stack+0x107/0x167 [ 3202.121529] should_fail.cold+0x5/0xa [ 3202.121887] _copy_from_user+0x2e/0x1b0 [ 3202.122256] iovec_from_user+0x141/0x400 [ 3202.122635] __import_iovec+0x67/0x590 [ 3202.123003] io_import_iovec+0x581/0x1120 [ 3202.123392] ? io_complete_rw+0x230/0x230 [ 3202.123777] ? kiocb_done+0x16b/0xc90 [ 3202.124135] io_read+0xe14/0x11e0 [ 3202.124471] ? kiocb_done+0xc90/0xc90 [ 3202.124828] ? mark_lock+0xf5/0x2df0 [ 3202.128790] ? lock_chain_count+0x20/0x20 [ 3202.129209] ? stack_trace_consume_entry+0x160/0x160 [ 3202.129690] ? lock_acquire+0x197/0x470 [ 3202.130066] ? __lock_acquire+0xbb1/0x5b00 [ 3202.130461] io_issue_sqe+0x2e8a/0x77b0 [ 3202.130838] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3202.131324] ? SOFTIRQ_verbose+0x10/0x10 [ 3202.131699] ? lock_chain_count+0x20/0x20 [ 3202.132086] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3202.132570] ? io_connect+0x610/0x610 [ 3202.135164] ? lock_acquire+0x197/0x470 [ 3202.137262] ? find_held_lock+0x2c/0x110 [ 3202.137646] ? __fget_files+0x2cf/0x520 [ 3202.138014] ? lock_downgrade+0x6d0/0x6d0 [ 3202.138401] __io_queue_sqe+0x90/0x9d0 [ 3202.138768] ? io_issue_sqe+0x77b0/0x77b0 [ 3202.139150] ? __fget_files+0x2f8/0x520 [ 3202.139521] ? io_prep_rw+0x7f5/0x1050 [ 3202.139885] io_submit_sqes+0x44aa/0x8610 [ 3202.140291] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3202.140750] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3202.145248] ? lock_downgrade+0x6d0/0x6d0 [ 3202.145648] ? find_held_lock+0x2c/0x110 [ 3202.146047] ? io_submit_sqes+0x8610/0x8610 [ 3202.146479] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3202.146948] ? wait_for_completion_io+0x270/0x270 [ 3202.147417] ? rcu_read_lock_any_held+0x75/0xa0 [ 3202.147863] ? vfs_write+0x354/0xb10 [ 3202.148185] ? fput_many+0x2f/0x1a0 [ 3202.148496] ? ksys_write+0x1a9/0x260 [ 3202.148800] ? __ia32_sys_read+0xb0/0xb0 [ 3202.149185] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3202.149670] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3202.150147] do_syscall_64+0x33/0x40 [ 3202.150497] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3202.150970] RIP: 0033:0x7fd311e28b19 [ 3202.151316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3202.153039] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3202.153769] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3202.154477] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3202.155180] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3202.155862] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3202.156557] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:05:42 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x18, 0x0, 0x0, 0x0) 10:05:42 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x700) 10:05:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:05:42 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 76) 10:05:42 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3600000000000000) 10:05:42 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000040)={0x1, r8}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r9, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x8, 0x0, &(0x7f0000000040)="82fbed802a85cf5964a420016eaff3582821fe16f67c35ffb4b15600b19e811a3e1e50fc4faf17c2feabd8e65f15af6a72c01419f2035663d09a00ebdd395820134f5c34063bf609169d6772bf42204a399971e03a1c5fd872cf8097", 0x80000001, 0x0, 0x1, {0x1}}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:05:42 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1ff, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmsg$unix(r2, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) fallocate(r2, 0x0, 0xffff, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000240)=""/61, 0x3d}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x3294}}, 0x100) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) timerfd_create(0x5, 0x800) syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000080)=@buf={0x4d, &(0x7f0000000280)="7097b5c5e1c21a34fb24622f41e828eda44c7f07e67c7918ad22520c6b03476433d9f995b6d455c7862fc4555467471dbdede0afe70d9d1e5a4c9c16ca2fd78af88f0fb11ec8d4f890ced81628"}) dup2(r3, r5) 10:05:42 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x54, &(0x7f0000000180)=[{0x6, 0xad, 0x0, 0x7ffc0000}]}) rt_sigsuspend(0x0, 0x0) [ 3218.826904] FAULT_INJECTION: forcing a failure. [ 3218.826904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3218.828084] CPU: 1 PID: 15371 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3218.828725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3218.829501] Call Trace: [ 3218.829751] dump_stack+0x107/0x167 [ 3218.830087] should_fail.cold+0x5/0xa [ 3218.830483] _copy_to_iter+0x264/0x12d0 [ 3218.830854] ? chacha_block_generic+0x13e/0x200 [ 3218.831269] ? chacha_permute+0x6f0/0x6f0 [ 3218.831706] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3218.832148] get_random_bytes_user+0x173/0x3b0 [ 3218.832583] ? get_random_u32+0x670/0x670 [ 3218.832943] ? wait_for_random_bytes+0x91/0xe0 [ 3218.833410] ? security_file_permission+0xb1/0xe0 [ 3218.833817] ? get_random_bytes_user+0x3b0/0x3b0 [ 3218.834214] random_read_iter+0x65/0x140 [ 3218.834605] io_read+0x2dc/0x11e0 [ 3218.834911] ? kiocb_done+0xc90/0xc90 [ 3218.835233] ? mark_lock+0xf5/0x2df0 [ 3218.835623] ? lock_chain_count+0x20/0x20 [ 3218.835982] ? stack_trace_consume_entry+0x160/0x160 [ 3218.836464] ? lock_acquire+0x197/0x470 [ 3218.836804] ? __lock_acquire+0xbb1/0x5b00 [ 3218.837184] io_issue_sqe+0x2e8a/0x77b0 [ 3218.837581] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3218.838020] ? SOFTIRQ_verbose+0x10/0x10 [ 3218.838412] ? lock_chain_count+0x20/0x20 [ 3218.838766] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3218.839207] ? io_connect+0x610/0x610 [ 3218.839609] ? lock_acquire+0x197/0x470 [ 3218.839944] ? find_held_lock+0x2c/0x110 [ 3218.840292] ? __fget_files+0x2cf/0x520 [ 3218.840673] ? lock_downgrade+0x6d0/0x6d0 [ 3218.841027] __io_queue_sqe+0x90/0x9d0 [ 3218.841431] ? io_issue_sqe+0x77b0/0x77b0 [ 3218.841779] ? __fget_files+0x2f8/0x520 [ 3218.842119] ? io_prep_rw+0x7f5/0x1050 [ 3218.842500] io_submit_sqes+0x44aa/0x8610 [ 3218.842871] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3218.843289] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3218.843766] ? lock_downgrade+0x6d0/0x6d0 [ 3218.844114] ? find_held_lock+0x2c/0x110 [ 3218.844507] ? io_submit_sqes+0x8610/0x8610 [ 3218.844878] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3218.845350] ? wait_for_completion_io+0x270/0x270 [ 3218.845770] ? rcu_read_lock_any_held+0x75/0xa0 [ 3218.846162] ? vfs_write+0x354/0xb10 [ 3218.846521] ? fput_many+0x2f/0x1a0 [ 3218.846830] ? ksys_write+0x1a9/0x260 [ 3218.847151] ? __ia32_sys_read+0xb0/0xb0 [ 3218.847544] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3218.847984] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3218.848492] do_syscall_64+0x33/0x40 [ 3218.849191] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3218.851810] RIP: 0033:0x7fd311e28b19 [ 3218.852126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3218.853767] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3218.854458] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3218.855051] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3218.855691] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3218.856285] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3218.856921] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:05:42 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0xa00) 10:05:42 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000001540)='net/rt_cache\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x1, 0x2, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x73, 0x4, @perf_bp={0x0}, 0x9, 0x0, 0x0, 0x1, 0xf, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r1, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x6259, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 10:05:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:05:42 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3c00000000000000) 10:05:42 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 77) [ 3219.182248] FAULT_INJECTION: forcing a failure. [ 3219.182248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3219.183675] CPU: 0 PID: 15395 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3219.184384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3219.185177] Call Trace: [ 3219.185522] dump_stack+0x107/0x167 [ 3219.185890] should_fail.cold+0x5/0xa [ 3219.186332] _copy_to_iter+0x264/0x12d0 [ 3219.186753] ? chacha_block_generic+0x13e/0x200 [ 3219.187214] ? chacha_permute+0x6f0/0x6f0 [ 3219.187668] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3219.188168] get_random_bytes_user+0x173/0x3b0 [ 3219.188651] ? get_random_u32+0x670/0x670 [ 3219.189042] ? wait_for_random_bytes+0x91/0xe0 [ 3219.189568] ? security_file_permission+0xb1/0xe0 [ 3219.190027] ? get_random_bytes_user+0x3b0/0x3b0 [ 3219.190526] random_read_iter+0x65/0x140 [ 3219.190904] io_read+0x2dc/0x11e0 [ 3219.191242] ? kiocb_done+0xc90/0xc90 [ 3219.191642] ? mark_lock+0xf5/0x2df0 [ 3219.191993] ? lock_chain_count+0x20/0x20 [ 3219.192441] ? stack_trace_consume_entry+0x160/0x160 [ 3219.192915] ? lock_acquire+0x197/0x470 [ 3219.193376] ? __lock_acquire+0xbb1/0x5b00 [ 3219.193772] io_issue_sqe+0x2e8a/0x77b0 [ 3219.194148] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3219.194685] ? SOFTIRQ_verbose+0x10/0x10 [ 3219.195060] ? lock_chain_count+0x20/0x20 [ 3219.195492] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3219.195975] ? io_connect+0x610/0x610 [ 3219.205170] ? lock_acquire+0x197/0x470 [ 3219.205546] ? find_held_lock+0x2c/0x110 [ 3219.205929] ? __fget_files+0x2cf/0x520 [ 3219.206305] ? lock_downgrade+0x6d0/0x6d0 [ 3219.206693] __io_queue_sqe+0x90/0x9d0 [ 3219.207060] ? io_issue_sqe+0x77b0/0x77b0 [ 3219.207445] ? __fget_files+0x2f8/0x520 [ 3219.207818] ? io_prep_rw+0x7f5/0x1050 [ 3219.208186] io_submit_sqes+0x44aa/0x8610 [ 3219.208595] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3219.209057] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3219.209526] ? lock_downgrade+0x6d0/0x6d0 [ 3219.209907] ? find_held_lock+0x2c/0x110 [ 3219.210292] ? io_submit_sqes+0x8610/0x8610 [ 3219.210710] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3219.211158] ? wait_for_completion_io+0x270/0x270 [ 3219.211608] ? rcu_read_lock_any_held+0x75/0xa0 [ 3219.212037] ? vfs_write+0x354/0xb10 [ 3219.212382] ? fput_many+0x2f/0x1a0 [ 3219.212720] ? ksys_write+0x1a9/0x260 [ 3219.213202] ? __ia32_sys_read+0xb0/0xb0 [ 3219.213641] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3219.214175] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3219.214701] do_syscall_64+0x33/0x40 [ 3219.215094] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3219.215617] RIP: 0033:0x7fd311e28b19 [ 3219.215962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3219.217859] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3219.218678] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3219.219427] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3219.220129] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3219.220828] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3219.221594] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:05:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:05:57 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) 10:05:57 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x1e, 0x0, 0x0, 0x0) 10:05:57 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 78) 10:05:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f5, 0x20, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8840}, 0x40) ftruncate(r1, 0xfff) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a0011cd00000000fdff0000000000000002"], 0x1c}}, 0x0) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1) r2 = getpid() sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000002300)={0x2320, 0x3b, 0x20, 0x70bd2c, 0x25dfdbfe, {0x1c}, [@generic="8b9a7905ad15267ca9428993983c9aeeb0691ee44288f72a2803cc0653927ba755d1abbefd", @typed={0x8, 0x32, 0x0, 0x0, @pid}, @typed={0x8, 0x8c, 0x0, 0x0, @u32=0xe3a}, @nested={0x1108, 0x10, 0x0, 0x1, [@generic="49a1366a5f5e5a1feceb7d06dfcb80c27362aada56528e0f76bea4d44932b2d84aa3e367c00fd44d10e3c04e19dee063917301b0cfdac9e79d6f1135c9d67d922f65e901f3f9b5ec865d1d27640c4cb7c57aa4d129a8bc7f77f3afae9faff147bfc198e70a665c8628fe65a1c126858820b5d3", @generic="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", @typed={0xe, 0x68, 0x0, 0x0, @str='/dev/zero\x00'}, @generic="802b96f37c8c894832c647a016593097abdb0a31c1ce459d97e743a00b2c8a3cc70afb3e82fc2e92c12e0d119b89543ebb6121b69de332938da7d1bda4ea119b6b620bf21fe3141b7aab7c08b946df393dba651d2d8e128d645ac854ee155263ef8df48a9269b3960bf6284a812b670965238865bb4a68230221f75ba163aec2a4"]}, @generic="6cf7e853114de5a56c498c3b40b5f7a63729dddd0be762c6de02ad58ca80f2084f873ca8f9d59ca4fa03fcf4969ed2c802dc360b98922dac58e9a85ba20d438a39894255c35ef6d3", @nested={0xac, 0x1, 0x0, 0x1, [@typed={0xc, 0x3c, 0x0, 0x0, @u64=0x3f}, @generic="119ce6d07bc1ca4d45d447b02337c6d4b9e5a4ca509f100f606ef07da5ff99eeedca28ba6814ec95fb8b47fa5b5a7181b26bee1d25f9716feab0c54694231f68dcc0f87dbba69c4a34134ba0fbc084d6d3ccf402a9f6fea36a0827bbc5529d784afcbad96f27a8f39d7bb99f5a9847421687ba7ec1434dbcbd0988ff5b84c3a8503e98deb5d56e347d510eac29b596d2ae21843478f7e2b6b2e0d9f9"]}, @nested={0x100c, 0x21, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @ipv4=@multicast1}, @generic="9842b2b6cf05e72b377c66818c602c800ba1272086c178d7bc1fdd390e84728d5ac88cfdf3752c1ca77f7439e122760e10e5f020c924d1d76accac2f456379d21ffaa43f63d6788e250703ec1739dbd854f79872c28ca9595f1b0710b570a234994513bdc8f301803ebd94adb91396fd52422919adc6ce62b18117536bb147f763a7ffda1bb52ef5f2633ae783f88e4a76d7b51f5c15e3fae035c50189723066dd4aa447991616666a85747687e5c8fab24effb63288b762d9e8cb7ce57063a3347ce6ae80e7fbaea073ad339689f2051b015aa07043fc90ef338c06a2d9f4586a620f123db93b501f27ecdce6552f95c5e9456d81cb4c06adb2426237e7ed1d449656a6adc3cb4844d50c3a90f7e25c2eaacf16119759d6418adf550e81ebbee9bf383217ae0bfa032328435c96ea2ed7c3eb8f1fead0ce7f56411940a6412d7a5851e8091d351fbc1039f6bb80a32ecac632ce1c41e25ff1ece6059970045ccb5d4720af6a857ef604160b0ca90640066247eff4d38c93aeea167e5515b5a440dc7cb25c038a2c5984e5ef8d9dabead5cd4a8a98952d16255a0bbf0bcad5edb295d93bd0f214800b7d1b957d4a3d7eacb291546ad0ddea20502a3fc726f5d85a203e7d5c3221a64fa41186e5fa5df89fbfc4e109da587d610c61cb598ffa62efccc6a1349462646cb02b0ac149763e8d7eaeaf0efe3e1224ec1bef86dd54d300cd110132d368c550a96c1cd25e8fe1bbc050f601460b0e5fcc908afcd4459e193733ce72955a02268022be0be4ef1f3b3bcee45ccc44dea824a85dbb5479a1e0b79de41e81ad7176762a1d143d08c369a75a98ab991b2bf1bae5ccbbea203c717c7c02d3036d19dc576d7266c5f110fef27ecde22841429ed33d258f7f37610893603b6421f034132323f8a0cc23c68a31fd45d72ddaf4f905b32a520770cbe57a0cae611124521d284623f9e7a32ae44b089bc7794b749c128dd1061f7fd6c3bf7059486b511ba8b4fde4525e23481a833aec432a95d22767f87c372cf1c0a09e9adf9638d04be09cf3e5c3e7da713aa5eb22b6188e439932b2b47df2af548831c547c62565a8979862a2d44fd70621ff84448aea3641ad1c26528d3501c35da16ed0ddfcf5ac810c002614efd9609f74d7a4126e264a35b386c598ff3c5a824a4e0b9e971d640595008eb2ebe93e8b26241faf6b885a24b9d96104025b4c5abf4d075b77e26000fef575c49d464fe640938d9a2ddaafa4bcac7bf45184dbcf3625957bed234465c6169abc7aad0e25f3227f2635ef708a553c649fe2fa9e1fdb1907630d4c970433fc6faaf6363a91184829f04371153e032ee093fd436e882c6bb8054df84178b21d9a7b0d5f85390bae642dd4ff0005bf3253fa08026324963697f0ce57ee570c57861ae317c78eeb293275c44ef5a5ec5cfeb099d58c0713e0bc14cb999ac1b5c82fffba705b061a853017a30f85f8c2d82ac9ca273127607ce076ab9086e6bfa20b4cea2ea083228278ab367956b8e2d859b60e51c92d66150c3875d393fa60bd470f0f3ecad830fa5d0adcaa41502184876b06bee90c9c2757f21730d90491d6abbf94e4160daab54f4e6685412c9188f149093c60861a0f0523f42f002fc77ab860e371c0169d1b8161c0cccc690e23d2ef351b8dc6c2d84000d3a665e6b47351a1a8a663457974c4a07e383e52e9ffb759cb32a7b70e1a1c2d5e5d4d6cab7694a6840d426106fa4de1478f9614b5d7ad19b26f6819994613851e09132329b8d3201dcf8d9522dc0dc4cbc251f30b36a98d8aaefc429a9a8a449a166c1eec1055e654c3b9d70faea736603f35ad4e86cf4f7e91341b7674ce9c69bfb83af6a62b88ec1242b4614cc00a0b7eb7edde3bda383eabce3f1d0119b17b815af3abc89b41907f8b6e1989cc25c7b96cc5ac153a3abf63c7fb9e77c1826f8541dab3c459d6420ce0e990e1b1412959def52be363e1c15841b87c7b934b4312064e2db79de0236adcd45ebe2174493f64b3b58d13b79d3df30b64a9b9197e25d1616a9cd6bed873a6b3ebe187ab892ecb1fc0157754fdf500239381cf3b82de393c475fc355a01a19e84a9cb449070d020a19276ae62b60dd79869b763b048bf55c2b509428c7c1955b3b186c48758e93695f8d57b61abcee69ae29401a1162c684f07be1a0c4c440158ac38aceb5af55704ccca3522ac34ce642c8b4f52ea1b7e8cae902ddaf04ca3fc9daa1a39b69c4776d49a0338b5037d9eaf83c8f62f9d6c3446556be4f0639b9685077dd007026474faa7834161d869f4ed69e97be617a228edc14f4aa1a69e181ce8f6492f57d04b2dd8d24fe7433406670575dd1af409d9837304e0f62dc643bf526c9c49acae926876eab32ed9742ea6bf69747dd3ac471fd9c22f667162405c2b396c3c075f3e6f108dd7dc28043db42d49fdc62335cf56cd50c381302abd9e3cf36c0c40bcac538a8cd9100a133f750c0a978073cc985d1874e58eb767a9407fd3607d0f50380fe3fc943548757347c1940efdb7547dcb02f005c7d0267dd72cabf5350b4b084a7d5add26c7c4f2fa7f1e82b031c01e7e073285f6c2452e090a9fb85c4b66dc07802b44d171d6386dc60bfacaf8cee30406abe0218e559b6f7bd0851b3ede1faeef3e06d4c48d453f39411f46c8e1257a490cdf8d0f4964df60cfed6f40ec9a95d2c9386df35df554f6af8234a2f74aadd6579364128958d277b63dc889c1fd9736f6ef9dda1fa6554a6a14a1f8d76b2c1c9ff2bbe5bb1cbb790bd50b4a2e7daab375b85bd63b59bc644231b059a28b740c84bea5dac10248d84fdf9ba585e3f594d96647acb7e266c2e1248c71239826219cc376dd500f119c509e9ddbbf2579889248c4bf6db244e217c5bd9325fa057bc183dea087239bb28a26ebafa355d54042cf55da196e8acae4d9e8d8cfc0f47fc75c7ec54c6ebe3f0f8f52e0d362952c79e883de5aaed57cbad877a21e2bd54a0c976e273587cf225d54e3f18eb7c88f6847bf1819383f612ce6b1838dd5cdc8eb7a5ad61d398dec14ac04adddbdffbf6ba9044b7375e02ec3aa08edcd9b2ab3adb97501fffbaf7f20662e8c29cbe4a11f0ca6e1a128ecab6dd5cb24ce1842f31bf753397094adc32a7127166dc202af6df1cb25daa876a4e4f1fcbd630c4eea0e276ef9ee4842b2bd61899094d064464c6bf1e9e12817cea55ad3957f1956fa75df840de07744c36f3ac13b138c0f00e4cb9cfb0c06ce8b00ce623a22ceff4ba7f8ba36ffc9dd7e5e53cd1cc1950a93539dabd2ee3b50e5b0405a116f0a132603c40f7087a79b8e26f11a9585235b8158e75691f4b17ab8d690032f79208b1a01f8affb87ab2eb8ed37e7c7ea2e0fc1ee41efd39a7d5953314b0c387f59cab8853027e585e064db6661f1fc8bc853189612421fc917a89c7ed4ddd4cc4bc53235626b49798c808fd71ff56fb9d52b46087f2b4b4a5dc1bb79fb6eed6f2dd28091409afc8d10a4cd207914a9347cf77109f0cbe07ebfddfed2714a183bd81b0f8efb01149aba1946825442e947f8ef08226c1accff434ef234f21470eb32b6bbe9b07e8b32b3afcdfc7de4a59306505dea03b993a435c1aee81123a8963fa89ef390a15807c77fda501c0890b7cd8274f403cee580bc2e2fa01ead7fa835918f51f9787ce5270390c55be5d005649efc9c5b60c762ee7a8cb2b3723e2dab44e844cfc4b6a1065dcb57646bc244f2b91d52d6b80dbdcc9d367eaacb0db1ef99d145bcf26707363fd38a1ceaaf9e549a0d87db0a314410bb59a54f3ab1cd80481a6514d78e8e8756b82bc1b5b13751683f2ac940c5e85ef94b584eb2039b8f2f27ed669650d309801f005deceda527ad4ac84058a434bc81d1b3d20c927f0235e2fb64c6e919fc9be29ae72f17c63b9786b88346749a8ad8ecf08b32007462ac9cb1977e0ac8aeb27f68637e3e4ccfe3d5c880922fb42f5f0da3b792b2bdd6097c554d4d2a385208fc200f27917a98ef1690cec67c008e6c54cc5cc96bacf6b790ac630dbd3dd36eeb9139bf42500c7bedfb53d369a4fce5b8eb98f154f96c6f04cc1069513ea7b1d9c783ee85ba3cbc39a3d1bad0bd6f915e89c99e9e91443e61161d0db7c79b4aeb8a4bb78ca2bc82ed7ef19fd0a2681be013d43e59a9b18a9dd1974b81e8efaee24acfd4bfd519019101cba6dc4ff9302d482ef13ee1b26b7a37cac4c8610707d6733016ac21ab410d79dd4a30de2c6cb15a1c966c376fe0228ae025ee94a997e833a5de985ad21adbf53d849ff0c2890ac778bbeb638b6ddcf923ccbff11b0abffce5faebe59fb8b50bece2b8688a5a3c6ac750ed6c2f407516538d1f3068ec7f86c850d72fb557136d212dbbda0640eb6d6a27637985a86e1191d3513629c4feb90f3611648bfeda0cc72ffcf08cc5a3dda5aa9a7506c8659e69df161d44cad226d03e846b49ba591885b41d97005699fafb2c74b562cbbfda5539c2982d39e17a925a465c23b92264e5029e63f5bafafa37bb5fb2344bd4e6f76e74f7b5f8e13bf9b433ce48ae16f9325ebe70537c51a5bcfe026b2a015650c67257e29dc48781b3f136219adfce50efd87294fe4d76713e4dc89bbb7c86ba6c4441770e0ff6ce44bc24b0d17d77fd852179ff5ff34d277e579c1892ec8fe0dccc0317577aa4dc8d39f34cdbca989639e9a50efa56530ebee9866b04c7a61ba24dc5c1e8995a8a57b4f615097a18c57ef7b1dbc23a9051935adfd965984278340a37a875f8ebc28c71edaf011c50e158166dec1f06c579eb1faa840118a0717ad1e89bb2fc2e075be3f75a68dc80e6309993457c527e99c982fc5a74b61fa655afec6f9ffc76a9228c971d94796c7e90d13a510472063e440df73d13c4559572924061c2d15c24a97a0b6c3e123738ba510361ed7ee47a2d5ebd903d4d7a2752939d66223d33d58432b84f1763b5381b972fb773fc5e412052827a6ffbf5eb6e97900ddfe9d7b238bae0851ea8fb784a3ce6a992fe13db0cae65d64b7f4f0f49170a699e323e0d0c3e3ca52a23ee4b97a90c0c5774c2d3cdbc1bb5b845f2536b025abc16c0c993155b0b31bc02417355e31bf23e99f36710c3ec66053bf508fb5d9c6b73aa7e46202bb5a1f4419d8ffcc40afa3180c0648e77d5791cde0574ae181788e6cef3ab74d7054a3cb6248d54333a72e5ef66e558495026aaedf2d4634fd9fc21ebd936fa90b2a1b1881330c40189f2b07b59d0c085f62cb5f28afe51f2075425f33b15745562833bedc11cb56f92cd2776bf01df33ff122493b0a107d06e483ccf95b4b8b1c9f75a8665ffdb602a9dbccc282ef208f81b1ac73e0a61ee3f4cf16566e0ab76aeb6239260dafdfd0b95c8dae40f7d987d24d0f38fe2e6bf34aca2743a1d8f306cbe845268716df7875de5ffd7fb0b1e9966b67084b4cdef9ba9c0df0676d4f3edb69576a6e22bed9758f98d4207d0ede6c6ae32ccadb7a75a19f2256838234584cdd38d397a2a755cec5ec0d1fc9dbc34589e74227a4c0feb5274e65d4d9e71b4a133a5744f6e532701ef49cda2850b320a11d2d1c6db19f5130c4079ce9a5e6e6990b3b361dc252b9c36c24d6c91da6a2849f3f0473b0bb9fffbac3de652ae35074916e3e314cfde165aeb7d16351ed9739bdc5f4bfeae0b45c9558e0ae5d69e57eea589e14a9b15da9aab595f47a50c3ebd6a3ccbafc7dfba8a33654abb99169c947745dedbac3f33cf07a3aaeea2b3b27a8927d37d3e6ede7714ff9d7988f4ab47182c4a33ea212"]}, @generic="cd09a0bfe79bb150b5db98b29c56c3db35da0ca6bb8a04beda70f962f2026c9677e4da28b620589cbeb6732c14f7ab2c163057fa9bb16eaae50fd0815f064d6991bc03d128c728124eefb1e9ccdde2ada615e8c8ccfca23580c32d737ba2af9ba277cf735f8df41b90f3dc2a8dcd30d903cee1c534637b9e70c23bd0fb79a8286b4639585bcaebf6880af36b5086d88578c5e69e783fd1b4605eb80bc00cc6e282741d54e9b820b2c48c4e55e86e1ed3a690639b069b37f2910f135303ad65445fd3945d", @typed={0x8, 0x14, 0x0, 0x0, @pid=r2}]}, 0x2320}, 0x1, 0x0, 0x0, 0x1}, 0x4800) 10:05:57 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x13, 0x0, &(0x7f0000001d80)) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000080)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x3, @mcast2, 0x40}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)='O', 0x1}], 0x1}, 0x10044001) recvfrom$inet6(r2, &(0x7f0000001700)=""/4099, 0x1003, 0xcd48, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xa44e, @mcast2, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x2f, 0x20040000) 10:05:57 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xffffffff00000000) 10:05:57 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x102401, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x540a, 0x3) sendfile(r3, r4, &(0x7f0000000080)=0x5, 0x8362) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:05:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3234.597561] FAULT_INJECTION: forcing a failure. [ 3234.597561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3234.600603] CPU: 1 PID: 15409 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3234.602424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3234.604486] Call Trace: [ 3234.605125] dump_stack+0x107/0x167 [ 3234.606072] should_fail.cold+0x5/0xa [ 3234.607088] _copy_to_iter+0x264/0x12d0 [ 3234.608086] ? chacha_block_generic+0x13e/0x200 [ 3234.609303] ? chacha_permute+0x6f0/0x6f0 [ 3234.610365] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3234.611623] get_random_bytes_user+0x173/0x3b0 [ 3234.612918] ? get_random_u32+0x670/0x670 [ 3234.614087] ? wait_for_random_bytes+0x91/0xe0 [ 3234.615643] ? security_file_permission+0xb1/0xe0 [ 3234.616851] ? get_random_bytes_user+0x3b0/0x3b0 [ 3234.618075] random_read_iter+0x65/0x140 [ 3234.619087] io_read+0x2dc/0x11e0 [ 3234.619972] ? kiocb_done+0xc90/0xc90 [ 3234.620932] ? mark_lock+0xf5/0x2df0 [ 3234.621912] ? lock_chain_count+0x20/0x20 [ 3234.622957] ? stack_trace_consume_entry+0x160/0x160 [ 3234.624215] ? lock_acquire+0x197/0x470 [ 3234.625211] ? __lock_acquire+0xbb1/0x5b00 [ 3234.626393] io_issue_sqe+0x2e8a/0x77b0 [ 3234.627394] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3234.628697] ? SOFTIRQ_verbose+0x10/0x10 [ 3234.629766] ? lock_chain_count+0x20/0x20 [ 3234.630796] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3234.632080] ? io_connect+0x610/0x610 [ 3234.633038] ? lock_acquire+0x197/0x470 [ 3234.634083] ? find_held_lock+0x2c/0x110 [ 3234.635112] ? __fget_files+0x2cf/0x520 [ 3234.636097] ? lock_downgrade+0x6d0/0x6d0 [ 3234.637140] __io_queue_sqe+0x90/0x9d0 [ 3234.638176] ? io_issue_sqe+0x77b0/0x77b0 [ 3234.639198] ? __fget_files+0x2f8/0x520 [ 3234.640207] ? io_prep_rw+0x7f5/0x1050 [ 3234.641188] io_submit_sqes+0x44aa/0x8610 [ 3234.642333] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3234.643578] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3234.644775] ? lock_downgrade+0x6d0/0x6d0 [ 3234.645853] ? find_held_lock+0x2c/0x110 [ 3234.646861] ? io_submit_sqes+0x8610/0x8610 [ 3234.647939] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3234.649136] ? wait_for_completion_io+0x270/0x270 [ 3234.650436] ? rcu_read_lock_any_held+0x75/0xa0 [ 3234.651585] ? vfs_write+0x354/0xb10 [ 3234.652524] ? fput_many+0x2f/0x1a0 [ 3234.653495] ? ksys_write+0x1a9/0x260 [ 3234.654449] ? __ia32_sys_read+0xb0/0xb0 [ 3234.655465] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3234.656755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3234.658076] do_syscall_64+0x33/0x40 [ 3234.659011] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3234.660317] RIP: 0033:0x7fd311e28b19 [ 3234.661208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3234.665957] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3234.667843] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3234.669687] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3234.671482] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3234.673237] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3234.675436] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:05:58 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x4000) 10:05:58 executing program 4: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000540)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext, 0x1, 0x4, 0x1002, 0x5, 0x7, 0x0, 0xd395}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x40, @dev}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @loopback}, 0x155, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) creat(&(0x7f0000000240)='./file0\x00', 0x49) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc244, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x2, 0x6}, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x2, 0xffff, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) r3 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000080000000100000000e6ff000000000000c43414c3000000"], 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="00001b0000ce7c00cd97d723f5bd14b2e26fa82a4f7f8945ae13f8c51ab684c8e62ebeef10817a8a57bfa1f641e5af396f4e2ca45aff190445d871fb52abcb68036e9988c1755e35e7a09934208d28305ed2fcca68b61e9c1c98fd525244f8e4b4a0e7fe6bb4", @ANYRESOCT=r3, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004800) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0xfffffffffffffffe, 0xf4, 0xfffffffffffffff9}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000000c0)={0x0, 0x34, 0x8000000000}) 10:05:58 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xffffffffffffffff) 10:05:58 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 79) 10:05:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x4000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000010000000000000000015e643242ac3f7600dcdb55546acc8635e75ad7e7a188e0a638f63211f93e7ba3adbcc396e94116405033745376bd4e22d842a1f1b461bb347954ac0e19d305459988a60364946ab8d50bc59861f2cab6d8b6d4f4c4250973b0ca262aa843255dcdf276cde2ea", @ANYRES32=0x0, @ANYBLOB='\f\x00'/12], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="177f97b28df9c604d70513be1c265d9e4f414e6eb8cb5c785fc2142b071cd78f679ced6fde70e42ed7ee9f02fd46ba3728fdf9a6a43dbab5dc7a6ce2ee35074f16b7cffdc900da5cad75994153a9256371dd99421322df942f5966227507c335fd62b98bd19cfd73dc197324097c984b0811312aa1c77d4296fda181f1ce014df90d000000", @ANYRESHEX=r1, @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000001e00)=ANY=[@ANYRES16=r1, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="084a1bfa8e04368c00fdb2000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1610}, 0x1, 0x0, 0x0, 0x20000}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8000) r2 = fsmount(0xffffffffffffffff, 0x1, 0xc) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x2f) fork() r3 = fork() capget(&(0x7f0000000380)={0x20071026, r3}, &(0x7f00000003c0)={0x4b, 0x3f, 0x8000, 0x4, 0x1, 0x5}) fork() syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000380)=ANY=[], 0xa) r4 = openat$incfs(r2, &(0x7f0000000200)='.pending_reads\x00', 0x600300, 0x80) copy_file_range(r4, &(0x7f0000000240)=0xfff, r0, &(0x7f0000000280)=0x400, 0x2, 0x0) fork() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) setpgid(0x0, r5) ioprio_get$pid(0x2, r5) 10:05:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x24, 0x0, 0x0, 0x0) [ 3235.259178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 3235.304346] FAULT_INJECTION: forcing a failure. [ 3235.304346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3235.305442] CPU: 1 PID: 15437 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3235.306023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3235.306711] Call Trace: [ 3235.306943] dump_stack+0x107/0x167 [ 3235.307254] should_fail.cold+0x5/0xa [ 3235.307583] _copy_from_user+0x2e/0x1b0 [ 3235.307922] iovec_from_user+0x141/0x400 [ 3235.308270] __import_iovec+0x67/0x590 [ 3235.308609] io_import_iovec+0x581/0x1120 [ 3235.308966] ? io_complete_rw+0x230/0x230 [ 3235.309473] ? kiocb_done+0x16b/0xc90 [ 3235.309809] io_read+0xe14/0x11e0 [ 3235.310190] ? kiocb_done+0xc90/0xc90 [ 3235.310517] ? mark_lock+0xf5/0x2df0 [ 3235.310838] ? lock_chain_count+0x20/0x20 [ 3235.311201] ? stack_trace_consume_entry+0x160/0x160 [ 3235.311637] ? lock_acquire+0x197/0x470 [ 3235.312095] ? __lock_acquire+0xbb1/0x5b00 [ 3235.312501] io_issue_sqe+0x2e8a/0x77b0 [ 3235.312996] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3235.313476] ? SOFTIRQ_verbose+0x10/0x10 [ 3235.313912] ? lock_chain_count+0x20/0x20 [ 3235.314290] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3235.314953] ? io_connect+0x610/0x610 [ 3235.315283] ? lock_acquire+0x197/0x470 [ 3235.315723] ? find_held_lock+0x2c/0x110 [ 3235.316165] ? __fget_files+0x2cf/0x520 [ 3235.316667] ? lock_downgrade+0x6d0/0x6d0 [ 3235.317028] __io_queue_sqe+0x90/0x9d0 [ 3235.317517] ? io_issue_sqe+0x77b0/0x77b0 [ 3235.317879] ? __fget_files+0x2f8/0x520 [ 3235.318385] ? io_prep_rw+0x7f5/0x1050 [ 3235.318785] io_submit_sqes+0x44aa/0x8610 [ 3235.319171] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3235.319685] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3235.320365] ? lock_downgrade+0x6d0/0x6d0 [ 3235.320716] ? find_held_lock+0x2c/0x110 [ 3235.321065] ? io_submit_sqes+0x8610/0x8610 [ 3235.321470] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3235.321881] ? wait_for_completion_io+0x270/0x270 [ 3235.322292] ? rcu_read_lock_any_held+0x75/0xa0 [ 3235.322685] ? vfs_write+0x354/0xb10 [ 3235.323006] ? fput_many+0x2f/0x1a0 [ 3235.323316] ? ksys_write+0x1a9/0x260 [ 3235.323638] ? __ia32_sys_read+0xb0/0xb0 [ 3235.323985] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3235.324425] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3235.324861] do_syscall_64+0x33/0x40 [ 3235.325179] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3235.325636] RIP: 0033:0x7fd311e28b19 [ 3235.325965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3235.327496] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3235.328135] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 10:05:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3235.328730] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3235.329367] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3235.329963] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3235.330616] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:05:58 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x4800) 10:05:58 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000004}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="de441f900000000001000a80680707b1b500"]) io_uring_enter(r4, 0x34bb, 0xabea, 0x1, &(0x7f0000000080)={[0x10000]}, 0x8) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 3235.350460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3235.524554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3235.873458] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 3235.878205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3235.904472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:06:18 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x1, r4}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xd4e}}, './file0\x00'}) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r0, 0x9, 0x0, 0x6, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000400)=""/205, &(0x7f0000000500)=0xcd) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:06:18 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x2a, 0x0, 0x0, 0x0) 10:06:18 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x5, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x10, 0x1}) r1 = socket$inet(0x2, 0xa, 0x0) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000180), 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x4a4300, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) sendfile(r2, r3, 0x0, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2085583fe21ee6c7, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x8010, r4, 0x60f09000) dup3(r1, r0, 0x0) 10:06:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:06:18 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x4c00) 10:06:18 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x61, 0x30103) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x703, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x53}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r3, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r3, 0x0) 10:06:18 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 80) 10:06:18 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000040)={0x1, r7}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r8, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r8, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fed000/0x13000)=nil, 0x13000, 0x10, 0x1}, 0x2) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:06:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:06:18 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x6800) [ 3255.011217] FAULT_INJECTION: forcing a failure. [ 3255.011217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3255.012402] CPU: 1 PID: 15474 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3255.013084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3255.013888] Call Trace: [ 3255.014153] dump_stack+0x107/0x167 [ 3255.014503] should_fail.cold+0x5/0xa [ 3255.014892] _copy_to_iter+0x264/0x12d0 [ 3255.015293] ? chacha_block_generic+0x13e/0x200 [ 3255.015746] ? chacha_permute+0x6f0/0x6f0 [ 3255.016149] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3255.016630] get_random_bytes_user+0x173/0x3b0 [ 3255.017085] ? get_random_u32+0x670/0x670 [ 3255.017497] ? wait_for_random_bytes+0x91/0xe0 [ 3255.017963] ? security_file_permission+0xb1/0xe0 [ 3255.018426] ? get_random_bytes_user+0x3b0/0x3b0 [ 3255.019029] random_read_iter+0x65/0x140 [ 3255.019457] io_read+0x2dc/0x11e0 [ 3255.020005] ? kiocb_done+0xc90/0xc90 [ 3255.020669] ? mark_lock+0xf5/0x2df0 [ 3255.021315] ? lock_chain_count+0x20/0x20 [ 3255.022215] ? stack_trace_consume_entry+0x160/0x160 [ 3255.023096] ? lock_acquire+0x197/0x470 [ 3255.023783] ? __lock_acquire+0xbb1/0x5b00 [ 3255.024512] io_issue_sqe+0x2e8a/0x77b0 [ 3255.025203] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3255.025769] ? SOFTIRQ_verbose+0x10/0x10 [ 3255.026112] ? lock_chain_count+0x20/0x20 [ 3255.026470] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3255.026911] ? io_connect+0x610/0x610 [ 3255.027240] ? lock_acquire+0x197/0x470 [ 3255.027577] ? find_held_lock+0x2c/0x110 [ 3255.027927] ? __fget_files+0x2cf/0x520 [ 3255.028264] ? lock_downgrade+0x6d0/0x6d0 [ 3255.028619] __io_queue_sqe+0x90/0x9d0 [ 3255.028955] ? io_issue_sqe+0x77b0/0x77b0 [ 3255.029310] ? __fget_files+0x2f8/0x520 [ 3255.029667] ? io_prep_rw+0x7f5/0x1050 [ 3255.030005] io_submit_sqes+0x44aa/0x8610 [ 3255.030379] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3255.030802] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3255.031215] ? lock_downgrade+0x6d0/0x6d0 [ 3255.031565] ? find_held_lock+0x2c/0x110 [ 3255.031915] ? io_submit_sqes+0x8610/0x8610 [ 3255.032290] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3255.032702] ? wait_for_completion_io+0x270/0x270 [ 3255.033113] ? rcu_read_lock_any_held+0x75/0xa0 [ 3255.033531] ? vfs_write+0x354/0xb10 [ 3255.033848] ? fput_many+0x2f/0x1a0 [ 3255.034154] ? ksys_write+0x1a9/0x260 [ 3255.034476] ? __ia32_sys_read+0xb0/0xb0 [ 3255.034819] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3255.035256] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3255.035688] do_syscall_64+0x33/0x40 [ 3255.036000] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3255.036433] RIP: 0033:0x7fd311e28b19 [ 3255.036748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3255.038293] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3255.038930] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3255.039530] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3255.040128] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3255.040722] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 10:06:18 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',dfltgid=', @ANYRESHEX, @ANYBLOB=',posixacl,loose,version=9p2000.u,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,fowner=', @ANYRESDEC, @ANYBLOB="2c646f6e745f686173682c6465666366696e65645f752c6d6561737572652c736d61636b66736861743d272c27412c7365636c6162656c2c7053723d3030303030303030303030303030303030303531e1f76566636f6e746578743d757365725f752c61707072616973652c00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x34, 0x0, &(0x7f00000005c0)) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020100ff010000000000000002000200845875eb180711363acfc5", @ANYRES32=r6, @ANYBLOB="040005000000000010000600000000002000050000000000"], 0x2c, 0x4) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40001, &(0x7f0000000480)={[{}, {@gid}, {@huge_never}, {@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x32, 0x34, 0x30, 0x33, 0x37, 0x37, 0x35, 0x2c]}}}}, {@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x36, 0x37, 0x39, 0x32, 0x0, 0x33, 0x70]}}, {@size={'size', 0x3d, [0x34, 0x32, 0x50]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x33, 0x74, 0x78, 0x0, 0x33, 0x37, 0x33, 0x31]}}, {@huge_never}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_appraise}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', r4}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@euid_lt={'euid<', r6}}]}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 3255.041318] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:06:18 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 81) 10:06:18 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x119c00, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x81, 0x4, 0x9, 0x0, 0x20, 0x4018, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x6de3, 0x2}, 0x200, 0x1f, 0x3, 0x2, 0x7889, 0x4, 0x1000, 0x0, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00\x00\x00'], 0x14}}, 0x0) read(r0, &(0x7f0000000100)=""/153, 0x99) 10:06:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:06:18 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x1, r3}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="7c8efcc40aac5f77f972fe9297f08da87e77c6bfb6c99beeecaa40d34a5c74ba95018894426a20a8d3946f9d142f4b4f3d9475cec95c0bdec0f6d63e40cfd1b4e506172ee86bd7d6e049025c476a30bbd1716f1e8995ee7a6cebc67e5f7d23a68c6f8ee4904c3835cad303174971aaa72446f982ffba7d0163cfe7238e5ecfea05afca5f2b555e368eedf2492178a1921d0c1fc935dca7e1818977d191330aa4d689bf1dd7dca81fb740adfc997cfe086017f386ce7f7a40f3d3d242682e4b4ac6c36c7c9d736144318036d02c8f62b13a667c778940363ce43eaee0c24356133704984fcb4c216348978a69f67fcd8591c0aa", 0xf3, 0x8094, 0x1, {0x0, r5}}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r5}}, 0x3) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2000, @fd, 0x0, 0x8000, 0xfffffff7, 0x14, 0xffedd2aa3af622fc, {0x1, r5}}, 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0xbb040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3fffffffd}, 0xad06fa8269c698ac, 0x0, 0x5, 0x0, 0x400}, 0x0, 0xf, r6, 0x3) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:06:18 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x3db7, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x80000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, 0x66, 0xf01, 0x0, 0x0, {}, [@generic="901e51d4cae5c6b87d41bbc341"]}, 0x24}}, 0x0) eventfd2(0x800, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) connect$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x2, @any, 0x4, 0x2}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0600faff2200000028bd7000fbdbdf251d00000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000810}, 0x4000810) sendfile(r2, r1, &(0x7f0000000340)=0x5, 0x28000) socket$inet_tcp(0x2, 0x1, 0x0) [ 3255.492770] FAULT_INJECTION: forcing a failure. [ 3255.492770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3255.494593] CPU: 0 PID: 15500 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3255.495329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3255.496143] Call Trace: [ 3255.496413] dump_stack+0x107/0x167 [ 3255.496773] should_fail.cold+0x5/0xa [ 3255.497203] _copy_to_iter+0x264/0x12d0 [ 3255.497966] ? chacha_block_generic+0x13e/0x200 [ 3255.498475] ? chacha_permute+0x6f0/0x6f0 [ 3255.498881] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3255.499409] get_random_bytes_user+0x173/0x3b0 [ 3255.499832] ? get_random_u32+0x670/0x670 [ 3255.500291] ? wait_for_random_bytes+0x91/0xe0 [ 3255.500726] ? security_file_permission+0xb1/0xe0 [ 3255.501217] ? get_random_bytes_user+0x3b0/0x3b0 [ 3255.501993] random_read_iter+0x65/0x140 [ 3255.502415] io_read+0x2dc/0x11e0 [ 3255.502740] ? lock_chain_count+0x20/0x20 [ 3255.503184] ? kiocb_done+0xc90/0xc90 [ 3255.503535] ? mark_lock+0xf5/0x2df0 [ 3255.503883] ? lock_chain_count+0x20/0x20 [ 3255.504317] ? mark_held_locks+0x9e/0xe0 [ 3255.504695] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3255.505246] ? asm_sysvec_call_function_single+0x12/0x20 [ 3255.506149] ? trace_hardirqs_on+0x5b/0x180 [ 3255.506551] ? asm_sysvec_call_function_single+0x12/0x20 [ 3255.507107] ? __lock_acquire+0xbb1/0x5b00 [ 3255.507502] io_issue_sqe+0x2e8a/0x77b0 [ 3255.507876] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3255.508406] ? SOFTIRQ_verbose+0x10/0x10 [ 3255.508782] ? lock_chain_count+0x20/0x20 [ 3255.509214] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3255.510083] ? io_connect+0x610/0x610 [ 3255.513991] ? lock_acquire+0x197/0x470 [ 3255.514430] ? find_held_lock+0x2c/0x110 [ 3255.514813] ? __fget_files+0x2cf/0x520 [ 3255.515227] ? lock_downgrade+0x6d0/0x6d0 [ 3255.515614] __io_queue_sqe+0x90/0x9d0 [ 3255.515979] ? io_issue_sqe+0x77b0/0x77b0 [ 3255.516405] ? __fget_files+0x2f8/0x520 [ 3255.516776] ? io_prep_rw+0x7f5/0x1050 [ 3255.517187] io_submit_sqes+0x44aa/0x8610 [ 3255.517943] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3255.518476] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3255.518924] ? lock_downgrade+0x6d0/0x6d0 [ 3255.519352] ? find_held_lock+0x2c/0x110 [ 3255.519731] ? io_submit_sqes+0x8610/0x8610 [ 3255.520186] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3255.520634] ? wait_for_completion_io+0x270/0x270 [ 3255.521168] ? rcu_read_lock_any_held+0x75/0xa0 [ 3255.522007] ? vfs_write+0x354/0xb10 [ 3255.522453] ? fput_many+0x2f/0x1a0 [ 3255.522791] ? ksys_write+0x1a9/0x260 [ 3255.523232] ? __ia32_sys_read+0xb0/0xb0 [ 3255.523957] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3255.525245] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3255.526457] do_syscall_64+0x33/0x40 [ 3255.527404] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3255.528707] RIP: 0033:0x7fd311e28b19 [ 3255.529670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3255.534400] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3255.538711] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3255.541077] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3255.543106] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3255.545153] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3255.547189] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:06:37 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x6c00) 10:06:37 executing program 4: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x2042, 0x0, 0xfffffeff, 0x7, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000001300)=""/239) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 10:06:37 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r0, 0x10000000) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x539002, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8a}}, 0x3) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) syz_io_uring_setup(0x3149, &(0x7f0000000140)={0x0, 0x6f15, 0x8, 0x2, 0x1b6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000007c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r0, 0x0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)=""/107, 0x6b}], 0x1, &(0x7f0000000700)=""/154, 0x9a}, 0x0, 0x20, 0x1, {0x2}}, 0xad77) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105142, 0x185) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x20, 0x2, 0x0, 0x5, 0x0, 0xffffffff, 0x20340, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0xffff}, 0x11010, 0x8, 0xfff, 0x3, 0x0, 0x6e10e618, 0x8, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x1) accept$unix(r4, 0x0, &(0x7f0000000240)) mount$bind(&(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000340), 0x400, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000400)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r5 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff], 0x5) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x8000000}], 0x0) 10:06:37 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 82) 10:06:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x3074, &(0x7f0000000480)={0x0, 0x9cf9, 0x10, 0x2, 0x22c, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000500)) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2bff, &(0x7f0000000040)={0x0, 0x6f66, 0x8, 0x1, 0x208, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x1}, 0x20) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x1, r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0x18e9967730789614, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:06:37 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r6 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r6, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x30}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) io_uring_enter(r3, 0x76d3, 0x0, 0x0, 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:06:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:06:37 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x30, 0x0, 0x0, 0x0) 10:06:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:06:37 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x7400) [ 3274.247722] FAULT_INJECTION: forcing a failure. [ 3274.247722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3274.248952] CPU: 1 PID: 15531 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3274.251996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3274.252886] Call Trace: [ 3274.253244] dump_stack+0x107/0x167 [ 3274.253631] should_fail.cold+0x5/0xa [ 3274.254128] _copy_to_iter+0x264/0x12d0 [ 3274.254532] ? chacha_block_generic+0x13e/0x200 [ 3274.255064] ? chacha_permute+0x6f0/0x6f0 [ 3274.255494] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3274.256011] get_random_bytes_user+0x173/0x3b0 [ 3274.256532] ? get_random_u32+0x670/0x670 [ 3274.256946] ? wait_for_random_bytes+0x91/0xe0 [ 3274.257433] ? security_file_permission+0xb1/0xe0 [ 3274.257917] ? get_random_bytes_user+0x3b0/0x3b0 [ 3274.258413] random_read_iter+0x65/0x140 [ 3274.258818] io_read+0x2dc/0x11e0 [ 3274.259221] ? kiocb_done+0xc90/0xc90 [ 3274.259596] ? mark_lock+0xf5/0x2df0 [ 3274.259967] ? lock_chain_count+0x20/0x20 [ 3274.260448] ? stack_trace_consume_entry+0x160/0x160 [ 3274.260941] ? lock_acquire+0x197/0x470 [ 3274.261376] ? __lock_acquire+0xbb1/0x5b00 [ 3274.261804] io_issue_sqe+0x2e8a/0x77b0 [ 3274.262251] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3274.262753] ? SOFTIRQ_verbose+0x10/0x10 [ 3274.263203] ? lock_chain_count+0x20/0x20 [ 3274.263609] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3274.264194] ? io_connect+0x610/0x610 [ 3274.264560] ? lock_acquire+0x197/0x470 [ 3274.264955] ? find_held_lock+0x2c/0x110 [ 3274.265399] ? __fget_files+0x2cf/0x520 [ 3274.265791] ? lock_downgrade+0x6d0/0x6d0 [ 3274.266245] __io_queue_sqe+0x90/0x9d0 [ 3274.266615] ? io_issue_sqe+0x77b0/0x77b0 [ 3274.267010] ? __fget_files+0x2f8/0x520 [ 3274.267488] ? io_prep_rw+0x7f5/0x1050 [ 3274.267870] io_submit_sqes+0x44aa/0x8610 [ 3274.268388] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3274.268885] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3274.269432] ? lock_downgrade+0x6d0/0x6d0 [ 3274.269856] ? find_held_lock+0x2c/0x110 [ 3274.270306] ? io_submit_sqes+0x8610/0x8610 [ 3274.270735] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3274.271299] ? wait_for_completion_io+0x270/0x270 [ 3274.271763] ? rcu_read_lock_any_held+0x75/0xa0 [ 3274.272300] ? vfs_write+0x354/0xb10 [ 3274.272648] ? fput_many+0x2f/0x1a0 [ 3274.273002] ? ksys_write+0x1a9/0x260 [ 3274.273416] ? __ia32_sys_read+0xb0/0xb0 [ 3274.273820] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3274.274372] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3274.274859] do_syscall_64+0x33/0x40 [ 3274.275283] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3274.275772] RIP: 0033:0x7fd311e28b19 [ 3274.276248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3274.278122] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3274.278870] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3274.279656] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3274.280391] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3274.281000] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3274.281730] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:06:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000080)={0x0, 0x0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000012d2aeba006af1000000000000"], 0x14}}, 0x0) ioctl$FICLONE(r2, 0x40049409, r0) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000100)=0x1f, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r6], 0x38}}], 0x1, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0xb0841, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000140)=0x3ff, r8, &(0x7f0000000300)=0x7, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x0, @broadcast}}) pread64(r3, &(0x7f0000000400)=""/206, 0xce, 0x414fbcc) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000500)) 10:06:37 executing program 3: timer_gettime(0x0, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:06:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5baf, &(0x7f0000000040)={0x0, 0x1dea, 0x20, 0x1, 0x343, 0x0, r3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:06:37 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 83) 10:06:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3274.561813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15549 comm=syz-executor.4 [ 3274.709170] FAULT_INJECTION: forcing a failure. [ 3274.709170] name failslab, interval 1, probability 0, space 0, times 0 [ 3274.710624] CPU: 0 PID: 15558 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3274.711462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3274.712468] Call Trace: [ 3274.712790] dump_stack+0x107/0x167 [ 3274.713219] should_fail.cold+0x5/0xa [ 3274.713724] should_failslab+0x5/0x20 [ 3274.714166] kmem_cache_alloc_bulk+0x4b/0x320 [ 3274.714724] io_submit_sqes+0x6fe6/0x8610 [ 3274.715232] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3274.715839] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3274.716428] ? lock_downgrade+0x6d0/0x6d0 [ 3274.716933] ? find_held_lock+0x2c/0x110 [ 3274.717427] ? io_submit_sqes+0x8610/0x8610 [ 3274.717950] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3274.718549] ? wait_for_completion_io+0x270/0x270 [ 3274.719142] ? rcu_read_lock_any_held+0x75/0xa0 [ 3274.719729] ? vfs_write+0x354/0xb10 [ 3274.720173] ? fput_many+0x2f/0x1a0 [ 3274.720634] ? ksys_write+0x1a9/0x260 [ 3274.721104] ? __ia32_sys_read+0xb0/0xb0 [ 3274.721617] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3274.722249] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3274.722906] do_syscall_64+0x33/0x40 [ 3274.723413] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3274.724188] RIP: 0033:0x7fd311e28b19 [ 3274.724653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3274.726759] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3274.727599] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3274.728388] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3274.729218] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3274.730086] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3274.730971] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:06:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:06:55 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x36, 0x0, 0x0, 0x0) 10:06:55 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 84) 10:06:55 executing program 7: read(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x4800) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x0, 0x0, 0x1ff, 0xe4b2, 0x4, 0x900, 0x7}, 0x1c) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1451c2, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1c8) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a3968ce9ed54c103f82d8e9feef0f3f39aef1b392b114d43aedd5aab424c14390c1610de6d5264d3afe5dd970220df596b8f3ffbb29ae4f321bcd26ac8fe258d6323ba0d6a85cef1573e8cba2a5c9da8415fb71776e74a7422f47b2c0d0de626d1380800d4739b8c7435b32e4d5a2cc9298ae6aa7c110cc269a1c669a3462af60259f558a5148789e3e490989306c88a3abc2aba6ffe387d2bbbddf67269910fd84a572fc03d2ee2df710c9674de7621c7c06b8c42", @ANYRES16, @ANYBLOB="052400000000000000002b0000000a008a007770616e2d3bfac220189e760000000000000000493c89a4629c7905d5903df99eba9fc79825bb091a02cc1516d6fe5e70839d4f7efe6ee8458f901456de3f4be80f49d80bcf406c3e5acf623404b58febdce5dfab2843153d36e3b2b01fb7bad36112923eec5fe63b4064ce62822e4138"], 0x2c}}, 0x0) pwrite64(r3, &(0x7f0000000480)="af", 0x1, 0x1000000) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000100)='jfs\x00', 0x0) fallocate(r2, 0x8, 0x0, 0x8000) r4 = openat(r3, &(0x7f0000000180)='./file0\x00', 0x800, 0xa) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000004c0)) 10:06:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005b00)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000180)=""/212, 0xd4}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/29, 0x1d}, {&(0x7f00000012c0)=""/200, 0xc8}, {&(0x7f00000013c0)}, {&(0x7f0000001400)=""/251, 0xfb}], 0x6, &(0x7f0000001580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)=""/184, 0xb8}, {&(0x7f0000001780)=""/38, 0x26}], 0x2}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000002940)=[{&(0x7f0000001880)=""/29, 0x1d}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/117, 0x75}], 0x3, &(0x7f0000002980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000002a00), 0x6e, &(0x7f0000003dc0)=[{&(0x7f0000002a80)=""/206, 0xce}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/175, 0xaf}, {&(0x7f0000003c40)=""/165, 0xa5}, {&(0x7f0000003d00)=""/59, 0x3b}, {&(0x7f0000003d40)=""/107, 0x6b}], 0x6}}, {{&(0x7f0000003e40)=@abs, 0x6e, &(0x7f0000004f40)=[{&(0x7f0000003ec0)=""/126, 0x7e}, {&(0x7f0000003f40)=""/4096, 0x1000}], 0x2, &(0x7f0000004f80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000004fc0), 0x6e, &(0x7f0000005040)}}, {{&(0x7f0000005080)=@abs, 0x6e, &(0x7f0000005540)=[{&(0x7f0000005100)=""/6, 0x6}, {&(0x7f0000005140)=""/227, 0xe3}, {&(0x7f0000005240)=""/149, 0x95}, {&(0x7f0000005300)=""/249, 0xf9}, {&(0x7f0000005400)=""/187, 0xbb}, {&(0x7f00000054c0)=""/101, 0x65}], 0x6, &(0x7f00000055c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f00000056c0)=@abs, 0x6e, &(0x7f0000005a00)=[{&(0x7f0000005740)=""/130, 0x82}, {&(0x7f0000005800)=""/199, 0xc7}, {&(0x7f0000005900)=""/24, 0x18}, {&(0x7f0000005940)=""/105, 0x69}, {&(0x7f00000059c0)=""/32, 0x20}], 0x5, &(0x7f0000005a80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}], 0x8, 0x2, &(0x7f0000005d00)={0x0, 0x989680}) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000005d40)=0x1, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in6, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) 10:06:55 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x7a00) 10:06:55 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x1, 0x30, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x1, r4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) fcntl$setstatus(r5, 0x4, 0x4000) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:06:55 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x1, 0x0, 0x1}, 0x7) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000040)={0x1, r8}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r9, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:06:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:06:55 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x1, r4}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="7c8efcc40aac5f77f972fe9297f08da87e77c6bfb6c99beeecaa40d34a5c74ba95018894426a20a8d3946f9d142f4b4f3d9475cec95c0bdec0f6d63e40cfd1b4e506172ee86bd7d6e049025c476a30bbd1716f1e8995ee7a6cebc67e5f7d23a68c6f8ee4904c3835cad303174971aaa72446f982ffba7d0163cfe7238e5ecfea05afca5f2b555e368eedf2492178a1921d0c1fc935dca7e1818977d191330aa4d689bf1dd7dca81fb740adfc997cfe086017f386ce7f7a40f3d3d242682e4b4ac6c36c7c9d736144318036d02c8f62b13a667c778940363ce43eaee0c24356133704984fcb4c216348978a69f67fcd8591c0aa", 0xf3, 0x8010, 0x1, {0x0, r6}}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r6}}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x3e4, 0x2, &(0x7f0000000040)="ade079456d533d32553c5ec0ed8517ac8545552dc384190b2890c26416c8e8fea83437b2b506a2ecbd", 0x4, 0x0, 0x0, {0x3, r6}}, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 3292.379662] FAULT_INJECTION: forcing a failure. [ 3292.379662] name failslab, interval 1, probability 0, space 0, times 0 [ 3292.391904] CPU: 0 PID: 15576 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3292.392637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3292.393503] Call Trace: [ 3292.393820] dump_stack+0x107/0x167 [ 3292.394161] should_fail.cold+0x5/0xa [ 3292.394516] ? create_object.isra.0+0x3a/0xa20 [ 3292.394966] should_failslab+0x5/0x20 [ 3292.395330] kmem_cache_alloc+0x5b/0x310 [ 3292.395717] create_object.isra.0+0x3a/0xa20 [ 3292.396150] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3292.396621] kmem_cache_alloc_bulk+0x168/0x320 [ 3292.397081] io_submit_sqes+0x6fe6/0x8610 [ 3292.397488] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3292.397962] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3292.398444] ? lock_downgrade+0x6d0/0x6d0 [ 3292.398836] ? find_held_lock+0x2c/0x110 [ 3292.399245] ? io_submit_sqes+0x8610/0x8610 [ 3292.399656] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3292.400124] ? wait_for_completion_io+0x270/0x270 [ 3292.400592] ? rcu_read_lock_any_held+0x75/0xa0 [ 3292.401028] ? vfs_write+0x354/0xb10 [ 3292.401408] ? fput_many+0x2f/0x1a0 [ 3292.401751] ? ksys_write+0x1a9/0x260 [ 3292.402114] ? __ia32_sys_read+0xb0/0xb0 [ 3292.402524] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3292.403016] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3292.403524] do_syscall_64+0x33/0x40 [ 3292.403882] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3292.404381] RIP: 0033:0x7fd311e28b19 [ 3292.404747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3292.406499] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3292.407207] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3292.407887] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3292.408546] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3292.409232] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3292.409929] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:06:55 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000540)='./file1\x00', 0x2) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000140)="16f74ed7b662ab9edc9c51567498d7de7563e2636c7a4ee83cc4df47b8a5bf3cfcdce91c80b0fd9d42688602fb8c3d48f9d9d89198a275665a32c14c58c6f89f5c7f5fa8f9eb5e18c6cada1ac235564498119e612328d428", 0x58, 0x390b}, {&(0x7f00000001c0)="a616d480e01bb210f559ef5f798566a9205b09c19052e0835c20afabddcabe1a78b7289c606be39e01c615bfd15da1a33cc4e90f61a4465dbcd10e003792d04f7dc91f28d769a298c193de0b5dc3f0480c2b34b41474bac21d4a7877a3e094593ab1b9245aed6a79d284d6314e9d193edbb23d71", 0x74, 0x1}, {&(0x7f0000000240)="5733156d8fa5403de3dd93d5dff9ed254c22862a223678981a30a4f71780565672b8c528579993f2fb7a70ef07414ec174c2", 0x32, 0x6}], 0x3, &(0x7f0000000340)={[{@init_itable}, {@debug}, {@minixdf}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@seclabel}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-'}}, {@dont_measure}, {@euid_gt}]}) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) openat(r1, &(0x7f0000000500)='./file1\x00', 0xa00c0, 0x4) llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x34, 0x0, &(0x7f00000005c0)) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020100ff010000000000000002000200845875eb180711363acfc5", @ANYRES32=r3, @ANYBLOB="040005000000000010000600000000002000050000000000"], 0x2c, 0x4) r4 = open(0x0, 0x100, 0x38) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newpolicy={0x13c, 0x13, 0xe21, 0x0, 0x0, {{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x84, 0x5, [{{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@broadcast}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback}]}]}, 0x13c}}, 0x0) dup2(r5, r4) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',dfltgid=', @ANYRESHEX=r6, @ANYBLOB=',posixacl,loose,version=9p2000.u,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,fowner=', @ANYRESDEC, @ANYBLOB="2c646f6e745f686173682c6465666366696e65645f752c6d6561737572652c736d61636b66736861743d272c27412c7365636c6162656c2c7053723d3030303030303030303030303030303030303531e1f76566636f6e746578743d757365725f752c61707072616973652c00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {r3, r6}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) accept4(r7, &(0x7f0000000440)=@pppoe, &(0x7f00000004c0)=0x80, 0x0) 10:06:55 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x80000) 10:06:55 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = epoll_create(0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:06:55 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 85) 10:06:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[0x0, 0x0, &(0x7f0000000340)='security.capability\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='\x00', 0x0], 0x1000) fallocate(0xffffffffffffffff, 0x78, 0x0, 0x0) llistxattr(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)=""/242, 0xf2) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 3292.887725] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 10:06:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3292.963302] 9pnet: Insufficient options for proto=fd 10:06:56 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x100000) [ 3292.976796] FAULT_INJECTION: forcing a failure. [ 3292.976796] name failslab, interval 1, probability 0, space 0, times 0 [ 3292.977845] CPU: 1 PID: 15611 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3292.978479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3292.979882] Call Trace: [ 3292.980130] dump_stack+0x107/0x167 [ 3292.980439] should_fail.cold+0x5/0xa [ 3292.980765] ? create_object.isra.0+0x3a/0xa20 [ 3292.981199] should_failslab+0x5/0x20 [ 3292.981530] kmem_cache_alloc+0x5b/0x310 [ 3292.981913] ? mark_held_locks+0x9e/0xe0 [ 3292.982302] create_object.isra.0+0x3a/0xa20 [ 3292.982675] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3292.983144] kmem_cache_alloc_bulk+0x168/0x320 [ 3292.983542] io_submit_sqes+0x6fe6/0x8610 [ 3292.983913] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3292.984684] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3292.985765] ? lock_downgrade+0x6d0/0x6d0 [ 3292.986742] ? find_held_lock+0x2c/0x110 [ 3292.987645] ? io_submit_sqes+0x8610/0x8610 [ 3292.988693] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3292.989764] ? wait_for_completion_io+0x270/0x270 [ 3292.990949] ? rcu_read_lock_any_held+0x75/0xa0 [ 3292.992047] ? vfs_write+0x354/0xb10 [ 3292.992872] ? fput_many+0x2f/0x1a0 [ 3292.993670] ? ksys_write+0x1a9/0x260 [ 3292.994540] ? __ia32_sys_read+0xb0/0xb0 [ 3292.995438] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3292.996599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3292.997733] do_syscall_64+0x33/0x40 [ 3292.998638] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3292.999744] RIP: 0033:0x7fd311e28b19 [ 3293.000495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3293.004456] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3293.005937] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3293.007426] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3293.008986] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3293.009916] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3293.010562] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:07:11 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x3c, 0x0, 0x0, 0x0) 10:07:11 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x200000) 10:07:11 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x40400) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x42) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:07:11 executing program 1: sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, 0x1, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}]}, 0x28}}, 0x20008844) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:07:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:07:11 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x206e0, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0xb657) r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, 0x0, 0x100800) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="e1112280fc8ffe8ed77301fbd7dc09b3e3da9295f5a54a0705d81b57b3869a0bd3e09428365828a59040ab941412b3e615ac5771be0895ccaa01d390c5aea8f4dd80653f304b8bde57033f536e51d1d717b5266854", 0x55}, {&(0x7f0000000180)="2513afb597af9625c750df4e49af1f4b5d93681e230b1a33a309de36cfc0f5e9d5a40ea3d80eef759a566b6397ce9bfd0380455b2b3bcfd2949c21229213391e74a1896770280d3ec9745e974a8578b5c3828874bb256e8f45ca48b67bca52c5f2adb1eac2bfcde73f8c84aed4d78da9a2c27bf84a592db978a401e3d4ce201732bb1efb5fc2e84718a9dc05fd94041adec473102f4cbf7588d13a6a65d9411293211c9f7a4c6a76c33e92fb02fdaad4405c5336e8c02c95e380ff1374ef2aeeaa119f13481a8be72d8e1cdfa92fb16118e4466dbc86357fe86be2b4078fc3b8e58bf24679073370b97f7556", 0xec}, {&(0x7f0000000280)="b986b86b595eb605e78097aac1ddd98daa966f7a269de373c65343c2344f7aabd92cbfe722502423cbd8f59e397a12d9a931080f7a2ae674bcfa0dad2461c5c24fde2d49232b62f1d30632e9722c21085827beef44a0a8678baf8b0e2db906f1b03f3b61f5f4b202eaf030", 0x6b}, {&(0x7f0000000300)="20930dfcd441fdb88027b34a32644e27dec7df385c3ec0c20c17fda77dba668d7f7850edcb026a12b12b0eb400f93e26e74006a0050023e78065299cac8828b97f6f40e0f1a9d1f67d91142331b4f63dea48d12f8e83c854cb6db902b8bd4782f49b6318a5f3cf35d3112a074a75a964971febc481aa623573c1a2c50680b5d2de6fbc2b699e0cdec156ecdd45a82a0d3bc69c7228c0026dce80a933f0f6ae5dd5ffde1e68df288dc60ce7f8a318a750dc67641e976b5103a79757a0e6d8b8d99a82b0b247179aa8", 0xc8}], 0x4, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}], 0x18}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="decd8a69527f6b2cf6926c50b2be0ed1d356ce546b721abdb700605b67115e9571807e40d6f462075af317c4eef1f9a48ad7c93acf7eb166e86bf0a064f26508d3b4cbbd2868330e1cc89c8446ff16ceb282b15313e15135297c7cd133272ea6e283c0abd5238c516005b4a82a6c704cf5bf2f9dfa44d2ad313433c3696665f6640dd6df6be830c190b03b7f", 0x8c}, {&(0x7f0000000540)="8822b3ad458666911f109e3e25939e3e28628c89ce092e497784ae51a7e27d09241dbbd94ba10c7e4ad6f94e809f79cd589e36dfbd18af0d034f4d5abd8ec73b4ed84444e8c5", 0x46}], 0x2, &(0x7f0000000600)=[@ip_retopts={{0xa8, 0x0, 0x7, {[@cipso={0x86, 0x15, 0x0, [{0x6, 0x4, "977a"}, {0x7, 0x4, "8e8e"}, {0x3e6f31e560a077cf, 0x7, "8bfb9a94f9"}]}, @end, @end, @timestamp_prespec={0x44, 0x34, 0x35, 0x3, 0x7, [{@local, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@multicast1, 0x40}, {@remote, 0x5f72}, {@private=0xa010102, 0x1}, {@empty, 0x3}]}, @lsrr={0x83, 0xb, 0xc3, [@empty, @dev={0xac, 0x14, 0x14, 0xb}]}, @generic={0x82, 0xe, "d06ba7cace6a2a78bf8588e4"}, @rr={0x7, 0x23, 0xd9, [@rand_addr=0x64010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1, @rand_addr=0x64010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x29}]}, @generic={0x7, 0x8, "bea13b52a01f"}, @ssrr={0x89, 0x7, 0xde, [@remote]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0xe8, 0x0, 0x7, {[@generic={0x88, 0xd, "402a71704be9b35a11720f"}, @lsrr={0x83, 0x1b, 0x3f, [@multicast1, @multicast1, @multicast1, @multicast1, @broadcast, @multicast1]}, @noop, @lsrr={0x83, 0x1f, 0x87, [@multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x94, 0x4, "0593"}, @cipso={0x86, 0x38, 0x3, [{0x6, 0xb, "b5df91e4ac6a827700"}, {0x2, 0x3, "04"}, {0x5, 0xa, "7ea67d2c5aaf802e"}, {0x7, 0x5, "b99abb"}, {0x1, 0x9, "46ba2d4dbe021d"}, {0x0, 0xc, "7a95d46bfb1907f90058"}]}, @generic={0x88, 0xe, "dd3bfecf8ed9f3565744c473"}, @timestamp_prespec={0x44, 0x44, 0xd5, 0x3, 0x8, [{@remote, 0xffffffff}, {@empty, 0x3ff}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x14}, 0xfa8e}, {@loopback, 0x590}, {@remote, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0xac, 0x0, 0x7, {[@rr={0x7, 0x2b, 0xa6, [@broadcast, @local, @multicast1, @multicast2, @multicast1, @private=0xa010101, @multicast1, @local, @multicast1, @remote]}, @rr={0x7, 0x17, 0xe7, [@local, @remote, @loopback, @broadcast, @multicast2]}, @timestamp={0x44, 0x10, 0x55, 0x0, 0xb, [0x2, 0x4, 0xcde1]}, @timestamp_addr={0x44, 0xc, 0x3c, 0x1, 0xe, [{@local, 0x401}]}, @generic={0x88, 0x4, '%>'}, @noop, @timestamp={0x44, 0x8, 0x5b, 0x0, 0x7, [0xfffffeff]}, @rr={0x7, 0xf, 0x52, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x6c, 0x3, 0xc, [{@broadcast, 0x200}]}, @cipso={0x86, 0x13, 0x2, [{0x5, 0x6, "6ca63181"}, {0x2, 0x7, "f488d77b57"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc6}}], 0x2a8}}, {{&(0x7f00000008c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000900)="36b1f519c3609f334ff337fa2eb401a560d51989e8dcc67c5c3c99243aa13bf91aea03d798b83663f5e0a9c57586edafc9d67f09b05aed911e5e009dda7f5f1695d6bb5649c4e01790b954345abda9690c7cb4be57d029225eb47875b4", 0x5d}, {&(0x7f0000000980)="8d50bf9ce2788633e6f237ee4c48e52568f971f91108a02c6ef2b2aaf7ebfa70ecf854d1e6817956dbde81f569c637a2fd044b4c2ff35e840045", 0x3a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="ac09177cfab7fffe2be6af57e062e2c32b4a6f633ce6c6e053392f90ab96cd171164ae5a42873e26675dfd8974d16d21727e9dd2a53fa739a8da2b543b784ae5e96df961581f540d1fc8ff516f4b45c8b3a12574f7000476bf65e012cff47b481a1445fbfdd754d779", 0x69}, {&(0x7f0000000a80)="1dbe4d508c0839de37ff7d3f9c1345348641afafa0f123c16e379cb13d405d1134b95679f9a11accf7e916f9ee4a19b70f6fc22f3a4d4836877fe2c0b533708bafd1d285a227de74d7d812d7c211fac7cdd2c580b9d14e738e3c5c9c21cccbd0fe8a2a8d58f73694156561778c819fc4a50978eb629c4276b990418bd07a92eab255d13d4f30815072070aac5f4aea2d9148eb0f662b64eb02fb6bf6106fa2b9fac9ce2e4190c786d6a17fc67c2d45e12238ea44cf4306ef11c197226f436898", 0xc0}], 0x2, &(0x7f0000000b80)=[@ip_retopts={{0xc4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x59, 0x1, 0x9, [{@empty, 0x1d}, {@empty, 0x5}, {@empty, 0x10001}, {@loopback, 0x1}, {@multicast2, 0xdfbe}]}, @timestamp={0x44, 0x10, 0xbf, 0x0, 0x2, [0x80000001, 0xfffffffb, 0x4]}, @generic={0x88, 0xb, "d999755ca6b19061c5"}, @cipso={0x86, 0x2d, 0x0, [{0x7, 0xf, "904a02d01c7154f213a76d0501"}, {0x5, 0x8, "bfe2ce066fa4"}, {0x1, 0x10, "847bbbeb3e140b28050ebc3faec8"}]}, @timestamp_prespec={0x44, 0x3c, 0x1d, 0x3, 0x4, [{@broadcast}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x7}, {@empty, 0x4}, {@private=0xa010101, 0xb1}, {@rand_addr=0x64010101, 0x7}, {@private=0xa010100, 0xffffff81}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0xf0}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0xe0}}], 0x4, 0xa2761e1a1d4c2c34) truncate(&(0x7f0000000000)='./file0\x00', 0x0) 10:07:11 executing program 4: add_key$keyring(&(0x7f0000002900), 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x1a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) clone3(&(0x7f0000000640)={0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x0, {0x20013}, &(0x7f0000000440)=""/196, 0xc4, &(0x7f00000005c0)=""/75, 0x0}, 0x58) 10:07:11 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 86) 10:07:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3308.117685] FAULT_INJECTION: forcing a failure. [ 3308.117685] name failslab, interval 1, probability 0, space 0, times 0 [ 3308.119026] CPU: 0 PID: 15636 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3308.119833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3308.120776] Call Trace: [ 3308.121083] dump_stack+0x107/0x167 [ 3308.121565] should_fail.cold+0x5/0xa [ 3308.122031] ? create_object.isra.0+0x3a/0xa20 [ 3308.122591] should_failslab+0x5/0x20 [ 3308.123021] kmem_cache_alloc+0x5b/0x310 [ 3308.123522] ? mark_held_locks+0x9e/0xe0 [ 3308.123982] create_object.isra.0+0x3a/0xa20 [ 3308.124490] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3308.125030] kmem_cache_alloc_bulk+0x168/0x320 [ 3308.125588] io_submit_sqes+0x6fe6/0x8610 [ 3308.126057] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3308.126627] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3308.127138] ? lock_downgrade+0x6d0/0x6d0 [ 3308.127630] ? find_held_lock+0x2c/0x110 [ 3308.128104] ? io_submit_sqes+0x8610/0x8610 [ 3308.128611] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3308.129123] ? wait_for_completion_io+0x270/0x270 [ 3308.129744] ? rcu_read_lock_any_held+0x75/0xa0 [ 3308.130309] ? vfs_write+0x354/0xb10 [ 3308.130704] ? fput_many+0x2f/0x1a0 [ 3308.131084] ? ksys_write+0x1a9/0x260 [ 3308.131537] ? __ia32_sys_read+0xb0/0xb0 [ 3308.131971] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3308.132566] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3308.133115] do_syscall_64+0x33/0x40 [ 3308.133576] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3308.134126] RIP: 0033:0x7fd311e28b19 [ 3308.134561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3308.136577] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3308.137442] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3308.138211] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3308.139005] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3308.139799] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3308.140593] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:07:11 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="4661e79f964837cd33a728a5d67279dc5f762650c628cc9069d99d15a1420d8c3c690b3e8ae1964b8af1015f6cc3501ed21daf0539996f18b7ca2b755f76fe", 0x3f}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x7, @loopback, 0x10000}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000140)="dc988e6f8e69b7a8dc4b1eb4ad19ae5ff08c09565f56278d53509db4d53d84bc41538acf15cfe33d66ebbf7e658b76b22172c16c3c0f497fb3017158fad248c96d0e8284be5e1d41b8e877ed3f5ea6c85c235ed7a1d1087d528ef12381ea4fab30ef60c90a6f68802c8326584c640bc19af1c29733bfa19c32a3f8c9d2a6e241d8066b4cafcdb0daccd111eb43021a346d770d9e841d4eeeecbd254c179941de074c46d6e00774e97dbbe63a2a32c6ccc307e69b39c7dc6385169e695068e2affd6f1088754ba629af7baec16f665afca991f5f8b798e121d871c9452a633c332753a2351aa81a8f57dbf8861d38", 0xee}, {&(0x7f0000000240)="d0bd242e1c936f3c45bb3aeabf803ba404c2f85f7b5e8070c2ce816d25e34d77d14ac9459fb0b653acef9940178d8c87a1a748c5d3172ec0f7f488ab0039f1a1c3fce780224c65bd2b4a0c98c1754f374d1c6187204d1fec10b21c988bdc0f40b16bb6f6d4f4c33c215494938a7cc44e9334dd8fd9f85e8045e1bbaa3bc9713dc7c345925731e144281683d9a0f25396561af0c1054710d8d1a71de3ac018c7cd3dcf1dcb351e72aa2215d21d90be3c917ee6329067b", 0xb6}, {&(0x7f0000000300)="e6cb66cb12310a90db37b31d9a6b9895dbe956981e1c4e61189eadd0e65270f0b98bf890f467ddf2ae0923cd45c344a7569879d2292bc9a5b8fa2e72cee511ca00e8bd3ef5851e11ceaee901e2f93e78c50ef8cd5fe580ec5df063747e7a0ed38df3071d67a9e07a763bd5bff185d136ea9a12d7ff8062191358558208bbf5dd8e86e5cb098febf365f76697f0c733fa9164a162ca6567003afbb67021cd27830991fe113812c46b733639ac89c4bd6906c339ff79b8a7ce20f91fae7dd00f5ad501ad42e96c5157e99333b6674bae1efab7f82ef80bc4c897d814759498cc", 0xdf}], 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="9b50faf409d0a19061bbc7a2680627140039cf472b000029"], 0x18}}], 0x2, 0x4001) sendmsg$inet6(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)="e3af9b7c", 0x4}], 0x1, &(0x7f0000000440)=[@dstopts_2292={{0x18}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x30}, 0x0) 10:07:11 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, 0xffffffffffffffff, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:07:11 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x1000000) 10:07:11 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/clocksource', 0x400081, 0x5a) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x5, 0x20000000, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pread64(r3, &(0x7f0000000480)=""/216, 0xd8, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x7b2b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:07:11 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x40400) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x42) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:07:11 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 87) 10:07:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x152, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3308.456129] FAULT_INJECTION: forcing a failure. [ 3308.456129] name failslab, interval 1, probability 0, space 0, times 0 [ 3308.457763] CPU: 1 PID: 15660 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3308.459553] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3308.460551] Call Trace: [ 3308.460781] dump_stack+0x107/0x167 [ 3308.461149] should_fail.cold+0x5/0xa [ 3308.461876] ? create_object.isra.0+0x3a/0xa20 [ 3308.462472] should_failslab+0x5/0x20 [ 3308.462854] kmem_cache_alloc+0x5b/0x310 [ 3308.463234] ? mark_held_locks+0x9e/0xe0 [ 3308.463639] create_object.isra.0+0x3a/0xa20 [ 3308.464022] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3308.464516] kmem_cache_alloc_bulk+0x168/0x320 [ 3308.464911] io_submit_sqes+0x6fe6/0x8610 [ 3308.465352] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3308.465783] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3308.466210] ? io_submit_sqes+0x8610/0x8610 [ 3308.466759] ? recalibrate_cpu_khz+0x10/0x10 [ 3308.467232] ? ktime_get+0x158/0x1f0 [ 3308.468131] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 3308.469157] ? clockevents_program_event+0x131/0x360 [ 3308.470516] ? tick_program_event+0xa8/0x140 [ 3308.471594] ? hrtimer_interrupt+0x771/0x9b0 [ 3308.472713] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3308.474024] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3308.475313] do_syscall_64+0x33/0x40 [ 3308.476195] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3308.477508] RIP: 0033:0x7fd311e28b19 [ 3308.478443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3308.483141] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3308.485032] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3308.486824] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3308.488593] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3308.490364] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3308.492093] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:07:27 executing program 4: syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x5, 0x0, 0x5, 0x0, 0x0, 0x2, 0xa800, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5f4, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x1400, 0x7, 0xfffffffc, 0x1, 0x3ff, 0x9, 0x8, 0x0, 0x5, 0x0, 0x6}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:07:27 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x40010, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:07:27 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x2000000) 10:07:27 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 88) 10:07:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:07:27 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) r1 = syz_open_dev$sg(0x0, 0x0, 0x2001) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x4002, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000380)) ioctl$RTC_AIE_ON(r2, 0x7002) signalfd4(r2, &(0x7f0000000180)={[0x2]}, 0x8, 0x800) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{r2}, "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"}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, {0x308}, 0xac1414a3, {0x2, 0x1000, @broadcast}}) fallocate(r3, 0x1d, 0xfffffffffffffffe, 0xb35c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400) setns(r4, 0x4000000) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000002c0)={[{@noacl}]}) 10:07:27 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x42, 0x0, 0x0, 0x0) 10:07:27 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x472a, &(0x7f0000000740)={0x0, 0x0, 0x4, 0x5, 0x2eb}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendto$unix(r3, &(0x7f0000000240)="322e67029005f1a0390633469f7b48f5669c170641257db70d0197b51e23ba4893f07a36b7f69a80e9ce81a5afec740ae5bbad55430fbe31190e57701dba234cd4861ed7", 0x44, 0x48080, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4f0, 0x44, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r8}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000040)={0x1, r9}) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r10, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x15, 0x0, {0x0, r11}}, 0x8) 10:07:27 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x3000000) [ 3324.290547] kauditd_printk_skb: 29 callbacks suppressed [ 3324.290561] audit: type=1326 audit(1723630047.748:355): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15681 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd064db8b19 code=0x7ffc0000 [ 3324.297380] audit: type=1326 audit(1723630047.753:356): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15681 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd064db8b19 code=0x7ffc0000 [ 3324.299446] FAULT_INJECTION: forcing a failure. [ 3324.299446] name failslab, interval 1, probability 0, space 0, times 0 [ 3324.300790] CPU: 0 PID: 15692 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3324.301524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3324.302434] Call Trace: [ 3324.302710] dump_stack+0x107/0x167 [ 3324.303205] should_fail.cold+0x5/0xa [ 3324.303623] ? create_object.isra.0+0x3a/0xa20 [ 3324.304138] should_failslab+0x5/0x20 [ 3324.304521] kmem_cache_alloc+0x5b/0x310 [ 3324.304927] ? mark_held_locks+0x9e/0xe0 [ 3324.305390] create_object.isra.0+0x3a/0xa20 [ 3324.305834] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3324.306438] kmem_cache_alloc_bulk+0x168/0x320 [ 3324.306906] io_submit_sqes+0x6fe6/0x8610 [ 3324.307405] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3324.307901] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3324.308446] ? lock_downgrade+0x6d0/0x6d0 [ 3324.308860] ? find_held_lock+0x2c/0x110 [ 3324.309329] ? io_submit_sqes+0x8610/0x8610 [ 3324.309775] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3324.310334] ? wait_for_completion_io+0x270/0x270 [ 3324.310829] ? rcu_read_lock_any_held+0x75/0xa0 [ 3324.312099] ? vfs_write+0x354/0xb10 [ 3324.312504] ? fput_many+0x2f/0x1a0 [ 3324.312873] ? ksys_write+0x1a9/0x260 [ 3324.313315] ? __ia32_sys_read+0xb0/0xb0 [ 3324.313730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3324.314321] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3324.314844] do_syscall_64+0x33/0x40 [ 3324.315269] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3324.315779] RIP: 0033:0x7fd311e28b19 [ 3324.316233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3324.319630] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3324.320438] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3324.321200] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3324.321906] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3324.322699] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3324.332896] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:07:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3324.347564] audit: type=1326 audit(1723630047.805:357): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15681 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd064db8b19 code=0x7ffc0000 10:07:27 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x40000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x1, 0x0, 0x1}, 0x7) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x7, 0x0, 0x8000, 0x1, 0x0, {0x0, r6}}, 0xff) syz_io_uring_setup(0x2b07, &(0x7f0000000740)={0x0, 0x0, 0x2, 0x5, 0x20000003}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = dup(r7) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, &(0x7f0000000080)=r10, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 3324.349442] audit: type=1326 audit(1723630047.805:358): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15681 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd064db8b19 code=0x7ffc0000 [ 3324.354197] audit: type=1326 audit(1723630047.809:359): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15681 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd064db8b19 code=0x7ffc0000 [ 3324.372573] audit: type=1326 audit(1723630047.809:360): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15681 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd064db8b19 code=0x7ffc0000 [ 3324.416058] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5 [ 3324.416058] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 3324.416058] 10:07:27 executing program 3: r0 = syz_io_uring_setup(0x4623, &(0x7f0000001140)={0x0, 0x800, 0x0, 0x0, 0x83}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r3, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000001240)={'\x00', 0x8, 0x1, 0x10000, 0x3aff, 0x8, 0xffffffffffffffff}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f00000011c0)={0x0, 0x80, 0x9, 0x3, 0x80, 0x5, 0x0, 0x8, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x2}, 0x10, 0x101, 0x7, 0x9, 0x31b42b18, 0x7, 0xffc0, 0x0, 0x7f, 0x0, 0x4}, r5, 0x9, r4, 0x8) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:07:27 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)={@loopback, @loopback, 0x1, 0x1, [@empty]}, 0x14) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r0 = socket$packet(0x11, 0x3, 0x300) accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10, 0x80000) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3324.452440] EXT4-fs (loop7): mounted filesystem without journal. Opts: noacl,,errors=continue 10:07:27 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 89) [ 3324.462660] audit: type=1326 audit(1723630047.809:361): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15681 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd064db8b19 code=0x7ffc0000 [ 3324.464747] audit: type=1326 audit(1723630047.811:362): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15681 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd064db8b19 code=0x7ffc0000 [ 3324.500188] audit: type=1326 audit(1723630047.818:363): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15681 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd064db8b19 code=0x7ffc0000 [ 3324.512283] audit: type=1326 audit(1723630047.818:364): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15681 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fd064db8ad7 code=0x7ffc0000 [ 3324.633826] FAULT_INJECTION: forcing a failure. [ 3324.633826] name failslab, interval 1, probability 0, space 0, times 0 [ 3324.638802] CPU: 1 PID: 15717 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3324.639384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3324.640070] Call Trace: [ 3324.640301] dump_stack+0x107/0x167 [ 3324.640616] should_fail.cold+0x5/0xa [ 3324.640943] ? create_object.isra.0+0x3a/0xa20 [ 3324.641331] should_failslab+0x5/0x20 [ 3324.641654] kmem_cache_alloc+0x5b/0x310 [ 3324.642000] ? mark_held_locks+0x9e/0xe0 [ 3324.642373] create_object.isra.0+0x3a/0xa20 [ 3324.642748] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3324.643184] kmem_cache_alloc_bulk+0x168/0x320 [ 3324.643581] io_submit_sqes+0x6fe6/0x8610 [ 3324.643957] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3324.644381] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3324.644795] ? lock_downgrade+0x6d0/0x6d0 [ 3324.645149] ? find_held_lock+0x2c/0x110 [ 3324.645499] ? io_submit_sqes+0x8610/0x8610 [ 3324.645884] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3324.646307] ? wait_for_completion_io+0x270/0x270 [ 3324.646723] ? rcu_read_lock_any_held+0x75/0xa0 [ 3324.647117] ? vfs_write+0x354/0xb10 [ 3324.647435] ? fput_many+0x2f/0x1a0 [ 3324.647746] ? ksys_write+0x1a9/0x260 [ 3324.648070] ? __ia32_sys_read+0xb0/0xb0 [ 3324.648420] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3324.648864] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3324.649302] do_syscall_64+0x33/0x40 [ 3324.649621] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3324.650056] RIP: 0033:0x7fd311e28b19 [ 3324.650391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3324.651929] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3324.652576] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3324.653175] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3324.653775] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3324.654392] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3324.654993] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:07:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:07:43 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001880)={&(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3}]}}}], 0x18}, 0x8804) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/140, 0x8c}], 0x1) r2 = signalfd4(r1, &(0x7f0000000140)={[0x9]}, 0x8, 0x80800) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x76, 0x67, 0x0, 0x6, 0x0, 0x0, 0x236b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x16a, 0x6, @perf_bp={&(0x7f0000000100), 0x7}, 0x1088, 0x2, 0x8, 0xf, 0xfffffffffffffffe, 0x20, 0x0, 0x0, 0x3, 0x0, 0x8}, 0x0, 0xc, r2, 0xb) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x71, 0x4, @buffer={0x0, 0x51, &(0x7f00000004c0)=""/81}, &(0x7f0000000300)="0d57249b7b07e51778b05b51abfc09cef5b843117573f7a52532e3dc7b341b40155ff5498725ad11c74969a2adc5c8247b65baa3507f94c10e4a18abc224d1e8af1c2cc6bc7d3b36ce712c9c9d33fff1317b42b53c58b53f3df22019a136df06e0ec787354ca5a4034598d7b7baa05f9e1", &(0x7f0000000380)=""/142, 0x4e8, 0x10027, 0x1, &(0x7f0000000180)}) 10:07:43 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x8e, 0x0, 0x0, 0x0) 10:07:43 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xffffffffffff7fff, 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)="80917dc928d6c73b7a7a3bae567fc3eab1e15b119688b7bbbeb527bdf0a2a4d3359623bbda5e12b2a871d9ac0dab5e9426f73f9399", 0x35, 0xffffffffffffff2d}, {&(0x7f0000000240)="485c7230e886a9d27392bccb6c5b24676c0a081df5b143", 0x17, 0x6}], 0x820000, &(0x7f0000000480)={[{@nr_blocks={'nr_blocks', 0x3d, [0x74, 0x74, 0x78, 0x35, 0x78, 0x6b]}}, {@huge_within_size}, {@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@mode={'mode', 0x3d, 0x100000000000000}}, {@nr_inodes={'nr_inodes', 0x3d, [0x2d, 0x37, 0x37, 0x32, 0x968a3c9add24d750, 0x36]}}], [{@fsname}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/random\x00'}}]}) openat(r4, &(0x7f0000000400)='./file0\x00', 0x30040, 0x44) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:07:43 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r3, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:07:43 executing program 4: r0 = getegid() r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5805}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setresgid(r0, r0, r0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) fallocate(r1, 0x63, 0x0, 0x7fffffff) sendmsg$inet6(r2, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) request_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\xf7{]&\x00', 0x0) unshare(0x48020200) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) r5 = accept$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c) getsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000340), &(0x7f0000000380)=0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000280)=0xc) unshare(0x2000100) 10:07:43 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 90) 10:07:43 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x4000000) 10:07:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3340.214609] FAULT_INJECTION: forcing a failure. [ 3340.214609] name failslab, interval 1, probability 0, space 0, times 0 [ 3340.215849] CPU: 0 PID: 15742 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3340.216502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3340.217253] Call Trace: [ 3340.217504] dump_stack+0x107/0x167 [ 3340.217843] should_fail.cold+0x5/0xa [ 3340.218198] ? create_object.isra.0+0x3a/0xa20 [ 3340.218645] should_failslab+0x5/0x20 [ 3340.218995] kmem_cache_alloc+0x5b/0x310 [ 3340.219371] ? mark_held_locks+0x9e/0xe0 [ 3340.219746] create_object.isra.0+0x3a/0xa20 [ 3340.220153] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3340.220627] kmem_cache_alloc_bulk+0x168/0x320 [ 3340.221056] io_submit_sqes+0x6fe6/0x8610 [ 3340.221462] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3340.221922] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3340.222413] ? lock_downgrade+0x6d0/0x6d0 [ 3340.222830] ? find_held_lock+0x2c/0x110 [ 3340.223242] ? io_submit_sqes+0x8610/0x8610 [ 3340.223692] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3340.224160] ? wait_for_completion_io+0x270/0x270 [ 3340.224612] ? rcu_read_lock_any_held+0x75/0xa0 [ 3340.225039] ? vfs_write+0x354/0xb10 [ 3340.225385] ? fput_many+0x2f/0x1a0 [ 3340.225722] ? ksys_write+0x1a9/0x260 [ 3340.226074] ? __ia32_sys_read+0xb0/0xb0 [ 3340.226477] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3340.226966] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3340.227445] do_syscall_64+0x33/0x40 [ 3340.227793] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3340.228269] RIP: 0033:0x7fd311e28b19 [ 3340.228615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3340.230330] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3340.231087] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3340.231793] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3340.232505] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3340.233220] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3340.233937] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:07:43 executing program 7: ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000ac0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e7d, 0x2d51, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x0, 0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) 10:07:43 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x5000000) 10:07:43 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 91) 10:07:43 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x9) syz_io_uring_setup(0xce6, &(0x7f0000000740)={0x0, 0x9e85, 0x0, 0x9, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000040)={0x1, r7}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r4, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@l2, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/11, 0xb}, {&(0x7f0000000540)=""/27, 0x1b}, {&(0x7f0000000580)=""/20, 0x14}], 0x3}, 0x0, 0x40, 0x0, {0x1}}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x1}, 0x4) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) accept$packet(r3, &(0x7f00000001c0), &(0x7f0000000240)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x44080) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3, 0x0, @perf_config_ext={0x4}, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) fchmodat(r3, &(0x7f0000000480)='./file0\x00', 0x31) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:07:43 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x2fc5, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="7c8efcc40aac5f77f972fe9297f08da87e77c6bfb6c99beeecaa40d34a5c74ba95018894426a20a8d3946f9d142f4b4f3d9475cec95c0bdec0f6d63e40cfd1b4e506172ee86bd7d6e049025c476a30bbd1716f1e8995ee7a6cebc67e5f7d23a68c6f8ee4904c3835cad303174971aaa72446f982ffba7d0163cfe7238e5ecfea05afca5f2b555e368eedf2492178a1921d0c1fc935dca7e1818977d191330aa4d689bf1dd7dca81fb740adfc997cfe086017f386ce7f7a40f3d3d242682e4b4ac6c36c7c9d736144318036d02c8f62b13a667c778940363ce43eaee0c24356133704984fcb4c216348978a69f67fcd8591c0aa", 0xf3, 0x8010, 0x1, {0x0, r4}}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x8, 0x8, {0x0, r0}, 0xe418, 0x3, 0x1, {0x0, r4, r3}}, 0x81) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:07:43 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x600, 0x0, 0x0, 0x0) 10:07:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149a90f50769764f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951fd7b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3e68ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x3a2b, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x8) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3341.123657] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3341.125392] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3341.127009] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3341.128636] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3341.130260] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3341.131899] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 [ 3341.138750] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 10:07:44 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x6000000) [ 3341.230258] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 10:07:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:07:44 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x7000000) 10:07:44 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x2, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 3341.563283] udc-core: couldn't find an available UDC or it's busy [ 3341.565283] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 3343.218015] Bluetooth: hci3: command 0x0405 tx timeout 10:08:00 executing program 4: prlimit64(0x0, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x10000, 0x8001}, &(0x7f0000000040)) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fef000/0x1000)=nil) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r1}) prlimit64(r1, 0xe, &(0x7f0000000140)={0x1, 0x5}, &(0x7f0000000180)) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f00000000c0)=0xdc1f, 0x800, 0x0) mlock(&(0x7f0000fef000/0x2000)=nil, 0x2000) r2 = fork() pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000003, 0xffffffffffffffff) r3 = getpgrp(r2) prlimit64(r3, 0xc, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x200000a, 0x20032, 0xffffffffffffffff, 0x0) 10:08:00 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0xc00, 0x0, 0x0, 0x0) 10:08:00 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@link_local={0x11}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @loopback, {[@timestamp={0x44, 0x2c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file0\x00', 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) write(r1, &(0x7f0000000340)="6d7a5d53adb082aec857d8207a7894e6556ee5a39cba7bd7c6a5f2b670beced45c69887e34e361d5cc755bba17ea90da3af2b166e51e68873c8a7b4fe447db79ea542baa07e3528531cabfdc01ad57a68a7f80e1ff79df25dba1cfa6f6ae20afa45c64d2266815268bf53017c07eadd183be1512a02a9806533b12bb752f96514454c045cd3972ca89699791e13bd3703119de591b5ac651c7dffc840537bfaea7ea0534fc81717433b8ffa3dd53f34a422d1523046e17", 0xb7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:08:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:08:00 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0xa000000) 10:08:00 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000480)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000240)=0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x80}, 0x4000, 0x8}, 0x0, 0x7, r3, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:08:00 executing program 3: r0 = syz_io_uring_setup(0x4d4e, &(0x7f00000002c0)={0x0, 0x2819, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:08:00 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 92) [ 3357.283145] FAULT_INJECTION: forcing a failure. [ 3357.283145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3357.284225] CPU: 1 PID: 15809 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3357.284807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3357.285512] Call Trace: [ 3357.285743] dump_stack+0x107/0x167 [ 3357.286052] should_fail.cold+0x5/0xa [ 3357.286409] _copy_from_user+0x2e/0x1b0 [ 3357.286748] iovec_from_user+0x141/0x400 [ 3357.287094] __import_iovec+0x67/0x590 [ 3357.287450] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3357.287897] io_import_iovec+0x581/0x1120 [ 3357.288256] ? io_complete_rw+0x230/0x230 [ 3357.288634] ? lock_downgrade+0x6d0/0x6d0 [ 3357.288991] ? unwind_next_frame+0x13ef/0x1a90 [ 3357.289387] io_read+0xe14/0x11e0 [ 3357.289711] ? kiocb_done+0xc90/0xc90 [ 3357.290033] ? mark_lock+0xf5/0x2df0 [ 3357.290352] ? lock_chain_count+0x20/0x20 [ 3357.290740] ? lock_chain_count+0x20/0x20 [ 3357.291094] ? stack_trace_save+0x8c/0xc0 [ 3357.291446] ? stack_trace_consume_entry+0x160/0x160 [ 3357.291906] ? lock_acquire+0x197/0x470 [ 3357.292249] ? __lock_acquire+0xbb1/0x5b00 [ 3357.292631] io_issue_sqe+0x2e8a/0x77b0 [ 3357.292973] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3357.293413] ? SOFTIRQ_verbose+0x10/0x10 [ 3357.293776] ? lock_chain_count+0x20/0x20 [ 3357.294129] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3357.294578] ? io_connect+0x610/0x610 [ 3357.294928] ? lock_acquire+0x197/0x470 [ 3357.295264] ? find_held_lock+0x2c/0x110 [ 3357.295613] ? __fget_files+0x2cf/0x520 [ 3357.295972] ? lock_downgrade+0x6d0/0x6d0 [ 3357.296327] __io_queue_sqe+0x90/0x9d0 [ 3357.296658] ? io_issue_sqe+0x77b0/0x77b0 [ 3357.297030] ? __fget_files+0x2f8/0x520 [ 3357.297370] ? io_prep_rw+0x7f5/0x1050 [ 3357.297702] io_submit_sqes+0x44aa/0x8610 [ 3357.298095] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3357.298554] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3357.299127] ? lock_downgrade+0x6d0/0x6d0 [ 3357.299612] ? find_held_lock+0x2c/0x110 [ 3357.300094] ? io_submit_sqes+0x8610/0x8610 [ 3357.300612] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3357.301182] ? wait_for_completion_io+0x270/0x270 [ 3357.301749] ? rcu_read_lock_any_held+0x75/0xa0 [ 3357.302259] ? vfs_write+0x354/0xb10 [ 3357.302666] ? fput_many+0x2f/0x1a0 [ 3357.303000] ? ksys_write+0x1a9/0x260 [ 3357.303345] ? __ia32_sys_read+0xb0/0xb0 [ 3357.303707] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3357.304166] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3357.304625] do_syscall_64+0x33/0x40 [ 3357.304967] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3357.305427] RIP: 0033:0x7fd311e28b19 10:08:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3357.305750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3357.307491] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3357.308077] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3357.308627] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3357.309147] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3357.309689] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3357.310212] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:08:00 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x40000000) 10:08:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r2, 0xc01, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x0) 10:08:00 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x30, r0, 0x8000000) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:08:00 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 93) [ 3357.676322] FAULT_INJECTION: forcing a failure. [ 3357.676322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3357.680102] CPU: 1 PID: 15834 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3357.681856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3357.684616] Call Trace: [ 3357.685308] dump_stack+0x107/0x167 [ 3357.686273] should_fail.cold+0x5/0xa [ 3357.687505] _copy_to_iter+0x264/0x12d0 [ 3357.688506] ? chacha_block_generic+0x13e/0x200 [ 3357.689692] ? chacha_permute+0x6f0/0x6f0 [ 3357.690849] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3357.692176] get_random_bytes_user+0x173/0x3b0 [ 3357.693447] ? get_random_u32+0x670/0x670 [ 3357.694729] ? wait_for_random_bytes+0x91/0xe0 [ 3357.695938] ? security_file_permission+0xb1/0xe0 [ 3357.697330] ? get_random_bytes_user+0x3b0/0x3b0 [ 3357.698506] random_read_iter+0x65/0x140 [ 3357.699896] io_read+0x2dc/0x11e0 [ 3357.700693] ? kiocb_done+0xc90/0xc90 [ 3357.701937] ? mark_lock+0xf5/0x2df0 [ 3357.703854] ? lock_chain_count+0x20/0x20 [ 3357.705038] ? stack_trace_consume_entry+0x160/0x160 [ 3357.706794] ? lock_acquire+0x197/0x470 [ 3357.707157] ? __lock_acquire+0xbb1/0x5b00 [ 3357.708737] io_issue_sqe+0x2e8a/0x77b0 [ 3357.709918] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3357.711444] ? SOFTIRQ_verbose+0x10/0x10 [ 3357.712795] ? lock_chain_count+0x20/0x20 [ 3357.713774] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3357.715159] ? io_connect+0x610/0x610 [ 3357.716202] ? lock_acquire+0x197/0x470 [ 3357.717121] ? find_held_lock+0x2c/0x110 [ 3357.718153] ? __fget_files+0x2cf/0x520 [ 3357.719371] ? lock_downgrade+0x6d0/0x6d0 [ 3357.720365] __io_queue_sqe+0x90/0x9d0 [ 3357.721385] ? io_issue_sqe+0x77b0/0x77b0 [ 3357.722357] ? __fget_files+0x2f8/0x520 [ 3357.722879] ? io_prep_rw+0x7f5/0x1050 [ 3357.723396] io_submit_sqes+0x44aa/0x8610 [ 3357.723823] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3357.724401] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3357.724931] ? lock_downgrade+0x6d0/0x6d0 [ 3357.725482] ? find_held_lock+0x2c/0x110 [ 3357.725964] ? io_submit_sqes+0x8610/0x8610 [ 3357.726565] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3357.727705] ? wait_for_completion_io+0x270/0x270 [ 3357.728839] ? rcu_read_lock_any_held+0x75/0xa0 [ 3357.729951] ? vfs_write+0x354/0xb10 [ 3357.731085] ? fput_many+0x2f/0x1a0 [ 3357.732062] ? ksys_write+0x1a9/0x260 [ 3357.733192] ? __ia32_sys_read+0xb0/0xb0 [ 3357.734404] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3357.735892] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3357.737398] do_syscall_64+0x33/0x40 [ 3357.738439] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3357.739816] RIP: 0033:0x7fd311e28b19 [ 3357.740826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3357.745872] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3357.748037] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3357.750048] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3357.752089] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3357.753976] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3357.756055] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:08:16 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 94) 10:08:16 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) flistxattr(r3, &(0x7f0000000340)=""/136, 0x88) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:08:16 executing program 4: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x4, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc35c}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xca6}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xfffffffb}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) write$binfmt_elf64(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x4, 0x0, 0x45, 0x5, 0x3, 0x6, 0x80000000, 0x200, 0x40, 0xa, 0x400, 0x3ff, 0x38, 0x1, 0x100, 0x2, 0x887}, [{0x3, 0xfffffffb, 0x87, 0x6, 0xff8000000000, 0xba9, 0xff}, {0x7, 0xfffffffc, 0x0, 0x400, 0x100000000, 0x1, 0x40, 0xd5}], "dfd770a870153e18162b8fba71decf7663d270af451f963af5740a8de3591410e821a47512db089cffe4c77d1a7774e274feb73f04c54b21d37feac4ee35837b53f171f51630233016016ebc05366e806d763ed6b62868d78647f59b8b037daf52fde77f309794267b711a3a2961f97ca082dd6d1aa6079cd8961a93ec90fd88f14f266f4fbd0432b9b6112a277e78c9a2af9ab1ca5f76bd18b6b4f1633d06cafc4d1f0b2b706635aaa1f8f3fe53695edb3cfbf40d947b7b5cc7178a5181063ccaee862806397101c366b64dd6bcc6912a13aede158750bbb797c6a1b9d097eb94752f", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x693) lseek(r0, 0x800, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendfile(r0, r2, 0x0, 0x100000001) 10:08:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:08:16 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x1200, 0x0, 0x0, 0x0) 10:08:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40006, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fd2f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x3, &(0x7f0000000140)=ANY=[]) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r4}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat$cgroup_ro(r3, &(0x7f0000001080)='memory.stat\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000011c0)={'syztnl1\x00', &(0x7f00000010c0)={'gretap0\x00', 0x0, 0x1, 0x0, 0x40e9, 0xa000000, {{0x2f, 0x4, 0x1, 0x3, 0xbc, 0x68, 0x0, 0x0, 0x29, 0x0, @private=0xa010102, @private, {[@end, @ssrr={0x89, 0x2b, 0x33, [@local, @private=0xa010100, @multicast1, @broadcast, @broadcast, @remote, @local, @empty, @multicast1, @empty]}, @cipso={0x86, 0x7c, 0xffffffffffffffff, [{0x3, 0x3, "b0"}, {0x1, 0x9, "f8afd8bf08c322"}, {0xd2c92eaf52eb303f, 0xb, "40ed755efc512b77ed"}, {0x1, 0x8, "161b469e18be"}, {0x6, 0xd, "040cdd1dc8124df1c561b5"}, {0x2, 0xa, "75f61be610e50300"}, {0x5, 0x12, "794c840a742df8db38a161be676de911"}, {0x6, 0x10, "e0cb16f360e10108c826508fa8b0"}, {0x2, 0xf, "d3342aeb5bc55582ccf8d311f0"}, {0x0, 0xf, "3e772d7ce73d3d31405eaff11a"}]}]}}}}}) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd_index=0x4, 0xff3, 0x7, 0x1, 0x29, 0x1, {0x1}}, 0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4126, 0x101e, 0x2800) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 10:08:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x48000000) 10:08:16 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0xa61e, 0x1, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:08:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x5201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:08:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x4c000000) [ 3373.484517] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 3373.491249] FAULT_INJECTION: forcing a failure. [ 3373.491249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3373.492484] CPU: 0 PID: 15853 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3373.493191] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3373.493946] Call Trace: [ 3373.494253] dump_stack+0x107/0x167 10:08:16 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x77}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 3373.494628] should_fail.cold+0x5/0xa [ 3373.495039] _copy_to_iter+0x264/0x12d0 [ 3373.495422] ? chacha_block_generic+0x13e/0x200 [ 3373.496029] ? chacha_permute+0x6f0/0x6f0 [ 3373.496422] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3373.496894] get_random_bytes_user+0x173/0x3b0 [ 3373.497432] ? get_random_u32+0x670/0x670 [ 3373.497822] ? wait_for_random_bytes+0x91/0xe0 [ 3373.498315] ? security_file_permission+0xb1/0xe0 [ 3373.498833] ? get_random_bytes_user+0x3b0/0x3b0 [ 3373.499374] random_read_iter+0x65/0x140 [ 3373.499801] io_read+0x2dc/0x11e0 [ 3373.500226] ? kiocb_done+0xc90/0xc90 [ 3373.500630] ? mark_lock+0xf5/0x2df0 [ 3373.501089] ? lock_chain_count+0x20/0x20 [ 3373.501539] ? stack_trace_consume_entry+0x160/0x160 [ 3373.502132] ? lock_acquire+0x197/0x470 [ 3373.502554] ? __lock_acquire+0xbb1/0x5b00 [ 3373.502964] io_issue_sqe+0x2e8a/0x77b0 [ 3373.503387] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3373.503869] ? SOFTIRQ_verbose+0x10/0x10 [ 3373.504294] ? lock_chain_count+0x20/0x20 [ 3373.504682] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3373.505238] ? io_connect+0x610/0x610 [ 3373.505595] ? lock_acquire+0x197/0x470 [ 3373.505961] ? find_held_lock+0x2c/0x110 [ 3373.506398] ? __fget_files+0x2cf/0x520 [ 3373.506826] ? lock_downgrade+0x6d0/0x6d0 [ 3373.507310] __io_queue_sqe+0x90/0x9d0 [ 3373.507724] ? io_issue_sqe+0x77b0/0x77b0 [ 3373.508205] ? __fget_files+0x2f8/0x520 [ 3373.508622] ? io_prep_rw+0x7f5/0x1050 [ 3373.509092] io_submit_sqes+0x44aa/0x8610 [ 3373.509557] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3373.510131] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3373.510639] ? lock_downgrade+0x6d0/0x6d0 [ 3373.511082] ? find_held_lock+0x2c/0x110 [ 3373.511475] ? io_submit_sqes+0x8610/0x8610 [ 3373.511879] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3373.512383] ? wait_for_completion_io+0x270/0x270 [ 3373.512837] ? rcu_read_lock_any_held+0x75/0xa0 [ 3373.513355] ? vfs_write+0x354/0xb10 [ 3373.513703] ? fput_many+0x2f/0x1a0 [ 3373.514097] ? ksys_write+0x1a9/0x260 [ 3373.514451] ? __ia32_sys_read+0xb0/0xb0 [ 3373.514852] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3373.515387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3373.515893] do_syscall_64+0x33/0x40 [ 3373.516291] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3373.516764] RIP: 0033:0x7fd311e28b19 [ 3373.517187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3373.518972] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3373.519722] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3373.520426] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3373.521154] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3373.521818] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3373.522528] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 [ 3373.539356] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 10:08:17 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x1, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r8, 0x540a, 0x3) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, {0x80}, 0x1, {0x0, r9}}, 0xfff) 10:08:17 executing program 7: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x8, 0x80, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x684, 0x7f, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001400)=""/226) r0 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/239) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x2000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 10:08:17 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 95) 10:08:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) [ 3373.863894] FAULT_INJECTION: forcing a failure. [ 3373.863894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3373.865142] CPU: 1 PID: 15879 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3373.865808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3373.866640] Call Trace: [ 3373.866922] dump_stack+0x107/0x167 [ 3373.867296] should_fail.cold+0x5/0xa [ 3373.867684] _copy_to_iter+0x264/0x12d0 [ 3373.868104] ? chacha_block_generic+0x13e/0x200 [ 3373.868567] ? chacha_permute+0x6f0/0x6f0 [ 3373.869013] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3373.869490] get_random_bytes_user+0x173/0x3b0 [ 3373.870174] ? get_random_u32+0x670/0x670 [ 3373.870601] ? wait_for_random_bytes+0x91/0xe0 [ 3373.871666] ? security_file_permission+0xb1/0xe0 [ 3373.872157] ? get_random_bytes_user+0x3b0/0x3b0 [ 3373.873269] random_read_iter+0x65/0x140 [ 3373.874200] io_read+0x2dc/0x11e0 [ 3373.875030] ? kiocb_done+0xc90/0xc90 [ 3373.875899] ? mark_lock+0xf5/0x2df0 [ 3373.876768] ? lock_chain_count+0x20/0x20 [ 3373.877722] ? stack_trace_consume_entry+0x160/0x160 [ 3373.878921] ? lock_acquire+0x197/0x470 [ 3373.879836] ? __lock_acquire+0xbb1/0x5b00 [ 3373.880815] io_issue_sqe+0x2e8a/0x77b0 [ 3373.881723] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3373.882933] ? SOFTIRQ_verbose+0x10/0x10 [ 3373.883852] ? lock_chain_count+0x20/0x20 [ 3373.884804] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3373.886032] ? io_connect+0x610/0x610 [ 3373.887434] ? lock_acquire+0x197/0x470 [ 3373.887914] ? find_held_lock+0x2c/0x110 [ 3373.889395] ? __fget_files+0x2cf/0x520 [ 3373.889842] ? lock_downgrade+0x6d0/0x6d0 [ 3373.890347] __io_queue_sqe+0x90/0x9d0 [ 3373.890802] ? io_issue_sqe+0x77b0/0x77b0 [ 3373.893287] ? __fget_files+0x2f8/0x520 [ 3373.893707] ? io_prep_rw+0x7f5/0x1050 [ 3373.894359] io_submit_sqes+0x44aa/0x8610 [ 3373.894810] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3373.897304] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3373.897778] ? lock_downgrade+0x6d0/0x6d0 [ 3373.899324] ? find_held_lock+0x2c/0x110 [ 3373.899743] ? io_submit_sqes+0x8610/0x8610 [ 3373.900187] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3373.901759] ? wait_for_completion_io+0x270/0x270 [ 3373.903332] ? rcu_read_lock_any_held+0x75/0xa0 [ 3373.903827] ? vfs_write+0x354/0xb10 [ 3373.904205] ? fput_many+0x2f/0x1a0 [ 3373.905534] ? ksys_write+0x1a9/0x260 [ 3373.906606] ? __ia32_sys_read+0xb0/0xb0 [ 3373.907033] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3373.907953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3373.909515] do_syscall_64+0x33/0x40 [ 3373.914626] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3373.927019] RIP: 0033:0x7fd311e28b19 [ 3373.927447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3373.929334] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3373.930098] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3373.930825] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3373.931544] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3373.932272] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3373.933014] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:08:33 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(r3, &(0x7f0000000040)='./file0\x00', 0x400000, 0x8e) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:08:33 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x1800, 0x0, 0x0, 0x0) 10:08:33 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 96) 10:08:33 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') readv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00'}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xe8) bind$packet(r5, &(0x7f0000000180)={0x11, 0x10, r7, 0x1, 0xce, 0x6, @broadcast}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'veth0_to_bond\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4f, r4}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x8001) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/notes', 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="60010000100001000000000000000000ff020000000000000000000000000001fc00000000000000000000000000000000000000000000000000000007000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) 10:08:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:08:33 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000440)) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000000c0)=""/19, &(0x7f0000000140)=0x13) ftruncate(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'bridge_slave_0\x00', &(0x7f0000000180)=@ethtool_modinfo}) pread64(r2, &(0x7f00000002c0)=""/205, 0xcd, 0x9) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000600)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {}, [{}, {0x2, 0x6}], {0x4, 0x2}, [{}, {0x8, 0x3}, {0x8, 0x1, r4}, {0x8, 0x1}], {0x10, 0x4}, {0x20, 0x4}}, 0x54, 0x3) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000700)=""/224, 0xe0, 0xffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'xfrm0\x00', &(0x7f00000003c0)=@ethtool_gfeatures={0x3a, 0x7, [{}, {}, {}, {}, {}, {}, {}]}}) 10:08:33 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000006c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0xb6d7, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x1, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)="7c8efcc40aac5f77f972fe9297f08da87e77c6bfb6c99beeecaa40d34a5c74ba95018894426a20a8d3946f9d142f4b4f3d9475cec95c0bdec0f6d63e40cfd1b4e506172ee86bd7d6e049025c476a30bbd1716f1e8995ee7a6cebc67e5f7d23a68c6f8ee4904c3835cad303174971aaa72446f982ffba7d0163cfe7238e5ecfea05afca5f2b555e368eedf2492178a1921d0c1fc935dca7e1818977d191330aa4d689bf1dd7dca81fb740adfc997cfe086017f386ce7f7a40f3d3d242682e4b4ac6c36c7c9d736144318036d02c8f62b13a667c778940363ce43eaee0c24356133704984fcb4c216348978a69f67fcd8591c0aa", 0xf3, 0x8010, 0x1, {0x0, r8}}, 0x23) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x2, 0x2004, @fd=r3, 0x5, &(0x7f0000000640)=[{&(0x7f0000000340)="1f06c85e4816e331b5dd666bc90fc39fd3043abf799d20a462d5fe56b568eaa1ab7e24bd0f023251026d47236234a5af3cf946888fd17a296de6a128268ece07c6f82cda7f4c5ce70587c7adef3e5fffcd2cb647c17ed6e27ffff2c6bbe5927414f442bbdf1721771acf2293668c8fbfec8ca94fcf2daa2a57af9f878465e72cc18a618c135c700467f2", 0x8a}, {&(0x7f0000000040)="bf29a96da011c9ab9663eb6e030c26f014399ff9f65c16258dda7891ce26fbb95e7bb1ce58d76cde367b36b679d02cace9f784916bae6cfbf2f96beb1816875ce45f3e66a7a53a62e0eb83bab0a5eca0e5ba7c1a3ddc1c5bf740dcdf4dee8108a3", 0x61}, {&(0x7f0000000480)="9f023c37657db0fddee56b1adb97bf89d14414a0f7d5d5772adc7c49855f7bf7f83d5607d4d99d03daf7482d03c330e2eaee3300897918f21d0050ebcf096eaac0f40feed2820471b90fdc8bccbb34745f07c20214e3458888205a0ce0ca7ffde71bec0671ffa31282ecb60cd7425c3d8bab2cd40b2123e636a0b64e2185b28ea5227ae23553e7a55a0c5800304a12202fd57b190c70270281", 0x99}, {&(0x7f00000001c0)="661bbbbd", 0x4}, {&(0x7f0000000240)="45707ea83380481c6e6c34fb798bbeffc3a1a7d5bf2f28e9d0e3f62d6fb9779807c3309876da91d66efcdbdf877fbd8993e3a441204ead6e8f0a", 0x3a}, {&(0x7f0000000280)="db0625153c0108df7e43c3dbd8c9fa5db52294b913ab2ed7754a330d9b", 0x1d}, {&(0x7f0000000540)="7f8ba239f8a3793c035304153091a1a8eff499708bbad10abc7119b05d9e4993d8dbb942fc60d47827efc2f48a780cb8737b8d06618b46b829b8c54e857c760cc5ca644f79f7e7311067691b9cace464b4dc7916381def95b8884cab6e2ef1c393668495a184167ec816f9f83a6bea85c5466402e9a3b58178eeb6c5cf771560774a25c9f4b083f8e48c551e39c23030b263317d14865655ed7d6f8da5df860c67b7644c9336dd0da4a9f545d36ee2b4eaa64686a258832ffb2d385bcd6c022830d27f7d998426d4b2f6e3cf62580b22b17457af293b4b67996df862febcc76c30ce8cb73d0efbf0c0d532d4763648b47e671a81854068", 0xf7}], 0x7, 0x5, 0x1, {0x0, r8}}, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:08:33 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x68000000) 10:08:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:08:34 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r3}}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x10a}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:08:34 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x24b, &(0x7f0000000040)={0x0, 0x7bbc, 0x1, 0x2, 0x4b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="7c8efcc40aac5f77f972fe9297f08da87e77c6bfb6c99beeecaa40d34a5c74ba95018894426a20a8d3946f9d142f4b4f3d9475cec95c0bdec0f6d63e40cfd1b4e506172ee86bd7d6e049025c476a30bbd1716f1e8995ee7a6cebc67e5f7d23a68c6f8ee4904c3835cad303174971aaa72446f982ffba7d0163cfe7238e5ecfea05afca5f2b555e368eedf2492178a1921d0c1fc935dca7e1818977d191330aa4d689bf1dd7dca81fb740adfc997cfe086017f386ce7f7a40f3d3d242682e4b4ac6c36c7c9d736144318036d02c8f62b13a667c778940363ce43eaee0c24356133704984fcb4c216348978a69f67fcd8591c0aa", 0xf3, 0x8010, 0x1, {0x0, r5}}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r5}}, 0x3) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r5}}, 0x6c0) r6 = syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r3, r2, &(0x7f0000000540)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r5}}, 0x10008) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) pread64(r6, &(0x7f0000000480)=""/144, 0x90, 0x10000) 10:08:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:08:34 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x6c000000) [ 3390.725423] FAULT_INJECTION: forcing a failure. [ 3390.725423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3390.726742] CPU: 1 PID: 15915 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3390.727384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3390.728148] Call Trace: [ 3390.728402] dump_stack+0x107/0x167 [ 3390.728747] should_fail.cold+0x5/0xa [ 3390.729102] _copy_from_user+0x2e/0x1b0 [ 3390.729477] iovec_from_user+0x141/0x400 [ 3390.729868] __import_iovec+0x67/0x590 [ 3390.730246] io_import_iovec+0x581/0x1120 [ 3390.730642] ? io_complete_rw+0x230/0x230 [ 3390.731059] ? kiocb_done+0x16b/0xc90 [ 3390.731420] io_read+0xe14/0x11e0 [ 3390.731759] ? kiocb_done+0xc90/0xc90 [ 3390.732120] ? mark_lock+0xf5/0x2df0 [ 3390.732472] ? lock_chain_count+0x20/0x20 [ 3390.732869] ? stack_trace_consume_entry+0x160/0x160 [ 3390.733314] ? lock_acquire+0x197/0x470 [ 3390.733649] ? __lock_acquire+0xbb1/0x5b00 [ 3390.734023] io_issue_sqe+0x2e8a/0x77b0 [ 3390.734395] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3390.734887] ? SOFTIRQ_verbose+0x10/0x10 [ 3390.735267] ? lock_chain_count+0x20/0x20 [ 3390.735654] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3390.736135] ? io_connect+0x610/0x610 [ 3390.736489] ? lock_acquire+0x197/0x470 [ 3390.736852] ? find_held_lock+0x2c/0x110 [ 3390.737240] ? __fget_files+0x2cf/0x520 [ 3390.737602] ? lock_downgrade+0x6d0/0x6d0 [ 3390.737984] __io_queue_sqe+0x90/0x9d0 [ 3390.738383] ? io_issue_sqe+0x77b0/0x77b0 [ 3390.738747] ? __fget_files+0x2f8/0x520 [ 3390.739086] ? io_prep_rw+0x7f5/0x1050 [ 3390.739422] io_submit_sqes+0x44aa/0x8610 [ 3390.739793] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3390.740217] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3390.740628] ? lock_downgrade+0x6d0/0x6d0 [ 3390.740977] ? find_held_lock+0x2c/0x110 [ 3390.741345] ? io_submit_sqes+0x8610/0x8610 [ 3390.741812] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3390.742225] ? wait_for_completion_io+0x270/0x270 [ 3390.742635] ? rcu_read_lock_any_held+0x75/0xa0 [ 3390.743109] ? vfs_write+0x354/0xb10 [ 3390.743426] ? fput_many+0x2f/0x1a0 [ 3390.743734] ? ksys_write+0x1a9/0x260 [ 3390.744055] ? __ia32_sys_read+0xb0/0xb0 [ 3390.744400] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3390.744839] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3390.745273] do_syscall_64+0x33/0x40 [ 3390.745586] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3390.746016] RIP: 0033:0x7fd311e28b19 [ 3390.746334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3390.747886] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3390.748529] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3390.749127] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3390.749728] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3390.750329] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3390.750943] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:08:49 executing program 7: rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) pselect6(0x40, &(0x7f00000013c0)={0xc1b2, 0xfffffffffffffeff, 0xffffffffffffff38, 0x9d, 0x5, 0x5, 0x8}, &(0x7f0000001400)={0x0, 0x9, 0x4ffb, 0x7, 0x0, 0x3f, 0x6}, &(0x7f0000001440)={0xe5, 0x38c00000, 0x0, 0x4, 0x1, 0x401, 0x81, 0x104c0cd1}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, 0x0, 0x0) quotactl(0x2, &(0x7f0000001340)='./file0\x00', r3, &(0x7f0000001380)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20200, 0x80) fchmod(0xffffffffffffffff, 0x30) close_range(r2, r0, 0x0) mmap$perf(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x10, 0xffffffffffffffff, 0x2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000001c0)={{0x9, 0x6}, 0x100, './file0\x00'}) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x0, 0x24, 0x1, 0x3, 0x0, 0xfe2d, 0x0, 0x1d}}) unshare(0x48020200) 10:08:49 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x1e00, 0x0, 0x0, 0x0) 10:08:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:08:49 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x0, &(0x7f0000000480)="14f4cde10d95ed6c6155f1ae423be16ffda2e81b65fc667a4dab26621b89998c081f1c5c2f1b03074a8b8383d28f90ecd1b056c866897c3f6fee563d95408c4021c00dace93b386cc654f174fd80f2fe47adc7f01fe21bd5e4cbf019fa273c03575985ed6375b0f339c78bab83938b94daf1fc2a7bcd816f77cd584d6b75a96e45cabcd258540069252a4d2349a5422e38533070f2298e2fe13a66175bce9828e0681845b8d5489f9ec53394e57b", 0xae, 0x12}, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x140480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0xa673, 0x0, 0x3, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) syz_io_uring_setup(0x4707, &(0x7f0000000540)={0x0, 0x2027, 0x1, 0x2, 0x2b2, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 97) 10:08:49 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYBLOB="f6a925c87000fedbdf25090000005000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007767320000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970365f7674693000000000000000001400020076657468305f746f5f626f6e640000005800018008000100", @ANYRES32=0x0, @ANYBLOB="14000200767863616e3100000000000000000000140002006e72300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e31000000000000000000000008000100", @ANYRES32=r1, @ANYBLOB], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x24040101) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0}, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000002) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$sock(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000080)="490e48815f0ab5a9d8f05456101448c3b65c5bbc211533df8a99b556312a1135c0ff5942f2bf265671d054c4f6f66f966f151886ee9001603e3ce176859f07ff4f0b59cc90adec1f77e3bd66f55bf80c391b6e", 0x53}, {&(0x7f0000000200)="d72e1f86bdc920c586cd87cce95082be97", 0x11}, {&(0x7f00000002c0)="4db5a7670dc38bff4f4c2542beee6c91ba3c2aae4c7185aaf80113e45dcd6b028d50d0feb67555013f233ec0edc8a5281ee13789d75c7311f82fabec75e035ef", 0x40}, {&(0x7f0000000580)="746bdc59f6ecc17320add2fc21d2766bdc3e0a4057be0c1ae1dc24106daaaa66760fdbfff3da90dc57a68de73972fe8e0c7d4a5583e9f6f56fc7ea305b3889883e2b26be920f3a4c7904c53341bac37784e892cb730a84b44f6c1181deb5b57edd17b936d30ca90e6b76b5572f8cc243614d9b593b883b9f00eda487faaef36e4756a1f032dd28b955929706b6efebfeec6a7924526f2c97d7b2a6d65017ea138584cf7d6983ceae05aca35f7ca80987c8dbe3d12750f20bde03492436", 0xbd}, {&(0x7f0000000840)="37c6f58a8d0358d0ef34d5349969b68c2eaf035e1602cdfb7840a66e9d284e63a52066acae0bf27db3663b3b85a894eda894d00841923cab2f101438f4e62214f140e9879a8f71f94e9b0f92ff4ffca3d52a1fcdbc33f28b6f6eccdd289238ab167e37fd3fab286bf51dd7191e022525c33d26655174e1cda6462db5ee72e400527233972c40b0881f8275c845e388453fd5f2c77763a726e0ef33cd4ff20f5154ed3ba5f1f94285273a48061a7c25b13958a72c08b390c2c1eb8a8852599dd903f931ed39baeef53349a11bcae254980ee8511958a118092718ed815df385e4d97f433200e9743048f6434da8618c3b31d9cdddc6eae2d964", 0xf9}, {&(0x7f0000000640)="b3d2b91dcf8b91402de372083ebd8de2d98ce80b0b6c87f4e3cff517f746a6a5895d5facfbc41f18769df15dfdd87ee25013aeee6aa56f72067b9c9f69d3de1ef8eb9ef0e5b5cdeb77d11c4e835d2f9bf5be07e79abec8b570eb112f90ac7e50e0b4f764b199b61e1c085935495eda5d9864bce6f88803e1f640be0cc9c388d9a76ed223dc389228a474b3a1bb6feb55d3d0a96d", 0x94}, {&(0x7f0000000940)="44905beb9cfd00b8654e2ba0fdb01c2ee9b439d6c8d4b2ec559fc55eec905e2e9364fe1423624c4ab6b0c5e29cc015589a079990e7684ed3c3fa51e8a9564e4fb5d730af5dbd1d79fd54546b92c434a7e42893ed920eed4b2f3c206a0acc6b4ab63d859ec49d597821035de06953ea10a0e96ff94e501906b42075161a6b6be5cdc9688373f5e2448891cdfb3061ac5cb9d10c884ba98e4c5c95745c4b1775e87188a334c910a3afcff93a2734733a23d8f5d42aa24b0d335ac6017366ccc986f53c6adcfa51cd826552d6b73eae8f4955b9c8bc006466e017b996412513b5f8cd21e904d175", 0xe6}], 0x7}}], 0x1, 0x20000000) ftruncate(0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r4, 0x800, 0x0) openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) 10:08:49 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x74000000) 10:08:49 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1}) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:08:49 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x20000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x540a, 0x3) dup(r4) 10:08:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:08:50 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x7a000000) [ 3406.796452] FAULT_INJECTION: forcing a failure. [ 3406.796452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3406.797762] CPU: 1 PID: 15951 Comm: syz-executor.0 Not tainted 5.10.223 #1 [ 3406.798475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3406.799336] Call Trace: [ 3406.799632] dump_stack+0x107/0x167 [ 3406.800036] should_fail.cold+0x5/0xa [ 3406.800452] _copy_to_iter+0x264/0x12d0 [ 3406.801468] ? chacha_block_generic+0x13e/0x200 [ 3406.802594] ? chacha_permute+0x6f0/0x6f0 [ 3406.803895] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3406.805082] get_random_bytes_user+0x173/0x3b0 [ 3406.806151] ? get_random_u32+0x670/0x670 [ 3406.807112] ? wait_for_random_bytes+0x91/0xe0 [ 3406.808189] ? security_file_permission+0xb1/0xe0 [ 3406.809302] ? get_random_bytes_user+0x3b0/0x3b0 [ 3406.810409] random_read_iter+0x65/0x140 [ 3406.811432] io_read+0x2dc/0x11e0 [ 3406.812333] ? kiocb_done+0xc90/0xc90 [ 3406.813229] ? mark_lock+0xf5/0x2df0 [ 3406.814393] ? lock_chain_count+0x20/0x20 [ 3406.815464] ? stack_trace_consume_entry+0x160/0x160 [ 3406.816783] ? lock_acquire+0x197/0x470 [ 3406.817787] ? __lock_acquire+0xbb1/0x5b00 [ 3406.819021] io_issue_sqe+0x2e8a/0x77b0 [ 3406.819957] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3406.821176] ? SOFTIRQ_verbose+0x10/0x10 [ 3406.825972] ? lock_chain_count+0x20/0x20 [ 3406.827530] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3406.829020] ? io_connect+0x610/0x610 [ 3406.830262] ? lock_acquire+0x197/0x470 [ 3406.831413] ? find_held_lock+0x2c/0x110 [ 3406.832357] ? __fget_files+0x2cf/0x520 [ 3406.833343] ? lock_downgrade+0x6d0/0x6d0 [ 3406.834495] __io_queue_sqe+0x90/0x9d0 [ 3406.835584] ? io_issue_sqe+0x77b0/0x77b0 [ 3406.836553] ? __fget_files+0x2f8/0x520 [ 3406.837652] ? io_prep_rw+0x7f5/0x1050 [ 3406.838804] io_submit_sqes+0x44aa/0x8610 [ 3406.839869] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3406.841199] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3406.842463] ? lock_downgrade+0x6d0/0x6d0 [ 3406.843673] ? find_held_lock+0x2c/0x110 [ 3406.844785] ? io_submit_sqes+0x8610/0x8610 [ 3406.846076] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3406.847744] ? wait_for_completion_io+0x270/0x270 [ 3406.848978] ? rcu_read_lock_any_held+0x75/0xa0 [ 3406.850327] ? vfs_write+0x354/0xb10 [ 3406.851389] ? fput_many+0x2f/0x1a0 [ 3406.852340] ? ksys_write+0x1a9/0x260 [ 3406.853341] ? __ia32_sys_read+0xb0/0xb0 [ 3406.854301] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3406.855503] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3406.856664] do_syscall_64+0x33/0x40 [ 3406.857476] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3406.860947] RIP: 0033:0x7fd311e28b19 [ 3406.861859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3406.867192] RSP: 002b:00007fd30f39e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3406.869313] RAX: ffffffffffffffda RBX: 00007fd311f3bf60 RCX: 00007fd311e28b19 [ 3406.871452] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3406.873467] RBP: 00007fd30f39e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3406.875388] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 3406.877236] R13: 00007ffe552633df R14: 00007fd30f39e300 R15: 0000000000022000 10:08:50 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$inet6(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 10:08:50 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x8000000000000) 10:08:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}]}]}, 0x16c}}, 0x0) 10:08:50 executing program 1: r0 = syz_io_uring_setup(0x6259, &(0x7f00000002c0)={0x0, 0x3, 0x8}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001080)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000001240)={0x2000}}, 0x23) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1, 0x0, 0x0, {0x0, r3}}, 0x0) syz_io_uring_setup(0x18a, &(0x7f0000000740)={0x0, 0xfffffff8, 0x0, 0x2, 0x20000200}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) bind$unix(0xffffffffffffffff, &(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x9) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x440000, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000001280), 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000001180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000011c0)=@nfc_llcp={0x27, 0x0, 0x2, 0x1, 0x4, 0x1, "93e9bb58d74eaf13d4dc113e95b3a469d5cedfca5ea31e1a4f0df700c74d539ad7bd6f7f5b1349cc4e408a2aded8954c2de444f7fffecdd9a6cbfd30bd0c76", 0x14}}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4126, 0x101e, 0x0) openat(r5, &(0x7f0000000080)='./file0\x00', 0x2400, 0x80) fchownat(r5, &(0x7f0000000080)='./file0\x00', 0xee01, 0x0, 0x400) 10:08:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xe) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001800000016e007ce78f9e2765220f4da96660e01cb18f9aa421b66d1b10669d6", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) syz_open_pts(r6, 0x200000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@isdn={0x22, 0x80, 0x7f, 0xd6, 0x7f}, 0x80, &(0x7f00000020c0)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000480)="085387ff2105ec747077751855affeca68bf07bf4dcc00844841a5dd849b3d691ebc5ea3310f0a34bb282320b4cda19bf7750a9988704c07705649e2f0b22718b5d50573e27663630643a594e51fc756b69af33a57a0d3e91a8d7e5f52be82c6f5ec756d890d78be8403b29b1529630e17d5def3f0e1d0d5ce90ce5ab0de40e73cee4d34bfca74cf122f3c9bde240766fb202e45a6e243bf", 0x98}, {&(0x7f0000000540)="05de163a3c9653a80fc78e6af3392322a84db622b0c50da00da335dbf52b5b79a0dde4a3dea46609d9da118107c9eaf1d75d9f76b6245770ab88a8ad1b88f14b0fdcf381b8692290db6249b669888930006526c71b5577bd2164d272f71817d1111aeeed22fc6407c77ff4d3413303a9095e11c9ef1c327f6ab99a728154fcd82596e9babc7dcb90213e6f1a977ecbb7d88fb500ce624e0f72a6784c7c77518bd8fa5dcdd900bc0f2553cd41126c37f32195233c804bcb", 0xb7}, {&(0x7f0000000600)="48cbf13ba613d4038a3fc393bfbd74f8db10a617b91b64241d410be6cdb80f12a3c28ce67b8b537bcf15160e0f003fb81e0957bb48c16a5263c6ed28d5c405d18e5979d28d7384f7e78a0ea4b8f8f11e67d533dea4f928bb3d1c0fda3a8a888da5b7ed8f32bf7bd51f723e5dfa63b6db9b8ced75ccc3185704b5a888d7bfd9438fbaa990efeafb1907176192149617cf59d08d8a005d3b24265654e3c12e6c1cad9734aa1f9142a5d87886fd66e0284005285feb9db336c4dac792073edfb124e35d80ac3f56cefc0b3ffb643d93c43457e2f749ead0666230dea648f440877874ab28d1c28bd59117add0629fc6dc41bb96842aac2ffd7134173e4d25", 0xfd}, {&(0x7f00000017c0)="1fb789e007ca46628bbc44d3d3ca8dfae9bc3c68b1bf69840255a8829b7e0b40f96058e8bc969fff62865fc84571e91e1cd77db50a9b3f211c6a0d8c18a988b005267aae042bb11c7a7b7cc32d48a67c34f15fbd782258a3bf3e41a898f24f92f250efc05c044be73e0312fb50a8139505643cf142ced4a4382e8a143bed5398ab715a7e432674f697ecf196d50c7ea4b85fccd8cc8ac920216d1281c1593cfa1219261c42053b515f62eda88cd0f6fa86a0d157cdc8dff8c7893d939d74835e1bfb53", 0xc3}, {&(0x7f0000000080)="901b67b86cf91118b9c3a6ea266a9e16b46e73c26353d4e91c6de2736ae894faac59e3e848c9d9d0a3d02ede34b102c2f0fc5932024820c02bafb4b2af9c", 0x3e}, {&(0x7f00000003c0)="f95f5613a255edd95d9760eb8d891129572b7bd876523d83286d6b103841d655523e535726af296cbe4e3f79249f952555ff30e9aed7b717626b994fcf41e3969deff66bca9b3efd56f1", 0x4a}, {&(0x7f00000018c0)="a126c1d558fac7472f2346ee47262d06d14d25e3e382d100650ceb2ba29967a8dbc02868294aeadfb460bab758914bb77c9649a3ba4f3c99147ba672a2032ca33fad79d8bd8514c75adbdd0dfe3232594c5182b0ab2f11cb7ab278a4cf45f7ca156ac1796e6e3c2732145d9cb274300316499efe6a06e738f754501eea09701f7e7d9594d10f4143b9ea5b497d507a15559a30bb85d55477e9ecb8763d6ffe6a45d01ed2b038cc09f845ec506762895443", 0xb1}, {&(0x7f00000021c0)="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", 0x140}, {&(0x7f0000001a80)="d1ebeed72df41b22264aecfb8f4487b446f3742d81c2a6164f378f13a8492847a01ebb5228985615d126e7ca8f638b407081227e349de058daee4073f139ba561c223d2f52b273cdddaca71c2c2ace038be04feadc20ea6f6a3bcab8a6e182ab4198c681f7fa7ab5ff2684544e754c49f5b4", 0x72}, {&(0x7f0000001b00)="bc8e14967460878e1904015c547e1ab3ffd753372a1b28a81ec9d84ac20243e67902f9a7ae391d296be5b69eef71fab8114c07fa4f897a18555c5738c5726ce6c52ca8d21a2cf0b8ec", 0x49}, {&(0x7f0000001c80)="a116cd0e768eb63acf6d303ebd3d0736fd7adf28e956ae7bec2923ab8698bd3a2790e093304b945d03f83239907717ccd39273748be92bb45093611d5ad11f3cd6fc4f19c1067c14da9d5db8d02be1d3eb3c3433bb357762740e3dff2d680e99cf19ca68b3ba8ded4426c18f81a30352315aa41444484ebb04ac5527b9854addfe4d45c2de9e7487251d", 0x8a}, {&(0x7f0000001b80)="a2e514c2f16c483c1c240c9bbffbd6832ef00dca65d5842bbf45e68d9444442f25cdc12d1f5e7e87270f3e8d08c3f4339748fd6a6de51faf345a69a89d1045a7e567793c1733c9fe5462dd9f31300ca9438b08b66bff740a567dd1f8f2475b9f18e765d73ffb0679", 0x68}, {&(0x7f0000001e80)="02e4c3c8c6a68df22adde1bd2cd799d5667c18f989ad68f810d2c0cf502ef2e92172b2a398e7d5a16ee863825a5dd0ebef12fe448cb23d3b1075a4b6a7be43142a876b7f365303fd1e645738957a874bf0e4d9f07ef5ef47c210fcc7", 0x5c}, {&(0x7f0000001f00)="6edf1cd9bbd54773f587cc4e38fc98411606aff2431a57a742ff87f6c7d5132e606cd40f6a0be15506a3a5a542e7d5dcb8ef2cf9ab48c644c12184a86740df049511a205a222a4dc57c9537a5e2f52fd2bdb14b8de4cd64ee5e761cbe485f7d73e91d0b0aa16e12b379779f726e45d7e22e57d3780d28b26bb77e75c61d0beaaa9c2a30c3c9e00022858984f241309285a09c9dc0bbec99d30c81c3080192f6b7f66999cce9912b997133f8ea2e0556aa4e2b899a795183fc7f5b4279d4b406d0e36ed0a31fe8b09bd762a85", 0xcc}, {&(0x7f0000002000)="661c04491ad06d703298a4b2cedc8553047f240c3b692a43502cac0b2db602afb8939ea4a0c1dc8d8bc96f8b4a1d643e4da177e19cc53f1e7f915d901e7255f14d9bdb0f5a97f9dd7e716f66f5378faa142e402a5a79dbd892ced3e01b27136a7031599f0e9fe223ad2899171a312b138a2d4c514a537d67021bbd719d696dbdf3df336e5ad5cd0478c794fd873694a6b571391814e6465b701efeb2ca7f9e13e41c64", 0xa3}], 0x10}, 0x0, 0x80, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r7}}, 0x3) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x7cb9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r7}}, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000740)={0x0, 0x2, 0x20, 0x0, 0x3cb, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0xf503, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:08:50 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000001080)=0x4) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) [ 3424.957867] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3424.959500] CPU: 0 PID: 271 Comm: syz-fuzzer Not tainted 5.10.223 #1 [ 3424.960283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3424.961192] Call Trace: [ 3424.961553] dump_stack+0x107/0x167 [ 3424.961967] dump_header+0x106/0x655 [ 3424.962434] oom_kill_process.cold+0x10/0x15 [ 3424.962932] out_of_memory+0x1149/0x1440 [ 3424.963451] ? oom_killer_disable+0x280/0x280 [ 3424.963959] ? mutex_trylock+0x237/0x2b0 [ 3424.964489] ? __alloc_pages_slowpath.constprop.0+0xa72/0x2170 [ 3424.965153] __alloc_pages_slowpath.constprop.0+0x1b63/0x2170 [ 3424.965874] ? lock_acquire+0xe7/0x470 [ 3424.966366] ? warn_alloc+0x190/0x190 [ 3424.966814] __alloc_pages_nodemask+0x51d/0x600 [ 3424.967395] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3424.968065] ? find_get_entry+0x2c8/0x740 [ 3424.968642] alloc_pages_current+0x187/0x280 [ 3424.969135] __page_cache_alloc+0x2d2/0x360 [ 3424.969673] pagecache_get_page+0x2c7/0xc80 [ 3424.970161] filemap_fault+0x177d/0x2210 [ 3424.970676] ? read_cache_page_gfp+0x30/0x30 [ 3424.971176] ? replace_page_cache_page+0x1200/0x1200 [ 3424.971823] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3424.972494] ext4_filemap_fault+0x87/0xc0 [ 3424.972975] __do_fault+0x113/0x410 [ 3424.973477] handle_mm_fault+0x1e53/0x3500 [ 3424.973976] ? find_held_lock+0x2c/0x110 [ 3424.974510] ? __pmd_alloc+0x5e0/0x5e0 [ 3424.974974] ? vmacache_find+0x55/0x2a0 [ 3424.975437] do_user_addr_fault+0x56e/0xc60 [ 3424.975863] exc_page_fault+0xa2/0x1a0 [ 3424.976289] ? asm_exc_page_fault+0x8/0x30 [ 3424.976701] asm_exc_page_fault+0x1e/0x30 [ 3424.977095] RIP: 0033:0x4547b0 [ 3424.977459] Code: Unable to access opcode bytes at RIP 0x454786. [ 3424.978033] RSP: 002b:000000c000309df8 EFLAGS: 00010202 [ 3424.978619] RAX: 000000c000020800 RBX: 000000c00009ca80 RCX: 0000000000000000 [ 3424.979360] RDX: 000000c000022f68 RSI: 000000c000309dd0 RDI: 0000000000000001 [ 3424.980040] RBP: 000000c000309e40 R08: 0000000000000d60 R09: 00007ffd2b7e2080 [ 3424.980763] R10: 00007ffd2b7e2090 R11: 000000000059c48a R12: 0000000000000003 [ 3424.981489] R13: 000000c000083080 R14: 0000031d529395f9 R15: 0000000000000000 [ 3424.982328] Mem-Info: [ 3424.982600] active_anon:8293 inactive_anon:61522 isolated_anon:0 [ 3424.982600] active_file:8 inactive_file:12 isolated_file:0 [ 3424.982600] unevictable:0 dirty:0 writeback:0 [ 3424.982600] slab_reclaimable:9870 slab_unreclaimable:207857 [ 3424.982600] mapped:69641 shmem:130 pagetables:2833 bounce:0 [ 3424.982600] free:3027 free_pcp:62 free_cma:0 [ 3424.985722] Node 0 active_anon:33172kB inactive_anon:246088kB active_file:32kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278564kB dirty:0kB writeback:0kB shmem:520kB writeback_tmp:0kB kernel_stack:5664kB all_unreclaimable? yes [ 3424.988013] Node 0 DMA free:6504kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3424.990633] lowmem_reserve[]: 0 1616 1616 1616 [ 3424.991145] Node 0 DMA32 free:5604kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:33172kB inactive_anon:246088kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660472kB mlocked:0kB pagetables:11332kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 3424.994528] lowmem_reserve[]: 0 0 0 0 [ 3424.995010] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6504kB [ 3424.996864] Node 0 DMA32: 965*4kB (UME) 125*8kB (UME) 35*16kB (UME) 4*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5548kB [ 3424.998622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3424.999686] 145 total pagecache pages [ 3425.000145] 0 pages in swap cache [ 3425.000588] Swap cache stats: add 0, delete 0, find 0/0 [ 3425.001252] Free swap = 0kB [ 3425.001602] Total swap = 0kB [ 3425.001971] 524158 pages RAM [ 3425.002370] 0 pages HighMem/MovableOnly [ 3425.002815] 105063 pages reserved [ 3425.003366] Unreclaimable slab info: [ 3425.004151] Name Used Total [ 3425.004942] pid_3 7KB 7KB [ 3425.005899] pid_2 67KB 101KB [ 3425.006996] IEEE-802.15.4-MAC 63KB 63KB [ 3425.008165] IEEE-802.15.4-RAW 63KB 63KB [ 3425.009345] p9_req_t 8KB 8KB [ 3425.010472] ip6-frags 15KB 15KB [ 3425.011603] fib6_nodes 28KB 28KB [ 3425.012700] ip6_dst_cache 41KB 41KB [ 3425.013820] PINGv6 63KB 63KB [ 3425.014934] RAWv6 346KB 346KB [ 3425.016047] UDPLITEv6 62KB 62KB [ 3425.017145] UDPv6 62KB 62KB [ 3425.018324] tw_sock_TCPv6 15KB 15KB [ 3425.019457] request_sock_TCPv6 7KB 7KB [ 3425.020601] TCPv6 62KB 62KB [ 3425.021740] scsi_sense_cache 8KB 8KB [ 3425.022861] sd_ext_cdb 3KB 3KB [ 3425.023994] virtio_scsi_cmd 16KB 16KB [ 3425.025109] sgpool-128 59KB 59KB [ 3425.026242] sgpool-64 63KB 63KB [ 3425.027402] sgpool-32 254KB 330KB [ 3425.028504] sgpool-16 82KB 82KB [ 3425.029603] sgpool-8 71KB 86KB [ 3425.030704] io_kiocb 321KB 337KB [ 3425.031848] mqueue_inode_cache 62KB 62KB [ 3425.032996] nfs_commit_data 15KB 15KB [ 3425.034091] nfs_write_data 47KB 47KB [ 3425.035154] jbd2_inode 7KB 7KB [ 3425.035712] ext4_system_zone 7KB 7KB [ 3425.036289] ext4_io_end_vec 7KB 7KB [ 3425.036801] ext4_bio_post_read_ctx 15KB 15KB [ 3425.037449] kioctx 31KB 31KB [ 3425.037985] aio_kiocb 7KB 7KB [ 3425.038541] dnotify_mark 7KB 7KB [ 3425.039125] dnotify_struct 7KB 7KB [ 3425.040350] dio 77KB 77KB [ 3425.041503] bio-2 4KB 4KB [ 3425.042610] fasync_cache 7KB 7KB [ 3425.043785] pid_namespace 7KB 7KB [ 3425.044894] posix_timers_cache 15KB 15KB [ 3425.046046] rpc_buffers 31KB 31KB [ 3425.048309] rpc_tasks 3KB 3KB [ 3425.055972] UNIX 314KB 448KB [ 3425.058110] ip4-frags 15KB 15KB [ 3425.058667] UDP-Lite 63KB 63KB [ 3425.059330] tcp_bind_bucket 8KB 8KB [ 3425.059970] inet_peer_cache 8KB 8KB [ 3425.060893] xfrm_state 32KB 32KB [ 3425.061584] ip_fib_trie 8KB 8KB [ 3425.062289] ip_fib_alias 15KB 15KB [ 3425.062911] ip_dst_cache 59KB 80KB [ 3425.063623] PING 62KB 62KB [ 3425.064331] RAW 125KB 125KB [ 3425.064966] UDP 327KB 409KB [ 3425.065619] tw_sock_TCP 15KB 15KB [ 3425.066299] request_sock_TCP 15KB 15KB [ 3425.066933] TCP 60KB 60KB [ 3425.067581] hugetlbfs_inode_cache 30KB 30KB [ 3425.068300] bio-1 11KB 11KB [ 3425.068931] eventpoll_pwq 27KB 27KB [ 3425.069614] eventpoll_epi 39KB 39KB [ 3425.070287] inotify_inode_mark 35KB 35KB [ 3425.070935] request_queue 60KB 60KB [ 3425.071611] blkdev_ioc 22KB 22KB [ 3425.072287] bio-0 112KB 168KB [ 3425.072910] biovec-max 854KB 1160KB [ 3425.073587] biovec-64 204KB 204KB [ 3425.074285] biovec-16 48KB 48KB [ 3425.074935] user_namespace 31KB 31KB [ 3425.075579] uid_cache 8KB 8KB [ 3425.076316] dmaengine-unmap-2 4KB 4KB [ 3425.076967] audit_buffer 7KB 7KB [ 3425.077697] skbuff_fclone_cache 60KB 67KB [ 3425.078437] skbuff_head_cache 945KB 1128KB [ 3425.079086] configfs_dir_cache 8KB 8KB [ 3425.079760] file_lock_cache 47KB 47KB [ 3425.080453] file_lock_ctx 7KB 7KB [ 3425.081093] fsnotify_mark_connector 24KB 24KB [ 3425.081843] net_namespace 172KB 172KB [ 3425.082536] task_delay_info 138KB 150KB [ 3425.083161] taskstats 100KB 100KB [ 3425.083721] proc_dir_entry 546KB 566KB [ 3425.084306] pde_opener 31KB 31KB [ 3425.084824] seq_file 49KB 56KB [ 3425.085407] sigqueue 59KB 59KB [ 3425.085938] shmem_inode_cache 1420KB 1477KB [ 3425.086525] kernfs_iattrs_cache 231KB 231KB [ 3425.087090] kernfs_node_cache 6231KB 6274KB [ 3425.088256] mnt_cache 275KB 275KB [ 3425.088862] filp 1039KB 1710KB [ 3425.089543] names_cache 4037KB 6217KB [ 3425.090163] hashtab_node 274KB 274KB [ 3425.090858] ebitmap_node 1149KB 1149KB [ 3425.091536] avtab_node 4976KB 4976KB [ 3425.092139] avc_node 35KB 35KB [ 3425.093003] lsm_inode_cache 3261KB 3383KB [ 3425.093613] lsm_file_cache 156KB 192KB [ 3425.094318] key_jar 70KB 70KB [ 3425.094951] uts_namespace 15KB 15KB [ 3425.095519] nsproxy 11KB 11KB [ 3425.096123] vm_area_struct 1318KB 1652KB [ 3425.096749] fs_cache 67KB 108KB [ 3425.097414] files_cache 237KB 350KB [ 3425.098040] signal_cache 477KB 586KB [ 3425.098718] sighand_cache 432KB 450KB [ 3425.099374] task_struct 1476KB 2021KB [ 3425.099888] cred_jar 108KB 228KB [ 3425.100479] anon_vma_chain 313KB 397KB [ 3425.101016] anon_vma 389KB 410KB [ 3425.101570] pid 72KB 97KB [ 3425.102105] Acpi-Operand 211KB 245KB [ 3425.102657] Acpi-ParseExt 31KB 31KB [ 3425.103275] Acpi-Parse 158KB 173KB [ 3425.103801] Acpi-State 165KB 181KB [ 3425.104386] Acpi-Namespace 24KB 24KB [ 3425.104893] numa_policy 7KB 7KB [ 3425.105476] trace_event_file 176KB 176KB [ 3425.106004] ftrace_event_field 280KB 280KB [ 3425.106563] pool_workqueue 48KB 48KB [ 3425.107110] task_group 16KB 16KB [ 3425.107692] mm_struct 402KB 472KB [ 3425.108267] vmap_area 133KB 133KB [ 3425.108792] page->ptl 293KB 389KB [ 3425.109376] kmemleak_scan_area 154KB 171KB [ 3425.109894] kmemleak_object 625781KB 625781KB [ 3425.110493] kmalloc-8k 4816KB 4992KB [ 3425.111053] kmalloc-4k 7472KB 9376KB [ 3425.111688] kmalloc-2k 6460KB 7072KB [ 3425.112387] kmalloc-1k 2632KB 3872KB [ 3425.112987] kmalloc-512 22000KB 22000KB [ 3425.113811] kmalloc-256 1383KB 1456KB [ 3425.114470] kmalloc-192 796KB 808KB [ 3425.115089] kmalloc-128 617KB 728KB [ 3425.115736] kmalloc-96 505KB 764KB [ 3425.116449] kmalloc-64 1110KB 1432KB [ 3425.117076] kmalloc-32 69844KB 69844KB [ 3425.117725] kmalloc-16 352KB 376KB [ 3425.118397] kmalloc-8 313KB 350KB [ 3425.119019] kmem_cache_node 47KB 47KB [ 3425.119636] kmem_cache 75KB 75KB [ 3425.120299] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=271,uid=0 [ 3425.124162] Out of memory (oom_kill_allocating_task): Killed process 255 (syz-fuzzer) total-vm:1241792kB, anon-rss:238844kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:980kB oom_score_adj:0 [ 3427.189200] oom_reaper: reaped process 15975 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB VM DIAGNOSIS: 10:09:10 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88804f2e7760 RCX=1ffff11009e5ce01 RDX=1ffff11009e5ceec RSI=ffff88804f2e7ea8 RDI=ffff88804f2e7760 RBP=ffff88804f2e77e8 RSP=ffff88804f2e7748 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000032042 R11=1ffff11009e5ced9 R12=ffff88804f2e7818 R13=0000000000000000 R14=ffff888053b33480 R15=0000000000000020 RIP=ffffffff81106eda RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc2e090d700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbc9fb99550 CR3=000000004b18a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=000000000ddd062a EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000000000ff00000000000000 XMM02=00000000ff0000000000000000000000 XMM03=00ff00000000000000000000ff000000 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055f3f02187d0000055f3f0251ca0 XMM06=000055f3f02112c00000000300000004 XMM07=00000000000000000000000000000000 XMM08=7269762f736563697665642f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000020000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000007 RBX=0000000000000001 RCX=ffffffff8310c894 RDX=0000000000000007 RSI=ffffffff85c59c62 RDI=ffffffff858a770c RBP=ffff888048b7f85d RSP=ffff888048b7f720 R8 =ffffffff85c59c62 R9 =ffffffff85c59c8c R10=0000000000032042 R11=1ffff1100916fef2 R12=ffffffff858a7724 R13=ffff888048b7f828 R14=1ffff1100916fef2 R15=ffffffff8310c894 RIP=ffffffff81106a80 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbc9f7058c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f3f0238060 CR3=000000000e006000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff0000000000000000000000000000 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055f3f02656e0000055f3f024bb40 XMM06=000055f3f0254a60ffffffff00000000 XMM07=00000000000000000000000000000000 XMM08=20202020203a657a697320656c696600 XMM09=00000000000000000000000000000000 XMM10=00000000000020000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000